Last updated: 23 July 2026

1. INTRODUCTION

“Nina Plast 025 Njegosava Pejin PR” respects the privacy of visitors to this website and processes personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia and other applicable regulations.

This Privacy Policy explains which data we may collect when the website is used, the purposes for which we use it, the legal basis for processing, with whom it may be shared, how long it is retained, and the rights of the individuals to whom the data relates.

2. DATA CONTROLLER

The personal data controller is:

Nina Plast 025 Njegosava Pejin PR
Tomaša Žižića 129
25223 Sivac
Vojvodina, Republic of Serbia
VAT ID: 108390751
Company Registration No.: 63419478
Telephone: +381 25 714 440
Mobile: +381 67 756 5554
Email: office@ninaplast.rs

For questions concerning the processing of personal data, or to exercise your rights, you may contact us using the email address above, by telephone or by post.

3. WHO THIS POLICY APPLIES TO

This Privacy Policy applies to:

• visitors to the website;
• individuals who contact us through the contact form;
• individuals who contact us by email or telephone;
• business users and potential customers seeking information about products, prices, quantities, delivery times or terms of cooperation.

4. DATA WE MAY COLLECT

4.1. Data provided through the contact form

When you contact us through the contact form, we may process the following data:

• full name;
• email address;
• message content;
• other information voluntarily included by the user in the message.

This data is used to receive, review and respond to the user’s inquiry.

Users should not enter data in the message field that is unnecessary for handling the inquiry, particularly a personal identification number, ID card number, payment card details, passwords, health data or other sensitive data.

4.2. Data from direct communication

When you contact us by email, telephone or in another way, we may process:

• full name or business name;
• contact details;
• content of the communication;
• information about products, quantities, dimensions or other requirements included in the inquiry;
• other data necessary to act on your request.

4.3. Technical data

When the website is visited, the server, hosting system or security systems may automatically record certain technical data, such as:

• IP address;
• date and time of access;
• page visited;
• referring page address;
• web browser type;
• operating system and device type;
• information about technical errors and security events.

This data is used to ensure the proper and secure operation of the website, resolve technical issues, prevent misuse and protect the information system.

5. PURPOSES OF DATA PROCESSING

We may process personal data for the following purposes:

• receiving and recording inquiries;
• answering user questions;
• providing information about products and services;
• communicating about dimensions, quantities, prices, deadlines and production capabilities;
• preparing a quotation or taking steps at the request of a potential customer;
• continuing business communication initiated by the user;
• ensuring the technical stability and security of the website;
• preventing misuse, unauthorised access and other harmful activities;
• complying with legal obligations;
• establishing, exercising or defending legal claims.

Data will not be used for purposes incompatible with the purpose for which it was collected, unless an appropriate legal basis exists for such processing.

6. LEGAL BASIS FOR PROCESSING

Depending on the specific circumstances, processing may be based on:

• taking steps at the user’s request before entering into a contract, when the user asks about products, prices, quantities, deadlines or terms of cooperation;
• the controller’s legitimate interest in responding to an inquiry, conducting business communication, protecting the website and preventing misuse;
• performance of a contract, if the communication results in a business relationship;
• compliance with legal obligations;
• the user’s consent, where consent is required for a particular type of processing.

Where processing is based on consent, the user has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. VOLUNTARY PROVISION OF DATA

Providing data through the contact form is voluntary.

Certain fields may be marked as required because without that information it may not be possible to submit an inquiry or provide a response.

The user may choose not to provide data, but in that case we may be unable to receive the message, respond to the inquiry or provide the requested information.

8. RECIPIENTS AND DATA PROCESSORS

Data may be available to the owner, employees and authorised persons of Nina Plast 025 who need it in order to handle the received inquiry.

In a limited scope, data may also be available to:

• hosting service providers;
• the website administrator or maintenance provider;
• email service providers;
• information security and backup service providers;
• accounting, legal or other professional advisers, where necessary;
• competent public authorities, where disclosure is required by law or ordered by an appropriate decision;
• other recipients, with the individual’s consent or where another legal basis for disclosure exists.

Service providers processing data on our behalf may use it only in accordance with our instructions, contractual obligations and applicable regulations.

Nina Plast 025 does not sell or rent personal data to third parties.

9. TRANSFERS OF DATA TO OTHER COUNTRIES

Certain technical service providers, such as hosting, email, security, backup or embedded video-content providers, may use servers located outside the Republic of Serbia.

If data is transferred to another country or an international organisation, the transfer will be carried out in accordance with the Law on Personal Data Protection and with appropriate safeguards.

10. DATA RETENTION PERIOD

Data is retained only for as long as necessary to fulfil the purpose for which it was collected.

Data from the contact form and business communications may be retained:

• until the communication is concluded and the inquiry has been answered;
• for an additional limited period required to keep a record of prior communication;
• for the duration of the business relationship if the inquiry leads to cooperation;
• for periods prescribed by law where the data becomes part of business, tax, accounting or other mandatory records;
• for the period required to establish, exercise or defend legal claims.

Technical and security data is retained for the period necessary to maintain the system, detect errors, prevent misuse and resolve security incidents.

