Privacy Policy

Version: 1.0 • Effective from: 01. 09. 2025

In this privacy policy ("Policy"), we explain how Prodajem Auto d.o.o. ("we", "us", "Platform") collects, uses, stores, shares, and protects your personal data when using the website prodajemauto.rs and all related services ("Services"). This Policy also describes your rights regarding data protection, in accordance with the laws of the Republic of Serbia and European GDPR standards.

1. Scope and Changes of the Policy

This Policy applies to all users of the website prodajemauto.rs – including search, posting and managing ads, user accounts, communication, payments, and support. The Policy may be changed from time to time, and the new version with the effective date will be publicly announced. We will notify users of any significant changes via email or on the website.

2. Data Controller

The data controller in terms of the Law on Personal Data Protection and GDPR is:
PRODAJEM AUTO DOO
Kralja Aleksandra Obrenovića 41/20
11400 Mladenovac, Serbia
Company ID: 22055780, VAT: 114684894

3. Privacy Contact

For any questions or to exercise your rights regarding personal data, contact us at:

Email: [email protected]
By mail: to the above address (with the note "Data Protection")

4. What Data We Collect

We collect data you enter yourself, data generated automatically through the use of Services, via cookies, and publicly available or partner sources.

4.1. Data You Enter

Identification and contact data (name, surname, address, phone, email)
Account data (username, password, profile picture)
Ad content: text, photos, video, VIN
Messages, reviews, saved searches
Order and payment data (status, amount; card data is NOT stored, processing is done by the payment processor)
Voluntary data through contact forms and support

4.2. Data We Collect Automatically

Usage information (search history, ad views, interactions with features)
Location data (based on IP address; more precise location only with your permission)
Technical data: IP address, device, browser type, OS, language, access time, referring page

4.3. Cookies and Similar Technologies

We use necessary, functional, analytical, and (with consent) marketing cookies for proper functioning, statistics, and service improvement. Read more in the Cookie Policy and on the Privacy Settings page.

4.4. Data from Other Sources

When permitted by law, we may use publicly available data or partner data (e.g., for payment verification, geolocation, translation) to improve service and security.

5. Purposes and Legal Basis for Processing 5.1. Contract Execution (Art. 12 ZZPL / Art. 6(1)(b) GDPR)

Enabling and maintaining user accounts
Publishing and managing ads
Communication between users (buyer/seller)
Payments and invoicing (via partner processor)

5.2. Legal Obligations (Art. 12(1)(3) ZZPL / Art. 6(1)(c) GDPR)

Tax, accounting, and regulatory obligations
Responses to government authorities when legally required

5.3. Legitimate Interest (Art. 12(1)(6) ZZPL / Art. 6(1)(f) GDPR)

Improving platform security (fraud prevention, spam)
Analytics and service functionality improvement
Legal protection, complaint and dispute resolution

5.4. Consent (Art. 15 ZZPL / Art. 6(1)(a) GDPR)

Processing requiring your explicit consent (e.g., marketing cookies, promotional communications, precise location)

6. Who We Share Data With

We may share data with trusted partners and processors solely for the purpose of service operation:

Hosting and IT support
Payment processors (e.g., WSP ay) – card data is processed and stored solely on their side, according to PCI DSS standard
Partners for geolocation, mapping, translations (e.g., Google Maps)
Analytics and security (e.g., IP info)
Competent authorities – only by legal obligation

A detailed and up-to-date list of partners is available on the pages /partners and /cookie-statement.

7. International Data Transfer

If data is transferred outside Serbia/EU, we will ensure adequate safeguards, including EU standard contractual clauses, in accordance with applicable legislation.

8. Data Retention Period

We retain data as long as necessary to fulfill the purposes of processing, or as required by legal obligations (e.g., tax/accounting deadlines). After these periods, data is deleted or anonymized. In case of a dispute or legal impediment, processing is restricted.

9. Your Rights

You have the following rights regarding personal data:

Access, correction, deletion, and restriction of processing
Right to data portability
Objection to processing based on legitimate interest
Withdrawal of consent (for processing based on consent)
Submitting a complaint to the Commissioner for Personal Data Protection

To exercise your rights, contact us at [email protected] or via the contact form on the website.

10. Cookies and Settings

You can change cookies and your privacy settings at any time via the /consent page or browser settings. By rejecting marketing cookies, you can still see ads, but they will not be personalized.

11. Data Security

We implement appropriate technical and organizational protection measures (encryption, firewall, access control, monitoring) to protect your data from unauthorized access, misuse, or loss.

12. Communication and Automatic Filtering

Messages exchanged through the platform may be automatically filtered to protect against spam and abuse. In certain cases, support may access messages to ensure security and compliance with terms of use.

13. Minors

Use of the service is not allowed for individuals under 15 years of age. We do not knowingly collect data from minor users.

14. Staying Logged In

If you remain logged in on a shared device, other users of that device may have access to part of your account. We recommend logging out and deleting cookies after use.

15. Additional Information

For all additional information, also see: Terms of Use, Cookie Policy, and the Partners page.
This policy is updated periodically. The effective date is indicated at the top of the page.

For any questions or to exercise your rights, contact us at [email protected].