PRIVACY POLICY

HATANGA DOO BEOGRAD understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website and will collect and use personal data only in the ways described here, and in a manner that is in accordance with our obligations and your rights under the law. Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of this Privacy Policy will be deemed to occur upon your first use of our Site / registration of an account on our site. If you do not accept and agree with this Privacy Policy, you must immediately cease using our Site.

Who we are: We ("HATANGA DOO BEOGRAD", "we", "our", and "us") are:
HATANGA DOO BEOGRAD, located in JURIJA GAGARINA 231 lok 329
11000 Beograd Novi Beograd PIB 114155855 MB 21979937 acting as the Data Controller, which means we are responsible for processing and protecting your personal data.

1.Definitions and Interpretation


· Personal data means any information relating to an identified or identifiable individual ('data subject'); an identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual;

· Data about the subject refers to either an identified individual or an identifiable individual whose personal data the data controller processes.

· Processing of personal data is any operation or set of operations performed, whether automated or not, with personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction;

· Automated processing of personal data – processing of personal data using computer technologies.

· The collected data is used in a manner that enables the identification of individuals - website users, in accordance with the Law on Personal Data Protection of the Republic of Serbia, the General Data Protection Regulation of the European Union (GDPR), the Regulation on Electronic Privacy of the European Union (e-Privacy Regulation EU - ePR), and other relevant legal sources in the field of personal data protection.

· Consent of the data subject is any freely given, specific, informed, and unambiguous indication of the individual's wishes, by which that individual, through a statement or clear affirmative action, agrees to the processing of personal data relating to them. An individual who has consented to the collection and processing of personal data may withdraw their consent at any time and without explanation, which as a legal consequence results in the termination of the user status on the MR. SHU RENTAL website and cessation of any further data collection by the individual who has withdrawn consent.Top of Form

· Controller is a natural or legal person, or public authority, which alone or jointly with others determines the purposes and means of the processing.

· Data processor is a natural or legal person, or public authority, which processes individual's information on behalf of the controller.

·Recipient is a natural or legal person, or public authority, to whom personal data are disclosed, whether a third party or not, except where such public authority receiving personal data in accordance with the law processes these data in line with data protection rules relating to the purpose of processing within the framework of a specific investigation.

· Thirdparty is a natural or legal person, or public authority, who is not the data subject, controller, or processor, as well as a person authorized to process personal data under the direct supervision of the controller or processor.

· "Cookie" is a small text file that our Site places on your computer or device when you visit certain parts of our Site and/or when you use certain features of our Site. Details of the cookies used by our Site are set out in section 11 below; and "Cookie Law" refers to the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003.

· Website user is any natural or legal person who accesses or registers an account on the website.

2.What does this policy cover?

This Privacy Policy applies to your use of our Site and the use of services provided by HATANGA DOO BEOGRAD, by users in accordance with the Terms of Use. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such website before providing them with any data.

3.What are personal data?

Personal data are defined by the Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018) and the General Data Protection Regulation (EU Regulation 2016/679) ("GDPR") as 'any information relating to an identified or identifiable individual ('data subject'); an identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

Personal data, put simply, are any information about you that enables your identification. Personal data includes obvious information like your name and contact details, but it also encompasses less obvious information such as identification numbers, electronic location data, and other online identifiers.

Anonymous information, which we are unable to link to you, does not qualify as personal data.

4.What are your rights?

