Privacy Policy

This Privacy Policy sets forth the principles and practices governing the collection, use, and protection of personal data by Vesna Kracanovic (“we,” “us,” or “our”) through the website vesnakracanovic.com (“Website”). Your privacy and the security of your personal information are of paramount importance to us. We are committed to processing your personal data responsibly and in accordance with the highest standards of data protection, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

1. Purpose and Commitment to Privacy

At vesnakracanovic.com, we are dedicated to safeguarding the privacy and personal data of our visitors, users, and customers. This Privacy Policy explains how we collect, use, disclose, and protect your personal data, as well as your rights concerning your information. By using this Website, you acknowledge and agree to the practices described in this policy.

2. Scope & Role of Data Controller

This Privacy Policy applies to all personal data collected through vesnakracanovic.com and associated communications. For the purposes of applicable data protection laws, the data controller is Vesna Kracanovic. We determine the purposes and means of processing your personal data.

3. Categories of Data We Process

We process a variety of personal data categories which may include:

– Usage Data
Information automatically collected when you interact with the Website, such as IP addresses, browser type and version, browsing timestamps, pages viewed, session durations, and referring URLs.

– Account Data
Information you provide to register or maintain an account, subscribe to updates, or interact with the Website, including your full name, email address, mailing address, and phone number.

– Profile Data
Details related to your Website behavior and preferences, including purchase history, product interests, service preferences, and behavioral patterns on vesnakracanovic.com.

– Communication Data
Data resulting from your communication with us, whether via email, contact forms, or customer support channels. This includes support tickets, inquiries, and contact history.

– Technical Data
Device-related information such as operating system, device type, language settings, plug-ins, screen resolution, and system diagnostics.

– Transaction Data
Payment and transaction information, such as billing address, payment card details (processed securely by third-party providers), order numbers, and shipping addresses.

– Preference Data
Marketing consent records, opt-in/opt-out preferences, and stated interests in particular products or services.

4. Legal Bases for Processing

We only process your personal data where a lawful basis applies under relevant data protection laws. Depending on the nature of the interaction, we rely on the following legal bases:

– Contractual Necessity: To provide requested products or services, perform obligations under terms of service, or communicate about your account.

– Consent: Where explicitly given, particularly for marketing communication, newsletter subscriptions, and cookie storage.

– Legitimate Interests: To improve our services, analyze performance, detect fraud, and operate our business, provided such interests are not overridden by your data protection rights.

– Legal Obligations: As required by applicable laws, regulations, or legal proceedings.

5. Your Data Protection Rights

You have the following rights regarding your personal data, subject to applicable limitations:

– Access: Request access to the personal data we hold about you.
– Rectification: Request correction of incomplete or inaccurate data.
– Erasure: Request deletion of your personal information (“right to be forgotten”).
– Restriction: Request that we restrict the processing of your data under certain conditions.
– Portability: Receive your data in a structured, commonly-used, and machine-readable format, or request its transmission to a third party.
– Objection: Object to processing based on our legitimate interests or for direct marketing purposes.
– Withdrawal of Consent: Withdraw previously given consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at [email protected].

6. Security Measures

We employ a range of technical and organizational measures to ensure the confidentiality, integrity, and availability of your personal data, including but not limited to:

– Secure Sockets Layer (SSL) encryption for data transmission
– Firewall and intrusion detection mechanisms
– Role-based access controls and authentication protocols
– Regular data backups and recovery planning
– Staff training in privacy and data protection practices

Despite our efforts, no system can guarantee complete security. We urge you to use strong passwords and maintain the confidentiality of your account credentials.

7. International Data Transfers

We may transfer your personal data to countries outside of your country of residence, including to servers and service providers located in jurisdictions that may not offer the same level of data protection. Where such transfers occur, we ensure appropriate safeguards, such as:

– Standard Contractual Clauses approved by the European Commission
– Certified adherence to frameworks such as the EU-U.S. Data Privacy Framework, where applicable

You may request a copy of the safeguards in place for international transfers by contacting us.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, including:

– Transaction Data: Retained for up to 7 years for accounting and tax compliance
– Account Data and Profile Data: Retained as long as you maintain an active account plus 2 years
– Communication Data: Retained for 2 years from the last interaction
– Marketing Preferences: Retained until consent is withdrawn or updated

Once the retention period expires, data is securely deleted or anonymized.

9. Cookie Policy

Our Website uses cookies and similar tracking technologies for several purposes:

– Essential Cookies: Required for core functionality such as authentication and security.
– Functional Cookies: Enable enhanced functionality like remembering preferences.
– Analytics Cookies: Help us understand website usage and improve performance.
– Performance Cookies: Monitor Website responsiveness and detect technical issues.

10. Cookie Management & Compliance

Upon your first visit to vesnakracanovic.com, a cookie banner allows you to manage your cookie preferences. You can modify these settings at any time through your browser configurations or our cookie preference tools. We obtain explicit consent for non-essential cookies, thereby complying with GDPR requirements. Residents of California are entitled under CCPA to opt out of the “sale” of personal information—while vesnakracanovic.com does not sell data for monetary value, we honor such preferences.

11. Protection of Children’s Data

The Website is not intended for children under the age of 13. We do not knowingly collect or process personal data from anyone under that age. If we become aware that a minor’s information has been collected without verified parental consent, we will promptly delete such information.

12. Policy Updates

We reserve the right to amend this Privacy Policy at any time to reflect changes in legal obligations, technology, or business operations. Any significant changes will be communicated through the Website or via direct communication. Your continued use of vesnakracanovic.com after such updates constitutes acceptance of the revised policy.

13. Contact Information

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your data protection rights, please contact us at:

Email: [email protected]

We are committed to ensuring that your privacy is respected and protected in accordance with applicable laws. Please contact us with any concerns, and we will promptly and appropriately address them.