Privacy Policy
This privacy policy (the “Policy”) describes the collection of Personal Data by Delux Ltd. Belgrade, with registered office at address 31/A Partizanski blok, ulica 1 Str., 11000 Belgrade, Serbia (hereinafter “Delux”, “we” or “us” or “controllers” ) from users of our website at www.vojjo.io (the “Site”), all related applications, widgets, software, tools, and other Service provided by us and on which a link to this Policy is displayed, and hardware we provide to enable the use of our software platform (jointly the “Service”).
We, the aforementioned controllers, are jointly responsible for processing your personal data and have therefore concluded an agreement in accordance with Art. 43 of the Law/ Art. 26 GDPR. The purpose of this agreement is to record which of the controllers assumes which legal obligation. Among other things, it regulates the following key points:
All controllers are themselves responsible for keeping a processing directory, carrying out a data protection impact assessment or consulting the supervisory authorities. The controllers have undertaken appropriate technical and organizational security measures for the data to be processed in order to ensure and be able to prove that the processing takes place in accordance with the provisions of data protection law. The safety measures shall ensure a level of protection appropriate to the risk and shall be reviewed and updated as necessary. The technical and organizational measures shall also ensure that the processing of the data is carried out in accordance with the statutory requirements. The persons responsible shall inform each other immediately of any disruptions to the course of operations which may entail risks for the data and of any suspected breaches of data protection in connection with personal data. The controllers shall coordinate the content of the report and keep themselves informed of communication with the supervisory authority on an ongoing basis. This also applies if there is a legal obligation to inform you as the user of the data protection violation.
If you assert one of your rights as a user against one of the controllers, the respective controller shall inform the other controllers of this immediately in text form. The controller who will be contacted directly by you is responsible for fulfilling your rights as a data subject.
The controller contacted by you will, for example, communicate with you, compile the necessary information, check the asserted claim and implement it accordingly. The controllers are obliged to support each other in fulfilling such claims. They keep themselves informed on an ongoing basis and intend to reach agreement on all essential steps. You can assert your rights against each controller. Should measures become necessary in accordance with the asserted right of data subjects (e.g. correction, deletion, restriction, notifications to recipients, transfer and publication), the controllers shall implement them on their own responsibility.
Although you can assert your rights mentioned below against each controller, we have set up the following central point of contact for your questions and suggestions:
Delux Ltd. Belgrade
31/A Partizanski blok, ulica 1 Str.,
11000 Belgrade
Serbia
E-mail: contact@vojjo.io
As the performance of the Services and the delivery of the Services implies the processing of personal data of persons in EU, we made this Policy in compliance with the requirements of the current legal framework in relation to data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), that is applicable only to persons in EU. This Policy contains information for you about the type, scope and purpose of the collection and use of personal data when you visit our website by us – Delux – in accordance with the Law on Personal Data Protection of the Republic of Serbia (the “Law”), the EU General Data Protection Regulation (the “GDPR”) and relevant legislation of the USA.
This Policy also describes our use and disclosure of such information. By using our Service, you consent to the collection, use, and disclosure of personal data in accordance with this Policy. This Policy is incorporated by reference into the https://vojjo.io/terms-of-services/ (the “Terms of Service”) available and subject to the provisions of the Terms of Service.
Personal Data
“Personal Data” as used in this Policy, is information that specifically identifies an individual, such as an individual’s name, address, telephone number, or e-mail address. Personal Data also includes information about an individual’s activities, such as information about his or her activity on our Service, and demographic information, such as date of birth, geographic area, and preferences, when any of this information is linked to Personal Data that identifies that individual.
Personal Data does not include “aggregate” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, Service, or users that is not personally identifiable or from which individual identities are removed. We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes.
Assigned Data Use
We observe the principle of purpose limitation and collect, process and store your personal data only for the purposes of which we have informed you. There is no disclosure of your personal data to third parties or to an allied company without your expressed consent unless it is not necessary to provide the services or to perform the contract or otherwise specified in this Policy. Disclosure to third parties or to allied companies is assured by guarantee pursuant to Art. 65 of the Law/Art. 46 of GDPR. In addition, any disclosure to state institutions and authorities entitled to information is only made within the framework of the statutory disclosure duties or when we are bound by a legal ruling to provide information.