By law, you have the following rights, which we will always strive to respect:
a. Right to be informed about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or ask questions using the details provided in Section 13.
b. Right to access the personal data we hold about you. Section 10 will tell you how to do this
c. Right to correct your personal data if any of the personal data we hold about you is inaccurate or incomplete. You have the right to request that we correct the personal data we hold. In any case, please note that by actively providing us with access to personal data through any process, you guarantee that they are true and accurate and take responsibility for informing us of any changes or modifications to the data. You are responsible for any loss or damage to the Platform or to any third party responsible for the Platform resulting from reporting incorrect, inaccurate, or incomplete data in registration forms. Remember that, as a general rule, you must provide us with only your data, not the data of third parties, except to the extent otherwise permitted in this Privacy and Cookie Policy. For changes to your data, you can contact us using the details provided in Section 13 to find out more.
d. Right to erasure, or the right to request the deletion or removal of any of your personal data that we hold. Please contact us using the details provided in Section 13 to find out more.
e.Right to restriction (i.e., prevention) of processing of your personal data. This means you can request that we cancel or restrict the processing of your personal data, which may involve requesting us to temporarily suspend data processing or to keep it for longer than necessary in certain cases.
f.Right to object to the use of your personal data for certain purposes. When the processing of your data is based on our legitimate interest, you also have the right to object to the processing of your data.
g.Right to data portability.
This means that if you have provided us with personal data directly, we use it with your consent or for the performance of a contract, and that data is processed by automated means, you can request a copy of that personal data to reuse it with another service or business entity in manycases.
h.Rights related to automated decision making and profiling. The individual whose data is concerned has the right not to be subject to a decision based solely on automated processing, including profiling, if that decision produces legal effects concerning the individual or significantly affects their position.

The preceding provision does not apply if the decision:

1)is necessary for entering into or performance of a contract between the individual whose data is concerned and the controller;
2)is based on the law, provided that appropriate safeguards for the rights, freedoms, and legitimate interests of the individual whose data is concerned are provided by that law;
3)is based on the explicit consent of the individual whose data is concerned.

Decision-making based solely on automated processing conducted by competent authorities for specific purposes, including profiling, is prohibited if such a decision could produce harmful legal effects concerning or significantly affect the position of the individual whose data is concerned, unless the decision-making is based on the law and appropriate safeguards for the rights and freedoms of the individual whose data is concerned are provided by that law, including at least the right to ensure the participation of the individual under the control of the controller in decision-making.

i.All other rights provided by legislativeprovisions in the field of personal data protection. The individual whose data is concerned may exercise their rights by sending a request to our email address: Service@vroom.rs


HATANGA DOO BEOGRAD will provide you with all necessary additional information to fulfill the requests mentioned, as well as assistance, in accordance with the terms and manner prescribed by the applicable Law on Personal Data Protection. We will respond to your request as soon as possible, but no later than 30 days from the date of receipt of the request. In case of complexity or a large number of requests, we may need additional time to respond to the request. This period cannot exceed 90 days, and we will inform you accordingly.

The competent authority for personal data protection in the Republic of Serbia is the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, an autonomous and independent state body established by law, responsible for supervising the implementation of the Law on Personal Data Protection and other regulations prescribed by law.

If you have any reason to complain about our use of your personal data, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection. You can contact the authorized body via email at office@poverenik.rs, or at the following address: Bulevar kralja Aleksandra 15, 11000 Belgrade, Republic of Serbia.


5.What data do we collect?


The essential standards we apply.

Depending on your use of our Site, we may collect some or all of the following personal and non-personal data (see also Section 11 regarding our use of cookies and similar technologies):

·Identification data (name, surname, father's name, gender, date and place of birth; citizenship and passport data - number, date of issue, expiry date; user's photograph necessary for account verification; data from personal identification card or other identification document; taxpayer identification number; residential address or address of residence / registered office address for legal entities as users; registered data from the relevant register of business entities for legal entities as users.)

·Phone number;
·Email address;
·Credit card number;
·Current account number;
·Driver's license data for the required category;
·Any other data directly or indirectly related to the website user, necessary to achieve the objectives of this policy, i.e., necessary for user identification, as well as for the conclusion and/or execution of any contracts/agreements concluded with clients/customers;

·Any other data from any other document that the website user independently enters and submits through their registered account, which will be considered as consent given for the processing of the said data.

The Controller may also request from the Website User a copy of their personal document and all other documents necessary for work within the territory of the Republic of Serbia, as well as other additional information that, in the Controller's assessment, will be necessary and sufficient for the identification of such user, as well as for the conclusion and/or execution of any contracts/agreements concluded with clients/customers by the User and enable the prevention of abuses and violations of the rights of third parties, including clients/customers of the Controller.

For informational purposes, the Controller may create publicly available sources of personal data of Website Users, including directories and address books. In publicly available sources of personal data, with the consent of the data subject (owner) of personal data, their surname, name, date and place of birth, occupation, contact phone number, and email address may be included. Information about the data subject can be excluded from publicly available sources of personal data at any time upon their request.

