Privacy policy

Privacy Policy: Cristallo

Last updated: November 9, 2025

Cristallo is committed to protecting your privacy and personal data. This Privacy Policy explains what data the website collects, what the data is used for, who it may be shared with, how long it is kept, and what rights you have regarding the processing of your data.

This Policy applies to personal data processed through the website, as well as through communication by phone, email and other channels related to our business.

1. Data controller (who processes the data)

The controller of personal data is:

ANDRIJA JEVTIĆ PR RADNJA ZA IZRADU PREDMETA OD STAKLA CRISTALLO NIŠ

Registered address: Rudnička 20B, Palilula, 18000 Niš, Republic of Serbia

Company registration number: 68307481

Tax ID (PIB): 115361508

Email: cristalloluxury@gmail.com

Phone: +381 60 1546 404

2. What data we collect

We collect the data needed for communication, handling inquiries and orders, delivery and meeting legal obligations, including:

Identification and contact details: first and last name, email address, phone number
Delivery and service details: address, city, postal code, delivery notes; where needed, data relevant to made-to-measure fabrication (for example, measurements you provide)
Order and communication data: the content of inquiries, messages sent through the form or by email, order history, complaints
Payment data: data needed to process and record payments (note: card numbers and similar data are not stored when payment is made through payment processors; they are processed by the payment institution)
Technical and website usage data: IP address, cookie identifiers, device and browser type, data about visits and interaction with content

Cristallo does not knowingly collect data about minors without the consent of a parent or guardian.

3. Legal basis for processing (why processing is permitted)

Data is processed in accordance with the Law on Personal Data Protection of the Republic of Serbia, on the following grounds:

taking steps at your request before entering into a contract and/or performance of a contract (for example, handling inquiries, preparing quotes, fulfilling orders, delivery)
compliance with legal obligations (for example, issuing invoices, fiscalization, accounting obligations, handling complaints)
legitimate interest (for example, basic visitor analytics to improve the website and its security, preventing misuse)
consent, where applicable (for example, certain types of cookies or marketing, if used and if consent has been given)

4. How we use the data we collect

Data is used for the following purposes:

handling inquiries, preparing quotes and arranging the work
processing and delivering orders
communication and customer support
sending service and operational notices (order status, scheduling appointments, complaints)
meeting legal obligations (invoices, fiscalization, bookkeeping)
improving website functionality, security and preventing misuse

5. Do we share data with third parties

Data is not sold or transferred to third parties for marketing purposes.

Data may be passed on to third parties only when necessary to provide the service or meet obligations, for example:

courier and transport services (delivery)
payment institutions and banks (payment processing)
bookkeeping service (accounting obligations)
government authorities when there is a legal obligation to do so

Appropriate data protection measures are agreed upon with partners and processors.

6. Transfer of data abroad

If third-party tools or services are used (for example, hosting, analytics, email infrastructure) that involve processing or storing data outside the Republic of Serbia, the transfer is carried out with appropriate safeguards in line with regulations (for example, standard contractual clauses and/or other protection mechanisms, depending on the service provider).

7. Cookies

The website may use cookies and similar technologies for:

basic website functionality (essential cookies)
statistics and website improvement (analytics cookies, if used)
additional features (for example, remembering preferences)

Cookie settings can be controlled through your web browser settings. Disabling certain cookies may affect how the website works.

If a cookie banner is used (recommended), consent is requested for cookies that are not essential.

8. Data retention periods

Data is kept for as long as necessary for the purposes of processing, and at most:

for handling inquiries and orders and any complaints: for the duration of the relationship and a reasonable period afterward
data that is part of accounting records: for the periods set by the relevant regulations
technical and log data: for reasonable periods, for security and system operation
data processed on the basis of consent: until consent is withdrawn (where applicable)

9. Data security

We apply technical and organizational safeguards to prevent unauthorized access, loss, alteration or misuse of data. Despite these safeguards, no system is completely risk-free, so absolute security of transmission over the internet cannot be guaranteed.

10. Rights of data subjects

In accordance with the Law on Personal Data Protection, you have the right to:

request access to your data
request correction of inaccurate data or completion of incomplete data
request erasure of your data (when the conditions are met)
request restriction of processing (when the conditions are met)
file an objection to processing based on legitimate interest
request data portability (where applicable)
withdraw consent (when processing is based on consent), without affecting the lawfulness of processing before the withdrawal

Requests can be sent by email to: cristalloluxury@gmail.com.

Cristallo may ask for additional information to confirm your identity before acting on a request.

11. Right to lodge a complaint with the supervisory authority

If you believe your data is being processed in violation of regulations, you can file a complaint with the supervisory authority:

Commissioner for Information of Public Importance and Personal Data Protection (Republic of Serbia).

12. Changes to this Privacy Policy

Cristallo may update this Privacy Policy from time to time. Changes take effect when published on the website, and the last updated date is revised accordingly.