Privacy Policy

1. Data controller

The controller of your personal data is:

• Company name: Menjačnice GAGA NTN
• Registered address: Hadži Ruvimova 10, 21000 Novi Sad
• Tax ID (PIB): 106574382
• Company registration number: 61285962
• Phone: 064 232 02 03
• E-mail: menjacnicegaga@gmail.com

2. What data we collect

When you place an order we collect the data necessary to perform the sale and to meet our legal obligations:

• First and last name, e-mail address and telephone number.
• Delivery address, or the branch you select for collection.
• For private individuals: national identification number (JMBG) and the address on your identity document.
• For businesses: company name and tax ID (PIB).
• Order data: products ordered, quantities, prices and total amount.
• When you contact us by phone or e-mail: the information you provide to us.

3. Why we ask for your JMBG

We request the JMBG and the details from your identity document solely for purchases of investment gold and silver.

The legal basis is compliance with a legal obligation — the regulations on trade in investment gold and on the prevention of money laundering and terrorist financing require the seller to keep records identifying the buyer. This data is therefore not processed on the basis of consent, and providing it is a condition of concluding the sale.

Only authorised staff can access this data, in a password-protected administrative area. We do not use it for any other purpose and do not share it with third parties except where the law expressly requires.

4. Legal basis for processing

• Performance of a contract — data needed to fulfil the order, deliver the goods and handle complaints.
• Compliance with a legal obligation — tax rules, investment gold trading rules and anti-money-laundering rules.
• Legitimate interest — protecting the system against abuse and responding to your enquiries.
• Consent — only where explicitly requested; you may withdraw consent at any time.

5. How long we keep data

• Order and invoice data is kept for as long as tax and accounting rules require.
• Investment gold transaction records are kept for the periods those regulations prescribe.
• Complaint records are kept in accordance with the Consumer Protection Act.
• Enquiries that do not lead to an order are kept only as long as needed to reply.

6. Who we share data with

We do not sell your data and do not share it with third parties for marketing. We share it only with those involved in fulfilling your order:

• The courier service — only the data needed for delivery, and only if you chose delivery to an address.
• Our bank — in connection with recording your payment.
• IT maintenance providers — only as far as necessary for maintenance, under a duty of confidentiality.
• Competent state authorities — where there is a legal obligation to do so.

7. Automated assistant (chatbot)

An automated assistant is available on the site. Most questions are handled within our own system, using data from the website.

Questions that cannot be handled that way are forwarded to OpenAI, which generates the answer. Please therefore do not enter your JMBG, document numbers, account details or other sensitive data into the chat.

The assistant's answers are informational and do not constitute advice. In the current version of the system, chat content is not stored in our database.

8. Cookies and local storage

This site uses no analytics, tracking or advertising cookies. We do not use Google Analytics or similar services, and we set no marketing pixels.

The only cookie we set is the administrative login cookie, intended solely for our staff.

• Your basket and its current price quote are stored in your browser's local storage, under the keys gaga_cart_v1 and gaga_cart_quote_v1.
• Details you type into the checkout form are held temporarily in sessionStorage so you do not lose them on refresh; they are cleared when you close the tab.
• The JMBG and PIB are deliberately excluded from that temporary copy of the form.
• This data stays on your device and is not sent to our server on its own; it reaches us only when you submit an order. You can remove it by clearing site data in your browser.

9. Your rights

Under the Personal Data Protection Act you have the right to:

• access the data we process about you,
• have inaccurate data corrected and incomplete data completed,
• have data erased where there is no longer a basis for processing it,
• restrict processing and object to processing,
• data portability,
• withdraw consent where processing is based on consent.
• You can submit a request to menjacnicegaga@gmail.com or to Hadži Ruvimova 10, 21000 Novi Sad.
• You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade.

10. Data security

Data is transmitted over a secure connection and stored in a database accessible only to authorised staff with password login. Access to order data is limited to employees who need it to process orders.

11. Changes to this policy

We may amend this policy. The current version and the date of the last change are always published on this page.

Verzija ovog dokumenta na srpskom jeziku je merodavna. Prevodi su informativnog karaktera.