This Privacy Policy explains which personal data we collect through https://monterubik.me, the purposes for which we use it, with whom we share it and which rights users have.

1. Data controller

Osnovna Stvar DOO, 85320, Trg Magnolija, 3B/L2S, Tivat, Montenegro
E-mail: info@osnovnastvar.me; Telephone: +382-69-296-654
Registration number: 51053802; Tax/Customs number: 03462471

2. When we collect personal data

We may request personal data in the following situations:

• when an order is placed;
• when a customer account is registered;
• when subscribing to a newsletter, if available;
• when contacting customer support;
• when initiating a payment through a bank payment gateway, in which case payment card data is collected directly by the bank and/or its authorised payment processor, and not by Osnovna Stvar DOO.

3. Personal data we may collect

Depending on the situation, we may collect:

• first name;
• last name;
• delivery and/or billing address;
• telephone number;
• e-mail address;
• order information, including ordered products, amounts and order status;
• information associated with a payment transaction, such as its status and transaction identification number.

We do not collect, store or have access to full payment card details. Payment card data is processed exclusively by the bank and/or an authorised payment processor within its secure payment environment.

3.1. Protection of payment card data

Osnovna Stvar DOO does not collect, process, store or have access to the customer's full payment card details, including the card number, expiry date, CVV/CVC security code or information used to authenticate the cardholder.

The customer enters payment card details directly within the secure environment of the bank and/or the authorised payment gateway processor. The bank and the authorised payment processor are responsible for processing and protecting such data in accordance with applicable security standards and card scheme rules.

To associate a payment with an order, only the information necessary to complete the transaction may be provided to the bank and/or the authorised processor, such as the order number, payment amount and currency.

Osnovna Stvar DOO may receive the transaction status, transaction identification number and other limited information required to confirm the payment, record the transaction, issue a refund, resolve complaints and prevent misuse.

Information associated with a payment transaction is used exclusively to complete and confirm the payment, record the transaction, issue refunds, resolve complaints, prevent misuse and comply with legal obligations.

Payment card data is not used for marketing purposes. Osnovna Stvar DOO does not sell, rent or disclose payment card data to unauthorised third parties.

4. Purposes and legal grounds for processing

We use personal data for the following purposes:

• processing orders and arranging delivery;
• communicating with the customer, including order updates, customer support and complaints;
• issuing receipts and invoices and complying with tax obligations, including fiscalisation requirements;
• initiating, confirming and recording payments made through a bank payment gateway;
• issuing refunds and resolving payment-related complaints;
• sending promotional communications only where consent has been provided, with the option to unsubscribe at any time.

The legal basis for processing may be the performance of a sales contract, compliance with a legal obligation, the user's consent or our legitimate interest, such as system security and fraud prevention.

5. Parties with whom we share personal data

We may disclose personal data to the following categories of recipients, but only to the extent necessary:

• delivery services for the purpose of delivering goods;
• the bank and/or an authorised payment gateway processor for the purpose of completing, confirming or refunding a payment;
• the Tax Administration of Montenegro;
• electronic fiscalisation and/or accounting service providers, in accordance with contractual and legal obligations.

Known recipients as of the date of this policy:

• Delivery: Pošta Crne Gore AD – Podgorica (Post Express).
• Payments: Hipotekarna Banka AD Podgorica and its authorised payment gateway processor for card payments; Adriatic Bank AD Podgorica for transaction account and payment services.
• Fiscalisation and accounting: Pošta Crne Gore AD – electronic invoice fiscalisation software; AZ Accounting Solutions D.O.O. Tivat – accounting services.

6. Data retention

We retain personal data for as long as necessary to fulfil the purposes for which it was processed and for the periods required by law, including documentation relating to receipts, invoices, tax obligations and payment transactions.

Information associated with a customer account may be retained for as long as the account exists, unless the user requests its earlier deletion and there is no legal obligation or other lawful basis requiring its continued retention.

7. User rights

Users have the right to request:

• access to their personal data;
• correction of inaccurate or incomplete personal data;
• deletion of personal data where the applicable conditions are met;
• restriction of processing;
• an objection to processing;
• withdrawal of consent to receive newsletters and promotional communications.

To exercise your rights, please contact us at: info@osnovnastvar.me.

8. Cookies

The website uses cookies and similar technologies to provide website functionality and collect visit statistics. Cookies may collect aggregated information such as the number of visits, pages viewed and average time spent on the website.

This information is used to improve the website's content and user experience. You can control cookies through your browser settings.

9. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Full payment card details are not entered directly on the Osnovna Stvar DOO website. They are entered within the secure environment of the bank and/or the authorised payment gateway processor.

However, no method of transmitting or storing information over the internet can guarantee complete security.

10. Contact

For questions regarding privacy and the processing of personal data, contact us at: info@osnovnastvar.me.