When a User utilizes the Services, the following end-user data may be received and processed by HATANGA DOO BEOGRAD:

-"Technical Information": This pertains to technical details related to the end-user's mobile device or computer, such as browser type, device type and model, CPU, system language, memory, OS version, Wi-Fi status, timestamp and zone, device motion parameters, and operator.

-"Technical Identifiers": This includes various unique identifiers typically associated with a computer, device, browser, or application. For instance, IP address (which may also provide general location information), user agent, IDFA (Identifier for Advertisers), Android ID (on Android devices), Google Advertiser ID, user ID issued by the user, and other similar unique identifiers.

6.How do we obtain and use your personal data?

Purpose and legal basis of data processing.


If you decide to become a registered user on our Platform, we need to process your data to identify you as a user of the Platform and to grant you access to its various features and services available to you as a registered user. You can cancel your registered user account by contacting our Customer Service. We hereby inform you that the data we collect about your activities, gathered through various channels of the Platform, will remain associated with your account to enable unified access to all information.

Possible legal bases for data processing we may have include:

-consent - The user of the website, to whom the processed data pertains, provides consent for one or more specifically defined processing purposes.
-contract - Processing is necessary for the performance of a contract concluded with the user of the website to whom the data relates or for taking pre-contractual steps at the request of the data subjects.
-legal obligation of the controller: Processing is necessary to comply with the legal obligations imposed on the controller.
-legitimate interests pursued by the controller or a third party.

The main reason is that we need to process your data in order to fulfill the contract you enter into with us when you register and use any of our services or features.

Your personal data will be used for one of the following purposes:

·Enabling and managing your access to our website;
·Full operation and facilitation of the use of the HATANGA DOO BEOGRAD website;
·Personalizing and customizing your experience on our website;
·Improving and developing our website;
·Providing our services to you;
·Concluding and/or executing any contracts with website users;
·Personalizing and customizing our services to you;
·Sending information via email and/or mail to which you have subscribed.

With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you via phone and text messages, social networks, chatbots, e-mail and/or mail with information, news, and offers about our products and/or services. You will not receive unlawful marketing or spam. We will always strive to fully protect your rights and comply with our obligations under the Personal Data Protection Act, GDPR, and the Privacy and Electronic Communications Regulation (EC Directive) from 2003, and you will always have the opportunity to unsubscribe as indicated below.


In addition to your rights outlined in Section 4, when you provide personal information through our website, you may have the opportunity to limit our use of your personal information. Specifically, we endeavor to provide you with strong control over the use of your data for direct marketing purposes (including the ability to prevent receiving emails, messages and notifications from us, which you can do by unsubscribing using the links we have provided in our emails, unsubscribing by sending a notification to our email address Service@vroom.rs , sending a notification with the text "STOP" via an SMS message and/or via the option in your account settings).


For some processing purposes, we process your personal data based on your consent to the processing of personal data with prior notification of all relevant aspects of the processing. It is important to know that you can withdraw your consent at any time and without explanation, resulting in the cessation of further processing.



We believe we have a legitimate interest in associating your account with data about your activities collected through various channels on the Platform. We consider that we have a legitimate interest in responding to requests or inquiries you have made through existing different contact channels. We believe that processing this data is also beneficial for you to the extent that it enables us to provide assistance in an appropriate manner and respond to inquiries submitted. To present you with personalized information, we believe we have a legitimate interest in conducting profiling based on information we have about you (such as your search history, preferences) and personal data you have provided to us, such as age or language, as we consider that processing this type of data is also beneficial for you as it allows you to enhance the user experience and access information according to your preferences.

7.How long we will keep your personal data?


We will not store your personal data for longer than is necessary, having regard to the reasons for which it was first collected or until the consent given for storage and processing is withdrawn. Therefore, your personal information will be kept for as long as the company has a legitimate or lawful basis for keeping such records. The data is then deleted except in exceptional cases prescribed by law or when the deletion of the data may lead to the obstruction of the investigation, discovery or prosecution in criminal proceedings, as well as to the prevention of claims in civil disputes. In certain cases, personal data may be stored for a longer period of time, for the purpose of fulfilling legal obligations (eg, the Law on Accounting and the like or for the purpose of establishing, executing or defending a legal claim, in accordance with applicable regulations and laws).


