Legal information
Privacy
Version: 2026-10-09
Seller and data controller
Iana Pastel pr Trgovina nakitom PASTEL CLUB Novi Sad
21101, ИСЕ БАЈИЋА 12, НОВИ САД, Србија
68593786 · 115735036
0621679910
Data we process
Orders: name, phone, email, delivery address, order contents and payment status. Enquiries: information you provide. Gift emails: sender name, recipient name and email. The payment service processes card details; the shop does not receive the full card number or security code.
Technical data
Connections disclose technical data, including IP address and browser information, to the website, CDN and email services. Logs support security and diagnostics, rather than visitor statistics. Automatic country detection contacts api.country.is, geojs.io and freeipapi.com from your browser; these services receive your connection IP. You can choose the delivery country manually. Gift email abuse prevention stores hashes of the recipient address and sender IP. Aggregate page counts are described under Cookies and statistics.
Purposes and legal bases
Ordering, payment, delivery and returns: entering into and performing a contract. Accounting and mandatory records: legal obligations. Website security and abuse prevention: legitimate interests balanced against your rights. Marketing and optional tracking require separate consent; a purchase does not consent to advertising.
Recipients
Access is limited to authorised staff and suppliers needed for the selected service: hosting and backups, email, payment services and carriers. Images are delivered through the Timeweb CDN. Carriers and payment services receive only data needed for delivery and payment. On request, the controller provides specific recipients, processing countries and the legal basis for international transfers.
Retention
Order records are retained for fulfilment, mandatory accounting and handling claims within applicable periods. Enquiries are retained until resolved and for necessary legal defence periods. Consent records and versions are retained to demonstrate lawful processing. Erasure does not override statutory retention; ask the controller for the applicable period.
Your rights
You may request access, correction, erasure, restriction and portability, object to processing and withdraw consent. Withdrawal does not affect earlier lawful processing or necessary contractual or legal processing. Contact the controller at the email above. You may complain to the Serbian Commissioner, Roskomnadzor in Russia or the competent data protection authority in your country. Order decisions are not made solely by automated processing.