Privacy Policy

General Provisions

This Privacy Policy regulates the manner in which Exspace Commerce collects, processes, and protects the personal data of users of the website available at the domain www.exspace.rs.

Personal data processing is carried out in accordance with the applicable regulations of the Republic of Serbia, including the Law on Personal Data Protection and relevant provisions of the EU General Data Protection Regulation (GDPR) where applicable.

By using this website, you confirm that you have been informed about the methods of personal data processing and the rights that belong to you.

Types of Data We Collect

In the retail section of the website, where online shopping is enabled, data required for order fulfillment is collected: name and surname, address, phone number, email address, delivery information, and other data necessary for completing the purchase.

In the wholesale section of the website, online shopping is not conducted and prices are not displayed. The wholesale catalog can only be accessed by persons granted access by the owner following prior communication, verification, and assignment of access credentials. During this process, data about the legal entity or entrepreneur may be collected, including company name, Tax ID (PIB), contact person, email address, and other information needed to assess the possibility of business cooperation. This data is used exclusively for verification, granting access, and potential offer creation.

The website may automatically collect certain technical information, such as IP address, device data, browser information, and cookies, for the purpose of improving functionality and analytics.

Purpose of Data Processing

Data collected in retail is processed for order handling, delivery realization, informing the customer about order status, providing customer support, resolving potential complaints, and fulfilling legal obligations related to electronic commerce and fiscal regulations.

Data collected in wholesale serves exclusively for identifying potential partners, verifying business identity, and communication regarding possible cooperation. Access to wholesale information is not granted anonymously and business validation is required.

In both cases, data may be used to improve the user experience, statistical analysis, and enhancement of the offer, but is never used for purposes that are not in accordance with the law or this Policy.

Data Processing and Storage

All personal data is stored securely, applying technical and organizational protection measures that prevent unauthorized access, loss, or misuse. The storage period depends on the purpose of processing: retail customer data is kept for as long as necessary for contract execution, complaint resolution, and fulfillment of legal obligations related to accounting and records. Wholesale partner data is kept for the duration and potential continuation of business cooperation or until the user requests deletion, unless there is a legal reason to keep it longer.

Access to data is restricted to authorized persons engaged in website administration, order processing, and business communication. Data is not shared with unauthorized persons.

Data Sharing with Third Parties

Customer data may be forwarded to courier services exclusively for delivery purposes, as well as to technical service providers (e.g., hosting, email services) who have a contractual obligation of confidentiality. In wholesale, data is shared only when necessary for the preparation of an offer or the realization of agreed cooperation.

No data can be sold, rented, or made available to third parties for marketing, profiling, or any type of commercial use without the explicit consent of the user.

User Rights

The user has the right to request access to their personal data at any time, the right to correction of inaccurate data, deletion of data, restriction of processing, data portability, and withdrawal of consent. The request is submitted via the contact information provided on the website and will be processed within the legal timeframe.

In case the user believes their rights have been violated, they have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

Changes to the Privacy Policy

This Privacy Policy may be amended due to changes in legal regulations, technical requirements, or improvements in website functionality. Every change will be clearly published on this page and applicable from the moment of publication.

Continued use of the website after the publication of changes is considered acceptance of the amended version of the Privacy Policy.