Send an inquiry
EN
SR
Follow us:
EN
SR

Privacy policy

Privacy policy

1. INTRODUCTION

A high level of personal data protection guarantees every individual’s right to privacy, which is one of the fundamental human rights protected by domestic regulations and international legal instruments.

VELETABAK DOO NOVI SAD respects your privacy and places particular importance on protecting it. This Privacy Policy (hereinafter referred to as the “Policy”) is intended to explain how and why VELETABAK DOO NOVI SAD (hereinafter referred to as the “Company”), acting as the data controller, processes your personal data, and the measures it takes to ensure that your data
remains secure and protected when you:

  • Visit our website https://veletabak.rs;
  • Participate in a prize draw or competition organized by the Company;
  • Otherwise interact with us.

The Company collects and processes personal data lawfully, fairly, and transparently, in accordance with the Law on Personal Data Protection, implementing appropriate technical, organizational, and human resources measures aimed at protecting personal data against unauthorized access and misuse.

Consent. By using the website https://veletabak.rs, you consent to the use of your personal data in accordance with the terms set out in this Policy. The Company reserves the right to amend the terms of this Privacy Policy from time to time, in which case you will be notified in a timely manner.

2. DATA CONTROLLER

Registered business name: VELETABAK DOO NOVI SAD

Registered office address: Temerinska 102, 21000 Novi Sad

Company Registration Number: 08762023

Tax Identification Number (TIN): 101695403

Email: office@veletabak.rs

Telephone: +381 21 3103 300

3. LEGAL BASIS FOR PROCESSING

Personal data is processed exclusively where there is a legal basis for such processing, namely: (i) a legal obligation, (ii) a contractual relationship, (iii) the user consent, (iv) the protection of the vital interests of the data subject or another natural person, (v) the legitimate interest of the Company, and (vi) the exercise of powers conferred by law.

The legitimate interest of the Company includes preventing fraud; protecting individuals, business, and property of the Company; as well as conducting analysis and research for the purpose of improving the user experience on our website.

4. CATEGORIES OF PERSONAL DATA AND PURPOSES OF PROCESSING

Personal data means any information relating to an identified or identifiable natural person, whether directly or indirectly, such as a name, email address, telephone number, IP address, or postal address.

You can use our website with or without providing any personal data, depending on the need of each particular situation. If you do not provide any personal data, the Company may collect only the following metadata based on your use of the website:

  • The page from which you reached our website, the date and time of access, the amount of data transferred, the transfer status, the type of web browser, the IP address, the operating system and interface, the language, and the version of the browser software.

The Company processes the personal data of visitors to our website (first and last name, email address, telephone number, and information contained in the CV) that is voluntarily provided to us by filling out the contact form. We process the data provided through the contact form (first and last name, email address, and telephone number) based on our legitimate interest in providing potential clients with more detailed information about the services we offer, as well as in gaining a better
understanding of users’ needs and improving our services.

The purpose of data collection is to inform visitors to our website about the services we offer, as well as to establish contact with individuals who are interested in working for us.

We do not use the data we have for direct marketing purposes.

We use cookies to provide you with a service with full functionality and the highest possible quality of content. Cookies are small text files transferred to a visitor’s computer for the purpose of monitoring the use of certain pages. If cookies are disabled on the user’s computer, the user can still use the websites, but the functionality of the service will be partially limited. For more information, please see the Cookie Policy.

The Company does not collect children’s data. If we are convinced that such data has been provided to us without the consent of a parent or legal guardian, we will delete it as soon as possible. In doing so, we will follow the instructions provided by you as the parent or legal guardian.

Prize Draws and Competitions

If you participate in a prize draw or competition organized by the Company, the Company collects and processes your personal data, including: first and last name, telephone number, email address, residential address, unique master citizen number or passport number (only for prize draw winners, as required by law), date of participation, and the selection of prize draw winners or competition winners. The Company processes such personal data exclusively for the purposes of implementing and conducting the prize draw or competition, contacting participants, informing and delivering the prize to the winner.

The Company collects and stores data relating to winners and prize draws for the purpose of fulfilling the organizer’s legal obligations concerning prize draws involving goods and services, in accordance with the applicable Law on games of chance and Law on personal income tax.

Job Applications

If you apply for a job at the Company, we will collect your personal data for the purpose of processing and handling your application and assessing your suitability for the position. The data and CVs of candidates collected in this manner will be used exclusively for the purpose of selecting CVs in accordance with the open positions, contacting the applicants regarding a job interview or potential employment at VELETABAK DOO NOVI SAD, to which the applicants are aware and consent.

Our website contains links to other websites that are not covered by this Privacy and Cookie Policy. If you access other websites using the links provided, the operators of those websites may collect information from you, which they will use in accordance with their own privacy policies, which may differ from ours. The Company shall not be held responsible for data collected by other
websites.

5. RECIPIENTS OF PERSONAL DATA

The Company forwards the users’ personal data to other recipients in accordance with applicable data protection regulations, exclusively on the basis of a legal obligation and compliance with regulatory requirements, i.e., a justified request of an authorized public authority, for the purpose of fulfilling statutory obligations.

We keep the personal data that we have collected from you confidential. Accordingly, access to personal data is limited to our employees responsible for this type of communication, who are required to maintain the confidentiality of the personal data they process.

