Last updated: 19 October 2026.
This policy explains what personal data we collect when you use and shop on klaralinee.com, why we collect it, who we share it with, how long we keep it and what your rights are. We process data in accordance with the Personal Data Protection Act (“Official Gazette of RS”, no. 87/2018).
Who processes your data
The data controller is the seller:
- Business name: Damir Savurdić PR Klara Mood
- Registered address: Bogdana Žerajića 32, 11000 Beograd
- Tax ID: 114807172
- Registration number: 67869206
For any questions about personal data and to exercise your rights, write to us at klaracomfort25@gmail.com or send a letter to our registered address.
What data we process and why
Orders and delivery
- Data: first and last name, shipping address, phone number, email address, order note, ordered products and amount.
- Purpose: receiving and processing the order, delivery and cash-on-delivery collection, order emails, withdrawals and complaints.
- Legal basis: performance of the purchase contract (Article 12(1)(2) of the Act). Keeping business records and the complaints register is a legal obligation (point 3).
This data is necessary: without it we cannot accept and deliver the order. The IP address and browser information are also recorded automatically with every order, to prevent fake orders and abuse (legitimate interest, point 6).
Customer account
An account is optional. If you open one, we store your email address, your password (only in a protected, hashed form, so even we cannot read it), the details you save yourself (name, addresses, phone), your order history and your wishlist. The purpose is access to your account, faster checkout and an overview of your orders, and the legal basis is the service you requested (point 2).
Wishlist
If you are not signed in, the wishlist is stored only in a cookie in your browser and contains only product numbers, with no data about you. When you sign in, the list moves to your account.
Contact
When you email us, message us on Instagram or call us, we use the information you give us (name, email, phone, message content) only to reply to you and resolve your request (points 2 and 6).
Site security
To protect accounts, we count failed sign-in attempts for up to one hour, in a form from which neither the email nor the IP address can be read. The hosting provider’s server logs technical data about access to the site (IP address, time, requested page, browser). The legal basis is the legitimate interest of protecting the site and customers (point 6).
Newsletter
If you sign up for the newsletter, we use your email address only to send news and offers, and only with your consent (point 1). You can withdraw your consent at any time, using the unsubscribe link in every email or by messaging us. Withdrawal does not affect the lawfulness of sending before that.
Analytics and advertising
We currently do not use analytics or advertising tools (such as Google Analytics or Meta Pixel). If we introduce them, we will use them only with your consent and will update this policy first.
We do not make decisions based solely on automated processing, including profiling.
Who we share data with
We do not sell your data or give it to others for their marketing. We share it only with those we cannot operate without, and only as much as they need:
- the courier service: name, address, phone and the amount to collect, for delivery and cash-on-delivery collection;
- the hosting provider (Hostinger International Ltd.), whose servers in the European Union (Germany) host the site and the database;
- the email service provider through which we receive and send emails;
- the people who keep our books, to the extent needed for accounting;
- public authorities, only when required by law.
If any of these service providers processes data outside Serbia, we do so only under the conditions for transferring data to other countries set out in the Personal Data Protection Act.
How long we keep data
- Orders: five years from the end of the year in which the purchase was made (the period accounting regulations require for business records), after which we delete or anonymize them.
- Complaints: the complaints register for two years from the date of the complaint, as required by the Consumer Protection Act.
- Account: until you delete it or ask us to delete it. Even then, we keep orders from the account for as long as the law requires.
- Newsletter: until you unsubscribe.
- Correspondence: as long as needed to resolve the request, withdrawal or complaint.
- Cookies: as stated on the page Cookies.
Your rights
Regarding your data, you have the right:
- to find out whether we process it and to get a copy (right of access);
- to correct inaccurate and complete incomplete data;
- to request erasure, except for data we must keep by law;
- to request restriction of processing;
- to receive your data in a structured, machine-readable format and transfer it to another controller (right to data portability);
- to object to processing based on legitimate interest, and to processing for direct marketing at any time;
- to withdraw your consent, when processing is based on consent.
Send your request to klaracomfort25@gmail.com. We reply without delay, and within 30 days at the latest, free of charge. You can also change your account details yourself under My account.
If you believe that the processing of your data is unlawful, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs, office@poverenik.rs.
How we protect data
The site works only over an encrypted connection (HTTPS). Passwords are stored only in hashed form, password-guessing attempts are blocked, and only authorized persons have access to customer data. The site and its plugins are updated regularly.
Changes to this policy
We change this policy when we change the way we process data (for example, when we introduce a newsletter or analytics). The date of the last change is at the top of the page, and we also announce major changes on the site.