Privacy Policy (EN)
Last updated: 2025-12-15
This Privacy Policy explains how OD MAAR JEWELRY - VL. KOVAČEVIĆ AMRA (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you use this website and related services (the “Service”).
If you have questions, contact us via the contact form on this website or by post at the address listed below.
1) Who is responsible for your data (Controller)
Controller: OD MAAR JEWELRY - VL. KOVAČEVIĆ AMRA (sole proprietor)
Business ID (JIB): 4303810760009
Address: Grbavička broj 97, 71000 Sarajevo, Bosna i Hercegovina
E-mail: amra@jewelrymaar.com
Phone: (+387) 60 / 3271-332
2) What data we collect
We may collect the following categories of personal data, depending on how you interact with the Service:
Identity & contact data: name, email address, phone number, billing/shipping address.
Order and transaction data: products purchased, order totals, delivery details, invoice details, order status, and communications about orders.
Account/admin access data (if applicable): authentication/session data for administrators (not customers), such as session tokens.
Messages you send us: information submitted through the contact form or other channels (subject, message content, attachments if any).
Technical data: IP address, device/browser information, pages viewed, approximate location (derived from IP), referrer, and timestamps.
Cookies and similar technologies: identifiers used to remember preferences and measure traffic.
Data we do not intentionally collect
Sensitive data (e.g., health, religion, biometrics) is not required for purchases and should not be submitted.
Payment card data: if payments are handled by a third-party payment provider, we do not store full card details on our servers (see Section 6).
3) How we use your data (Purposes)
We use personal data to:
Provide the Service: display products, enable cart and checkout, create and manage orders, provide customer support.
Process and fulfill orders: prepare shipments, handle returns/refunds, send order confirmations and status updates.
Communicate with you: respond to inquiries and send service-related messages (e.g., changes to your order).
Improve and secure the Service: prevent fraud, debug issues, maintain logs, protect against abuse.
Analytics: understand website usage and improve performance and content (see Section 5).
Legal and accounting: comply with legal obligations (e.g., invoices, tax rules) and resolve disputes.
4) Legal bases (GDPR/EEA-UK guidance)
Where applicable, we process your data on the following legal bases:
Contract: to take steps at your request and to perform our contract with you (e.g., order fulfillment).
Legal obligation: to keep records required by law (e.g., accounting/tax).
Legitimate interests: to operate, secure, and improve the Service (balanced against your rights).
Consent: for non-essential cookies/analytics where required by law (you can withdraw consent at any time).
5) Cookies and analytics (Google Analytics)
We may use cookies and similar technologies to:
keep the site functioning properly (essential cookies),
remember preferences (where applicable),
measure usage and improve the Service (analytics).
Google Analytics
We may use Google Analytics to collect information about how visitors use the website (e.g., pages visited, time spent, interactions). Google may process data on our behalf as a processor and may use cookies/identifiers.
Opt-out options: You can block cookies in your browser settings and/or use Google’s opt-out tools where available.
Consent: If required in your jurisdiction, analytics cookies are set only after you consent.
6) Sharing your data (Recipients)
We may share personal data only as needed to provide the Service:
Delivery/shipping providers: to deliver your order (name, address, phone/email where needed).
Payment providers: to process payments (you share payment details directly with them when applicable).
IT and hosting providers: hosting, storage, monitoring, and email services that help run the site.
Analytics providers: such as Google Analytics (see Section 5).
Professional advisors: accountants, auditors, lawyers when necessary.
Authorities: if we are legally required to disclose information.
We do not sell your personal data.
7) International transfers
Some of our service providers may process data outside your country (including outside the EEA/UK). Where required, we use appropriate safeguards (such as Standard Contractual Clauses) and take steps to ensure an adequate level of protection.
8) Data retention
We keep personal data only as long as necessary for the purposes described above:
Order/invoice records: retained for the period required by applicable tax/accounting laws.
Customer communications: retained as needed to respond and maintain support history.
Analytics data: retained according to our analytics settings and provider policies.
When data is no longer needed, we delete or anonymize it.
9) Your rights
Depending on your location, you may have the right to:
access your personal data,
correct inaccurate data,
request deletion,
restrict or object to processing,
data portability,
withdraw consent (where processing is based on consent),
lodge a complaint with a supervisory authority.
To exercise your rights, contact us via the contact form on this website or by post at the address in Section 1. We may ask for information to verify your identity.
10) Security
We use reasonable administrative, technical, and organizational measures to protect personal data. No method of transmission or storage is 100% secure, but we work to prevent unauthorized access, disclosure, alteration, or destruction.
11) Children’s privacy
The Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us via the contact form on this website or by post at the address in Section 1 to request deletion.
12) Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date will reflect the latest revision. If changes are material, we will provide additional notice as required by law.