Where we store your Personal Data

Your personal data is stored on servers located within the territory of the Republic of Serbia.

Personal data is not transferred to other countries or international organizations.

6. STORAGE PERIODS OF PERSONAL DATA

In accordance with the principle of data storage limitations prescribed by the Law on Personal Data Protection, the Company keeps your personal data only as long as it is necessary to achieve the purposes stated above, i.e. to fulfill our legal obligations.

If your personal data is processed as part of the recruitment and selection process for employment at VELETABAK DOO NOVI SAD, we will keep your data only as long as it is necessary to conduct the selection process and make an employment decision, unless you have expressly given your consent to allow us to keep your data for a longer period.

For the purpose of supervision in connection with the implementation of the Law on Games of Chance, the Company, as an organizer of prize draws involving goods and services, is obliged to maintain in electronic form a database containing the personal data of winners (the winner’s first and last name, residential address details, Unique Master Citizen Number, i.e. passport number of the winner) and keep such data for at least five years from the last day of the year to which the data relates, in accordance with the Rulebook on the Manner of Maintaining a Database of Persons Who Have Won Prizes at Organizers of Games of Chance.

Employees’ personnel files, records of employee registrations and de-registrations, and records of calculated and paid salaries are stored permanently, in accordance with the Law on Archives and Archival Activity and the List of Categories of Documentary Material with Retention Periods.

7. RIGHTS OF DATA SUBJECTS

Depending on the type and legal basis of the processing, you may exercise the following rights in relation to the processing of personal data:

  • Access to personal data
  • Correction of personal data
  • Deleting personal data
  • Portability of personal data
  • Limitation of the processing of personal data; and
  • Right to object.

8. PERSONAL DATA SECURITY

The Company protects personal data through appropriate organizational, technical, and legal protection measures in accordance with the ISO 27001 standard, in order to mitigate the risks of accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data, or unauthorized access to personal data that has been transmitted, stored, or otherwise processed. When determining these protection measures, we always take into account the amount, type, and sensitivity of the data, as well as other circumstances that influence the assessment of possible risks for the protection of your rights and freedoms.

However, data transmission over the internet can never be completely secure, despite all security measures taken. In this regard, the risk of data misuse is also borne by the data provider. We have also established the necessary procedures for eliminating information security incidents, as well as procedures enabling us to notify the supervisory authority and you without undue delay of any suspected violation of personal data, in the manner and within the deadlines prescribed by the applicable data protection regulations.

9. COOKIES

Cookies are small text data files that are sent to your computer or mobile device when you visit a website, and which can be accessed later. Cookies help identify what individual website visitors are interested in, which helps to improve the experience for all users. Most users automatically accept cookies, but those who do not want to accept them are not required to do so.

We use cookies that are necessary for the website to function, i.e. cookies that allow you to browse our pages, as well as performance cookies. These cookies may help us obtain statistics of website visits.

Our website uses Google Analytics and Google Tag Manager, web analytics services provided by Google. These technologies are configured on our website to track website visits and user behavior anonymously, without storing cookies on your device (so-called cookieless tracking). If you need additional information about how these services operate, you can visit the pages related to Google Privacy Policy.

COOKIE LIST:

wp-wpml_current_language
This cookie belongs to the “WPML” service and is used to identify and remember the user’s currently selected language on the website. It is included in page requirements in order to automatically display the content in the appropriate language during the search and remains active as long as the session duration, i.e., while the user is on the website.

The main purpose of this cookie: Functionality

cookieyes-consent
This cookie belongs to the “CookieYes” service and is used to register and remember the user’s consent regarding the use of cookies on our website. It prevents the consent banner from being displayed again each time the user visits the website and expires after one year.

Main purpose of this cookie: Necessary / Privacy Management

Google Analytics (GA) and Google Tag Manager (GTM)
This tracking system uses advanced methods to analyze website visits and user behavior without storing cookies on the user’s device. It is used to calculate data on unique visits, sessions, user navigation through the website, and campaigns for the purposes of analytical reporting, ensuring the anonymity of the data.

The main purpose of this technology: Performance

10.  COMPLAINTS

For any questions, requests, complaints and objections related to the protection and processing of personal data, you can contact us at the following email address: office@veletabak.rs.

We have also appointed a Data Protection Officer (DPO), whom you can contact at the email address tea.milenkovic@veletabak.rs. The Data Protection Officer is responsible for supervising the lawfulness of personal data processing, ensuring the protection of the rights and freedoms of data subjects, and advising the responsible persons on the best practices in the field of personal data protection.

Each request received will be resolved as soon as possible and no later than within 30 (thirty) days from the date of receipt. When you contact us and submit any of the above requests, we will make reasonable efforts to prevent unauthorized processing of personal data. If you believe that your personal data has been processed unlawfully, you can file a complaint with
the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade.

11. UPDATES

The Company reserves the right to change or update the Privacy Policy at any time and without prior notice.

If we make any material changes, we will inform you by publishing a notice on our website.

If you want to access the previous versions of the Privacy Policy, please submit a request to the above-mentioned email addresses.

This version of the Privacy Policy was last updated on 5 May 2026.