Privacy Policy

1. Introduction

This Privacy Policy explains how Fidelinka Skrob d.o.o. (“FiberZ”, “we”, “us” or “our”) collects, uses, stores and protects personal data of visitors and customers of the website fiberz.com. We process personal data in accordance with the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti, “ZZPL”) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data controller

The data controller responsible for your personal data is:
Fidelinka Skrob d.o.o.
Čantavirski put 1, 24000 Subotica, Serbia
PIB: 104205610 | Matični broj: 20114517
Email: info@fiberz.com

3. What personal data we collect

Depending on how you interact with us, we may collect:

• Identification and contact data: first and last name, email address, phone number, delivery and billing address.
• Order data: products ordered, order amount, payment method, transaction identifiers and fiscal receipt details. We do not store full card numbers — these are handled exclusively by our payment service provider.
• Communication data: the content of any messages you send us (email, contact form, customer support).
• Newsletter data: email address and subscription preferences if you subscribe to our newsletter.
• Technical and usage data: IP address, browser type, device information, pages viewed, referring URL, approximate location and performance metrics (page load time, web vitals). Collected through cookies and similar technologies only if you consent to them through our cookie banner.

4. How we use your data and the legal basis

• To process and deliver your orders — legal basis: performance of a contract.
• To issue invoices and fiscal receipts — legal basis: legal obligation (Serbian tax and fiscalization laws).
• To respond to your inquiries — legal basis: legitimate interest in providing customer support.
• To send our newsletter — legal basis: your consent. You can withdraw your consent at any time using the unsubscribe link in any newsletter email.
• To measure website usage and performance through analytics — legal basis: legitimate interest in improving the website. Our analytics tools (Vercel Web Analytics and Vercel Speed Insights) are cookieless and do not collect personal data.
• To detect and prevent fraud — legal basis: legitimate interest in protecting our business and customers.

5. How long we keep your data

• Order, invoice and fiscal data: 10 years (Serbian tax law requirement).
• Customer support conversations: up to 2 years after the last contact.
• Newsletter subscription data: until you unsubscribe.
• Analytics data: as defined by each analytics provider (typically up to 14 months).

6. Sharing your data with processors

We share personal data only with carefully selected processors that help us operate the business. Each is bound by confidentiality and data protection obligations.

• Payment service provider — to process card payments securely on a PCI DSS compliant platform.
• Delivery courier — to deliver your orders to your address.
• Resend (email service provider, headquartered in the United States) — to send transactional emails (order confirmations, welcome emails) and newsletter campaigns.
• Vercel Inc. (hosting provider, headquartered in the United States) — to host this website and serve it to visitors.
• Vercel Web Analytics (operated by Vercel Inc.) — to measure aggregated, privacy-friendly visitor statistics such as page views and referring sources. This tool is cookieless and does not collect personal data.
• Vercel Speed Insights (operated by Vercel Inc.) — to collect anonymous performance metrics (Core Web Vitals such as Largest Contentful Paint, First Input Delay and Cumulative Layout Shift) so we can improve the site’s speed and user experience. This tool is cookieless and does not collect personal data.
• Serbian Tax Administration (Poreska uprava Republike Srbije) — to issue electronic fiscal receipts as required by the Law on Fiscalization.
• Google Search Console (operated by Google LLC) — we submit our sitemap and URLs to Google so the site can be found via search. This does not transmit personal data of visitors; only metadata about our pages.

Some of these processors may store data outside Serbia, including in the European Union and the United States. In such cases we ensure appropriate safeguards are in place in accordance with Article 65 of the ZZPL.

7. Cookies and tracking technologies

This website does not use cookies for analytics or tracking purposes. Our analytics tools — Vercel Web Analytics and Vercel Speed Insights — are fully cookieless and privacy-friendly by design. They do not track individual users, do not store personal data, and do not follow visitors across websites.

If we introduce any cookies in the future (for example, for payment processing or personalisation), we will update this section and implement a consent mechanism as required by applicable law.

8. Your rights

Under the ZZPL and the GDPR, you have the following rights regarding your personal data:

• The right to access your data and obtain a copy of it
• The right to rectify inaccurate or incomplete data
• The right to erasure (“right to be forgotten”)
• The right to restrict processing
• The right to data portability
• The right to object to processing based on legitimate interest
• The right to withdraw consent at any time
• The right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti)

To exercise any of these rights, contact us at info@fiberz.com. We will respond within 30 days.

9. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. All payment data is processed on PCI DSS compliant infrastructure provided by our payment service provider, and the website is served over an encrypted HTTPS connection.

10. Children

Our products and services are intended for adults. We do not knowingly collect personal data from children under 15. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the “Last updated” date at the top.

12. Contact

For any questions about this Privacy Policy or our processing of your personal data, please contact us at info@fiberz.com or by post at the address listed above. See also our Terms of Service.