After the relevant retention period expires, the data is deleted, destroyed or anonymised, unless there is a legal obligation to retain it for longer.

11. COOKIES

The website may use cookies, i.e. small text files stored on the user’s device.

Cookies may be used for:

• basic operation of the website;
• proper display of content;
• website security;
• operation of the contact form;
• saving user preferences;
• displaying embedded third-party content.

Technically necessary cookies may be used without separate consent where they are required to provide a service requested by the user.

If the website uses analytics, functional or marketing cookies that are not necessary for the website’s basic operation, such cookies should be activated only after the user makes the appropriate choice or gives consent.

The user can restrict or disable cookies through browser settings. Disabling necessary cookies may affect the proper operation of certain parts of the website.

12. EMBEDDED YOUTUBE VIDEO CONTENT

The website may contain video content displayed through the YouTube platform operated by Google.

Video content may be displayed in a separate window or popup after the user clicks the relevant image, button or other website element.

When the user starts an embedded YouTube video, the browser may connect to Google servers. YouTube and Google may then process certain data, including:

• the user’s IP address;
• information about the web browser and device;
• the date and time of access to the video content;
• information about the page from which the video was launched;
• information about interaction with the video content;
• information associated with the user’s Google account, if the user is signed in to their account.

Where technically possible, video content may be displayed using YouTube’s enhanced privacy mode.

Enhanced privacy mode may limit the use of views of embedded content for personalising the user experience and advertising, but it does not eliminate all processing of technical data.

YouTube or Google may use cookies or similar technologies when embedded video content is loaded or played.

If such cookies are not necessary for the website’s basic operation, YouTube content should be loaded only after the user makes the appropriate choice or gives consent.

Google’s and YouTube’s own privacy policies and terms of use apply to the data processing they carry out independently.

13. EXTERNAL LINKS AND THIRD-PARTY CONTENT

The website may contain links to other websites or embedded third-party content.

Third parties may independently collect technical data, use cookies or record the user’s interaction with their content.

Nina Plast 025 does not control how third parties process data on their websites. The relevant third parties’ privacy policies apply to such processing.

14. RIGHTS OF DATA SUBJECTS

In accordance with the law, a data subject may have the right to request:

• information on whether we process their personal data;
• access to personal data and obtaining a copy thereof;
• rectification of inaccurate data;
• completion of incomplete data;
• erasure of data, where the legal requirements are met;
• restriction of processing;
• data portability, where the legal requirements are met;
• objection to processing based on legitimate interest;
• withdrawal of consent, where processing is based on consent;
• protection from a decision based solely on automated processing, where the legal requirements are met;
• lodging a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

The exercise of a particular right may be restricted in cases provided by law, especially where processing is necessary to comply with a legal obligation or to establish and protect legal claims.

15. HOW TO EXERCISE YOUR RIGHTS

A request to exercise rights may be submitted:

• by email to office@ninaplast.rs;
• by post to Tomaša Žižića 129, 25223 Sivac;
• in person at the controller’s address.

The request should contain enough information for us to establish the identity of the applicant and identify the data or processing to which the request relates.

Where there is justified doubt about the applicant’s identity, we may request additional information necessary to verify identity. We will not request more data than is necessary for this purpose.

The request will be answered without undue delay and within the period prescribed by law.

16. RIGHT TO LODGE A COMPLAINT

An individual who believes that their data has been processed contrary to applicable regulations may lodge a complaint with:

Commissioner for Information of Public Importance and Personal Data Protection
Bulevar kralja Aleksandra 15
11000 Belgrade
Email: office@poverenik.rs

Lodging a complaint does not affect the individual’s right to use other administrative or judicial remedies.

17. CHILDREN’S DATA

The website is intended for the general and business public and is not specifically directed at children.

Nina Plast 025 does not seek to knowingly collect children’s data through the contact form without an appropriate legal basis or the consent of a parent, guardian or other legal representative where such consent is required.

If we become aware that a child’s data has been collected without an appropriate legal basis, we will take reasonable measures to delete it.

18. DATA SECURITY

Appropriate technical and organisational measures are applied to protect data against:

• unauthorized access;
• accidental loss or destruction;
• unauthorized alteration or disclosure;
• misuse;
• malicious attacks and other security incidents.

Access to data is limited to persons who need the data to perform the relevant tasks.

Although reasonable protective measures are taken, no method of transmitting or storing data over the internet can be considered absolutely secure.

19. AUTOMATED DECISION-MAKING

The contact form and website are not used to make decisions based solely on automated processing that would produce legal or similarly significant effects for the user.

20. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be amended from time to time to comply with regulations, technical changes, changes to website functionality or changes in the way data is processed.

The updated version will be published on the website with the date of the latest update.

Where changes significantly affect user rights, an appropriate notice will be published or, where required, new consent will be requested.

21. CONTACT

For all questions concerning privacy and data protection, you may contact:

Nina Plast 025 Njegosava Pejin PR
Tomaša Žižića 129
25223 Sivac
Vojvodina, Republic of Serbia
VAT ID: 108390751
Company Registration No.: 63419478
Telephone: +381 25 714 440
Mobile: +381 67 756 5554
Email: office@ninaplast.rs