Privacy policy

This Privacy Policy describes what personal data is collected by Pčelarstvo Jevtić, a family agricultural holding based in the village of Mračaj, Prnjavor municipality, Republika Srpska, Bosnia and Herzegovina (Tax ID / JIB: [JIB]), acting as data controller (referred to below as "we", "us"), when you visit and use the online store at pcelarstvo-jevtic.ba, for what purposes that data is used, and what rights you have in relation to it.

Depending on how you use the Store, we collect the following categories of data:

• Order data: first and last name, delivery address, email address, phone number, and order contents - required to process and deliver your order.
• Account data: email address and password (in encrypted form), if you choose to create a customer account to track your orders.
• Contact form data: name, email address, and the content of the message you send us via the Contact page.
• Newsletter data: email address, if you voluntarily sign up to receive news and offers.
• Payment data: when paying by card, card details are processed exclusively by Stripe, our payment service provider - we never see, receive, or store card numbers on our servers.
• Technical data: IP address and basic browser/device information automatically logged for site security and fraud prevention.

We process your data for the following purposes:

• Performing the sales contract - processing, preparing, and delivering your order, and communicating about it.
• Managing your account - enabling access to your order history and saved delivery details.
• Responding to inquiries - communication via the contact form or email.
• Sending the newsletter - informing you about new products and offers, only with your prior consent.
• Fulfilling legal obligations - keeping accounting and tax records in accordance with the regulations of Bosnia and Herzegovina.
• Preventing abuse and ensuring security - protecting the Store from fraud and unauthorized access.

Our processing of your data is based on: performance of a contract (processing orders), your consent (newsletter, non-essential cookies), legal obligation (accounting records), and our legitimate interest (fraud prevention, improving the site).

The Store uses cookies - small text files stored on your device to enable the site to function correctly and to improve the user experience.

• Essential cookies - enable core functions such as the shopping cart, account login, and language selection; without them the site would not work correctly.
• Analytics cookies - help us understand how visitors use the site, so we can improve content and performance.
• Language and region cookies - remember your selected language (Serbian/English) so you do not have to choose it again on your next visit.

You can manage cookies through your browser settings, including deleting or blocking them. Please note that disabling essential cookies may affect the functioning of certain parts of the site (e.g. the shopping cart).

We do not sell your data to third parties. We share certain data only with trusted service providers, to the extent necessary to deliver our services:

• Stripe - card payment processing; Stripe receives and stores card data in accordance with the PCI DSS standard, and we never have access to it.
• Courier service - name, address, and phone number necessary to deliver your order.
• Hosting and email service providers - technical support for running the site and sending email notifications (order confirmations, newsletter).

We may disclose data to competent authorities where legally required (e.g. for tax or inspection purposes).

We keep order and invoice data for as long as required by the accounting and tax regulations of Bosnia and Herzegovina. Data submitted via the contact form is kept for as long as needed to resolve your inquiry, and for no longer than 12 months from the last contact. We keep your newsletter email address until you unsubscribe.

Regarding your personal data, you have the right to:

• request access to the data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data ("right to be forgotten"), unless we are legally required to retain it (e.g. accounting records);
• restrict or object to certain forms of processing, including direct marketing;
• withdraw given consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• request data portability in a structured, commonly used format.

Requests relating to the rights above can be sent to info@pcelarstvo-jevtic.ba. We will respond as soon as possible, and no later than within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (AZLP) if you believe the processing of your data does not comply with the applicable regulations.

We apply appropriate technical and organizational measures to protect your data, including encrypted (HTTPS) communication between your browser and our servers, and access to data limited to staff who need it to do their job. Card payments are processed exclusively through Stripe, a PCI DSS-certified payment provider, so we never come into possession of your full card number.

The Store is not intended for children under the age of 18. We do not knowingly collect personal data from minors without parental or guardian consent. If we learn that we have collected data from a minor without appropriate consent, we will delete it without delay.

We may update this Privacy Policy from time to time; the date of the last amendment will be shown at the top of this page. We recommend checking this page periodically to stay informed of any changes.

For any questions about this Privacy Policy or to exercise your rights, contact us at info@pcelarstvo-jevtic.ba or through the contact form on the Contact page.