Privacy Policy

GENERAL PROVISIONS

This Privacy and Personal Data Protection Policy governs the manner in which TIGAR AD PIROT (hereinafter referred to as the “Company”) collects, uses, processes, stores, and protects the personal data of users of the www.tigar.com website, as well as other individuals whose personal data may be processed when using the website.

The Company places particular importance on protecting the privacy and security of personal data and processes such data in accordance with the applicable laws and regulations of the Republic of Serbia.

This Privacy Policy applies to data collected directly from the data subject, as well as certain data that may be collected automatically when using the website.

By using the website, users can familiarize themselves with this Privacy Policy and the manner in which their personal data is processed.

In accordance with applicable regulations, the Company determines the purposes and means of processing personal data for which it is responsible.

Where a Data Protection Officer has been appointed for specific processing activities, their contact details are available on the Company’s website or may be obtained using the contact information provided in this Privacy Policy.

TYPES OF PERSONAL DATA WE MAY COLLECT

Depending on how the user interacts with the website, the Company may process the following categories of personal data:

  • first and last name;
  • contact details, such as email address and telephone number;
  • information contained in messages, inquiries, or requests submitted by the user to the Company;
  • information necessary to respond to an inquiry or fulfill a request;
  • information relating to communications with the Company;
  • technical information about the user’s device and web browser;
  • IP address, where processed for the purposes of the technical operation and security of the system;
  • information about the use of the website;
  • data collected through cookies and similar technologies, in accordance with the user’s settings and consent, where such consent is required.

The Company does not collect more personal data than is necessary to achieve a specific and lawful purpose of processing.

PURPOSES OF DATA PROCESSING

Personal data may be processed for the following purposes:

  1. ensuring the proper functioning of the website;
  2. responding to users’ inquiries, requests, and messages;
  3. communicating with users;
  4. providing information about products and services where an appropriate legal basis exists;
  5. carrying out business activities and entering into or performing contracts;
  6. complying with the Company’s statutory and other legal obligations;
  7. protecting the rights, property, and security of the Company;
  8. preventing misuse and unauthorized access;
  9. improving the functionality and security of the website;
  10. analyzing website usage where such processing is permitted or based on an appropriate legal basis;
  11. establishing, exercising, and protecting the Company’s legal claims;
  12. other lawful purposes for which an appropriate legal basis exists.

LEGAL BASIS FOR PROCESSING

The Company processes personal data only where there is an appropriate legal basis for doing so.

The legal basis for processing may include:

  • the performance of a contract or taking steps at the request of the data subject prior to entering into a contract;
  • compliance with a legal obligation of the Company;
  • the pursuit of the legitimate interests of the Company or a third party, where the applicable legal requirements are met;
  • the consent of the data subject, where consent constitutes an appropriate legal basis;
  • any other legal basis provided for under applicable laws and regulations.

Where processing is based on consent, the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

COLLECTION OF DATA THROUGH THE CONTACT FORM

If the website contains a contact form, users may be asked to provide information such as their first and last name, email address, telephone number, and the content of their message.

This information is used to respond to inquiries, communicate with users, and take appropriate action in connection with their requests.

Users are responsible for the accuracy of the information they provide and should not submit information that is not necessary for the specific purpose of the communication.

AUTOMATIC COLLECTION OF TECHNICAL DATA

When accessing the website, certain technical data may be processed automatically to the extent necessary for the website’s operation and security.

Such data may include the IP address, device type, operating system, web browser, date and time of access, technical identifiers, and information about how the website is used.

This data may be used in particular for:

  • ensuring the technical operation of the website;
  • protecting against misuse;
  • detecting and preventing security incidents;
  • maintaining and improving the website;
  • troubleshooting technical issues.

7.0 COOKIES

The website may use cookies and similar technologies.

Some cookies may be necessary for the proper functioning of the website, while certain types of cookies may be used for analytics, personalization, or other functionalities.

Where the user’s consent is required for the placement or use of a particular type of cookie, such consent will be obtained before processing takes place, in accordance with applicable laws and regulations.

Users can manage cookies through their web browser settings or, where applicable, through the consent management mechanism available on the website.

RECIPIENTS OF PERSONAL DATA

The Company may grant access to personal data only to those employees, associates, and other persons who require such access for a specific and lawful purpose.

Where necessary, personal data may be disclosed to:

  • IT and hosting service providers;
  • website maintenance service providers;
  • providers of other technical services;
  • business partners where necessary for the performance of a contract or another lawful purpose;
  • government authorities and other competent institutions where required by law;
  • other recipients where an appropriate legal basis exists.

The Company seeks to enter into appropriate agreements with data processors and to ensure that the necessary data protection measures are implemented.

