Privacypolicy

1. Introduction

This Privacy Policy explains what personal data we collect on www.zapletrakija.rs, why we collect it and how we protect it. The data controller is Zaplet spirit DOO (the Zaplet brand), Nova 110 15, 11120 Belgrade (Palilula), Serbia; business activity: Wholesale of beverages; activity code: 4634; registration number: 22170520; tax identification number (PIB): 115526576; website: www.zapletrakija.rs; e-mail: vladimir.puric@cherryhill.rs; phone: +381 62 389 039. We process data in accordance with the Serbian Law on Personal Data Protection (ZZPL) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. What data we collect

When you place an order we collect your first and last name, delivery and billing address, phone number and e-mail address, together with the details of the order itself. When you subscribe to the newsletter we collect your e-mail address and, if you provide it, your name. While you use the site, technical data (IP address, device and browser type) and the cookies described in the Cookie Policy are processed automatically.

If you choose to pay by card, you enter the card details only on Banca Intesa’s secure hosted payment page, with additional 3-D Secure authentication where required by the card-issuing bank. Zaplet does not receive or store the full card number, security code or other authentication credentials. We receive only the information needed to confirm the payment status and match the transaction to your order, such as transaction identifiers, the authorisation code, status and transaction date.

3. Purposes and legal basis

We process data in order to: perform a contract (receiving, processing and delivering your order, complaints handling); comply with legal obligations (accounting, tax rules, regulations on the sale of alcoholic beverages); protect our legitimate interests (site security, abuse prevention); and on the basis of your consent (newsletter, analytics and marketing cookies). You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Age verification

The site sells alcoholic beverages and is intended exclusively for persons aged 18 or older. Your answer to the age question is stored only as a confirmation cookie on your device — we do not store your date of birth or any other age data.

5. Who we share data with

We share data only with trusted recipients and processors that provide services to us: courier companies (for delivery), Banca Intesa and participants in the card-payment system when you choose to pay by card, hosting and infrastructure providers, Mailchimp (newsletter, only with your consent) and Cloudflare Turnstile (form abuse protection). Each recipient receives only the data required for the relevant service. We may disclose data to competent authorities where legally required. We never sell personal data.

6. Retention

Order data is retained for the periods required by accounting and tax regulations. Newsletter data is retained until you withdraw consent. Cookies have the lifetimes listed in the Cookie Policy.

7. Your rights

You have the right of access, rectification, erasure and data portability, the right to restrict processing and to object, and the right to withdraw consent. Requests can be sent to vladimir.puric@cherryhill.rs. You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

8. Data security

We apply appropriate technical and organisational safeguards: encrypted communication (HTTPS), restricted access to data and regular system updates. No transmission over the internet is completely secure, but we protect data in line with good practice.

9. Changes and contact

We may update this policy from time to time; the current version is always published on this page. For any data protection questions, write to vladimir.puric@cherryhill.rs.