8.Do we share your personal data?


Transfer of personal data.


The international transfer of personal data to the territory of foreign countries can be carried out by HATANGA DOO BEOGRAD only with the consent of the subject of personal data for the international transfer of his personal data. Before starting the international transfer of personal data, HATANGA DOO BEOGRAD is obliged to make sure that the foreign country in the territory of which the transfer of personal data is carried out ensures adequate protection of the rights of the subjects of personal data.

For the purposes of service efficiency, and in case we transfer data to third countries that are located in territories outside the European Economic Area that do not provide the same level of data protection as the European Union and that may not be on the list of countries that provide an adequate level of data protection issued by the competent authority for data protection in Serbia, we inform you that we transfer your data with the application of appropriate security measures so that your data is always safe and to this end we use more appropriate tools for international data transfer, in accordance with standard contractual clauses and other relevant supplementary measures.

You can review the content of such standard contractual clauses at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/datatransfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

In the event that we sell or transfer our company or resources to another company, in whole or in part, or if we conduct any other business action as a result of a company reorganization, we may disclose your personal information to a person who acquires said company or resources in the future. If such a sale or transfer occurs, we will use reasonable efforts to direct the transferee to use the personal information you have provided to us in a manner consistent with our Privacy and Cookie Policy. In that case, we consider that we have a legitimate interest consisting in the reorganization of the company's structure. In addition, if you choose to use our Platform in different markets (ie, if you create user accounts in different markets with the same email address), we may need to disclose or transfer information related to your account or activities to companies operating in those markets, in to the extent that they are directly involved in achieving some of the purposes described in section 6. We consider this to be necessary in accordance with our mutual interests and choices.

We may sometimes enter into contracts with certain third parties for data storage purposes. If any of your personal data is transferred to a third party, as described above, we will take steps to ensure that your personal data is treated safely, securely and in accordance with your rights, our obligations and the third party's obligations under the law.


In some limited circumstances, we may be legally required to share certain personal information, which may include yours, if we are involved in legal proceedings or complying with legal obligations, a court order or instructions from a competent government authority.

9.Can you retain information?

You can access certain parts of our Site without providing any personal information. However, in order to use all the functions, features and services available on our Site, you may be required to provide or allow the collection of certain information.

You can limit our use of cookies. For more information, see Part 11.

10.How can you access your personal data?

In addition to the right to be forgotten, you can exercise the following rights at any time:


· You can ask us to provide you with copies of the personal information we hold about you, or information about the processing of such information. This is called a "subject data access request".
· You can ask us to update and correct any outdated or inaccurate personal information we have about you.
All requests for data subject access should be made in writing and sent to the email address shown in Section 13.

There is usually no fee for requesting access to a subject's data. If your request is "manifestly unfounded or excessive" (for example, if you are making repetitive requests), a fee may be charged to cover the administrative costs of responding.

We will respond to your request for access to subject data within 30 days of receipt. Normally, we aim to provide a full response, including a copy of your personal data within that time. However, in some cases, especially if your request is more complex, it may take longer, up to a maximum of 90 days from the date of receipt of your request. You will be fully informed of our progress. If you wish to exercise any of these rights, please contact us as described in section 13.

11. How do we use cookies?


Our Site uses cookies and similar technologies that collect Tracking Data to distinguish you from other users. This helps us provide you with a good experience when accessing the Sites and using the Services. The cookies used on our Site fall into the categories described below. You may use these descriptions to determine whether and how you want to interact with our Sites and other online services:
Strictly Necessary Cookies: These cookies are necessary to enable you to navigate the Sites and use certain functions. Without these strictly necessary cookies, the online services provided by the Sites cannot be provided. It is therefore not possible to opt out of the use of these cookies. In addition, the programming language in which the Sites are written uses session cookies and their use cannot be avoided. They are deleted every time you close your browser. These cookies do not store any information about the visitor after the browser is closed.
Performance cookies: Our performance cookies collect anonymous information about how you use the Site and its features. For example, our performance cookies collect information about which pages on the Site are most frequently visited.
Analytics cookies: The Sites may use other similar analytics cookies. These cookies are used to collect information about how visitors use the Site. The information is collected anonymously and used to report on the number of visitors to the Site, where visitors come from and which pages they visited. You can also prevent the collection and use of data by Google (cookies and IP addresses) by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout.