TRANSFER OF DATA TO OTHER COUNTRIES

If, in connection with the use of certain services, personal data is transferred or access to personal data is provided outside the Republic of Serbia, the Company will carry out such transfer only where the conditions prescribed by applicable laws and regulations are met.

Where necessary, the Company will take appropriate measures to ensure the lawfulness and security of such transfers.

DATA RETENTION PERIOD

The Company retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or for the periods required by the Company’s legal obligations.

The retention period may depend on:

  • the purpose of processing;
  • the type of data;
  • the nature of the business relationship;
  • legal obligations;
  • limitation periods for establishing, exercising, or protecting legal claims.

Upon expiry of the applicable retention period, personal data will be deleted, destroyed, or anonymized, unless another lawful basis exists for its continued retention.

RIGHTS OF DATA SUBJECTS

In accordance with applicable laws and regulations, data subjects may have the following rights:

  • the right to be informed about the processing of their personal data;
  • the right of access to their personal data;
  • the right to rectify inaccurate or complete incomplete personal data;
  • the right to erasure of personal data, where the applicable legal requirements are met;
  • the right to restriction of processing, where the applicable legal requirements are met;
  • the right to data portability, where applicable;
  • the right to object to processing, where applicable;
  • the right to withdraw consent where processing is based on consent;
  • the right to lodge a complaint with the competent data protection authority.

The exercise of these rights may be subject to limitations in the cases and under the conditions prescribed by law.

HOW TO EXERCISE YOUR RIGHTS

Requests to exercise any of the above rights may be submitted to the Company via:

Email: kabinet@tigar.com
Address: TIGAR AD PIROT, 197 Nikole Pašića St.

The Company will review and respond to requests in accordance with applicable laws and regulations.

To protect privacy and prevent unauthorized access to personal data, the Company may, before taking action on a request, take appropriate steps to verify the identity of the person submitting the request, to the extent justified and permitted by law.

DATA SECURITY

The Company implements appropriate technical and organizational measures to protect personal data against:

  • unauthorized access;
  • unauthorized disclosure;
  • loss;
  • destruction;
  • alteration;
  • unauthorized or unlawful processing.

Security measures are adapted to the nature, scope, and risks associated with the processing of personal data.

Despite the measures implemented, no electronic communication or data storage system can guarantee absolute security.

DATA RELATING TO CHILDREN

The website is not intended to collect personal data relating to children, except where such processing is permitted and carried out in accordance with applicable laws and regulations.

If the Company becomes aware that a child’s personal data has been collected in a manner that does not comply with the law, it will take appropriate measures in accordance with applicable regulations.

LINKS TO THIRD-PARTY WEBSITES

The website may contain links to third-party websites.

The Company is not responsible for the content, security, data processing practices, or privacy policies of third-party websites.

Users are advised to review the privacy policies and other relevant terms of such websites before using them.

SOCIAL MEDIA AND OTHER THIRD-PARTY SERVICES

Where the Company uses social media profiles, analytics tools, communication services, video content, maps, or other third-party services, the processing of personal data may also be governed by the policies and terms of the relevant service providers.

Users are advised to familiarize themselves with the privacy policies of the respective service providers.

PROCESSING OF DATA WHEN CONTACTING THE COMPANY

Personal data provided to the Company by email, telephone, contact form, or other communication channels may be processed for the purpose of responding to inquiries, maintaining communication, fulfilling requests, and protecting the Company’s rights and interests, where an appropriate legal basis exists.

The Company will not use the personal data provided for other incompatible purposes without an appropriate legal basis.

PROTECTION OF RIGHTS

The Company may process certain personal data where such processing is necessary for the purposes of its legitimate interests, including the protection of property, information systems and networks, prevention of misuse, fraud prevention, the safety and security of users and employees, and the establishment, exercise, or defense of legal claims.

In doing so, the Company takes care to ensure that the interests, rights, and freedoms of data subjects are not unjustifiably affected.

CHANGES TO THE PRIVACY POLICY

The Company may periodically amend or supplement this Privacy and Personal Data Protection Policy to reflect changes in applicable laws and regulations, business processes, technology, or the operation of the website.

The updated version of the Privacy Policy will be published on the Company’s website. The date of the most recent update will be indicated at the beginning of the document.

RIGHT TO LODGE A COMPLAINT

Any person who believes that their rights relating to the processing of personal data have been infringed has the right to lodge a complaint with the competent data protection authority in accordance with applicable laws and regulations.

This right does not affect any other rights or legal remedies available to the individual under applicable law.

CONTACT

For any questions regarding the processing and protection of personal data, you may contact the Company: