This policy explains what data we collect when you shop at shop.smsvaga.com, why we collect it, and what rights you have. We process personal data in accordance with the Serbian Personal Data Protection Act and, for customers in the European Union, the General Data Protection Regulation (GDPR).
Who processes your data
| Data controller | OPTICAL d.o.o. |
| Address | Vladimira Ćorovića 22, 37000 Kruševac, Serbia |
| Tax / company number | 106489673 / 20613416 |
| Data protection contact | smsvaga@gmail.com |
What data we collect
When you place an order
- first and last name
- delivery address
- phone number
- e-mail address
- details of the goods ordered and the amount
- for companies: company name, tax number and company number
When you open an account
- username and password (the password is stored encrypted — we never see it)
- your order history
Automatically, while you browse the shop
- IP address, device and browser type
- pages you visited
- data from cookies — see the Cookie policy
Why we process it, and on what basis
| Processing and delivering your order | performance of a contract |
| Issuing invoices and keeping books | legal obligation |
| Handling complaints and warranty | legal obligation |
| Answering your questions | legitimate interest |
| Basic visitor statistics | legitimate interest |
| Newsletter, if you sign up | your consent |
Who we share it with
We do not sell your data and we do not pass it to third parties for marketing. We share it only where it is necessary:
- the courier or postal service — name, address and phone, in order to deliver
- our accountants — invoice data, to meet a legal obligation
- our hosting provider — which stores the site and the database
- state authorities — where the law requires it
For deliveries outside Serbia, your name and address are passed to the postal or courier service and to the customs authorities of the destination country, as export documentation requires.
Transfers outside Serbia
Our servers are located in Serbia. Where you order from the European Union, your data leaves the EU in order to fulfil your order. Serbia is a signatory of Convention 108+ and, for such transfers, we rely on the contract with you as the basis — the transfer is necessary to perform the contract you entered into.
How long we keep it
| Invoice data and accounting records | 10 years (legal obligation) |
| Complaint records | 2 years from submission |
| Account data | until you ask us to delete it |
| Newsletter sign-up | until you unsubscribe |
Your rights
At any time you have the right to:
- request access to the data we hold about you
- ask for inaccurate data to be corrected
- ask for data to be deleted, where there is no legal basis to keep it
- ask for processing to be restricted
- object to processing based on legitimate interest
- withdraw consent you have given — without affecting processing before the withdrawal
- request data portability
Send your request to smsvaga@gmail.com. We reply without delay, and at the latest within 30 days.
If you believe your rights have been infringed, you may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection. If you are resident in the European Union, you may also lodge a complaint with the supervisory authority in your own country.
Security
The site uses an encrypted HTTPS connection. Only authorised people have access to the data. Passwords are stored encrypted.
We do not store payment card details — payment is by bank transfer, or cash on delivery within Serbia.
Children
The shop is not intended for persons under 16. We do not knowingly collect data about children.
Changes to this policy
We may update this policy. The version published on this page at any given time is the one that applies.
Last updated: July 2026.
This English text is a translation provided for convenience. The Serbian version of this page is the binding one — in case of any discrepancy, the Serbian text prevails.