Additional information can be found at http://www.google.com/analytics/terms/gb.htlm (Google Analytics Terms of Service and Privacy).

You can also prevent Google Analytics from collecting such data on behalf of MR. SHU RENTAL by clicking on the following link: https://tools.google.com/dlpage/gaoptout.

Functionality cookies: Functionality cookies are used to remember choices you make (such as language settings, country location or other online settings) and collect anonymous information.

Our Site may place and access certain first-party cookies on your computer or device. First-party cookies are those set directly by us and used only by us. We use cookies to facilitate and improve your experience of our Site and to provide and improve our products and/or services. We have carefully selected these cookies and have taken steps to ensure that your privacy and personal data are respected and protected at all times.

Before cookies are placed on your computer or device, a pop-up window will appear asking for your consent to place those cookies. By giving your consent to the placement of cookies, you allow us to provide you with the best possible experience and service. If you wish, you can refuse to consent to the placement of cookies; however, certain features of our Site may not function fully or as intended. Certain functions of our Site depend on cookies to function, these cookies are "strictly necessary". Your consent will not be required to set these cookies, but it is still important to be aware of them. You can still block these cookies by changing your internet browser settings, but please note that our Site may not work properly if you do. We have taken care to ensure that your privacy is not compromised by allowing these cookies.

In addition to the controls we provide, you can choose to enable or disable cookies in your Internet browser. Most Internet browsers also allow you to choose whether you want to disable all cookies or only third-party cookies. By default, most Internet browsers accept cookies, but this can be changed.

You may choose to delete cookies on your computer or device at any time, however, you may lose any information that allows you to access our Site more quickly and efficiently, including, but not limited to, login and personalization settings. It is recommended that you regularly update your Internet browser and operating system and consult the help and guidance provided by the developer of your Internet browser and the manufacturer of your computer or device if you are unsure how to adjust your privacy settings.

12. Security


In order to secure your personal data, we always strive to apply the necessary standards in the protection of personal data and apply at all times all necessary technical, organizational and personal protection measures in accordance with the current Law on the Protection of Personal Data, including but not limited to: technical protection measures, organizational measures and personnel protection measures related to physical access to the place where your data is stored, information security protection measures for your data in accordance with applicable regulations, as well as other measures that are suitable for processing and necessary to ensure the protection of certain personal data. Third parties who process data are also obliged to implement all necessary technical, organizational and personnel measures.

All received information provided by the client is stored on secure servers, and only authorized personnel have access to that information. We take reasonable precautions to prevent the loss, misuse or alteration of your personal information. Our employees, contractors and agents may be given access to your personal information that we collect, but their use will be limited to performing their duties in connection with facilitating your use of the Services. Our employees, contractors and agents who have access to your personal information are required to keep that information confidential and are not authorized to use it for any purpose other than those listed above or to deal with requests you make to us.


13.Modification of this Privacy Policy


We may change this Privacy Policy from time to time for various reasons such as changes in law and regulation, changes in industry practice, technological developments or if we change our business in a way that affects the protection of personal information.

Any changes will be immediately posted on our Site, and you will be deemed to have accepted the terms of the Privacy Policy upon your first use of our Site after the changes. We encourage you to check this page regularly to stay up-to-date.

If changes to this Privacy Policy reduce your rights, we will ask for your express consent to continue using the HATANGA DOO BEOGRAD site.

14. How can you contact us?

Customer support.


To contact us regarding your personal data and data protection, including submitting a data access request, please contact our personal data protection team at: Service@vroom.rs
For any inquiries regarding this Privacy Policy, or questions about the use of your personal information, you can contact us at: Service@vroom.rs

15.Version of the Privacy Policy

Version of the privacy policy dated
26.09.2024.