Within our company, we take internal data protection very seriously. Our employees and companies commissioned by us to provide services are contractually bound to secrecy and to observe the statutory data protection regulations.
Children
Children’s safety is important to us, and we encourage parents and guardians to take an active interest in the online activities of their children. Our Service are not directed to children under the age of 16, and we do not knowingly collect Personal Data from children under the age of 16 without obtaining parental consent. If we learn that we have collected Personal Data from a child under the age of 16 on our Service, we will delete that information as quickly as possible. If you believe that we may have collected any such Personal Data on our Service, please notify us at contact@vojjo.io.
Collection of Information
We collect your personal data on our website in two ways: (1) indirectly (for example, through the technology on our website) and (2) directly (for example, if you sign up for our Newsletters). All personal data shall be kept as long as you have profile, i.e., until you withdraw the consent, except for those personal data that are kept in accordance with legal regulations in order to fulfill our legal obligations and for accounting purposes.
Directly – Collection of Voluntarily-Provided Information
We collect information, which may include Personal Data, that our users provide to us in a variety of ways through our Service. If you have registered with our Services, we collect and store your personal data after your consent. We use appropriate precautions and modern technologies on our infrastructure to protect your data. These include the following:
Data Gathered by Platform and Application. Our Service collects geolocation information when you use our mobile application. This information may include physical location, such as street address and Internet Protocol address. The legal basis for data collection in this case is provided for in Art. 12 para 1 (2) Law/Art. 6 para. 1 (b) GDPR.
E-mail Newsletters. We may offer e-mail newsletters from time to time on our Service. If you sign up to receive a newsletter from us, we collect your e-mail address. The legal basis for collecting this data is your consent (Art. 12 para 1 (1) Law/Art. 6 para. 1 (a) GDPR). At any time, you can withdraw your consent to the storage of data as well its use for sending the newsletter. In every newsletter you will find a “cancellation” link whereby, with one click, you can deregister. Until your cancellation, we store this data so that we can provide the services requested by you.
User Accounts and Profiles. Our Service may give you the ability to register for an Vojjo account or to create and update a user profile on the applicable Service. If we offer user account or profile functionality on the Service, we will collect the Personal Data that you provide to us in the course of registering for an account or creating or updating a user profile. This information may include, for example, name, postal address, telephone number, e-mail address, and related demographic information about you. We may indicate that some Personal Data is required for you to register for the account or to create the profile, while some is optional. The legal basis for collecting this data is your consent (Art. 12 para 1 (1) Law/Art. 6 para. 1 (a) GDPR).
If you contact us by e-mail, using a contact form on the Service, or by mail, or other means, we collect the Personal Data contained within, and associated with, your correspondence. Otherwise, we would explicitly point this out to you and ask for your consent. Since e-mail communication does not use a secure data connection, please refrain from transmitting confidential information in this way. The contacts are stored in the inboxes of the respective e-mail addresses.
When you make a purchase through the Site or mobile application, depending on the case, you may be required to leave certain personal information necessary to conclude a distance sale and purchase contract, create an order or to fulfill obligations under the agreement – delivery, collection and receipt of goods.
When you use our online shopping services through the Site or mobile app, in addition to your first and last name; telephone number; address (city, street and number, postal code, apartment number and floor), we additionally need information about your e-mail address, in order to confirm the purchase and send you a purchase order. If you make an online payment to ensure a secure purchase, we also collect your payment card number and transaction data. We use the data collected in this way exclusively for the purpose of concluding and executing distance sale and purchase contracts, which includes managing and tracking orders, communicating with you, as well as acting in the event of a complaint or warning.
In order to ensure that the products you purchase from us are delivered to the correct address, we share your data with our external partners, in order to provide appropriate services (e.g., your name, delivery address).
Indirectly – Passive Information Collection
When you use our Service, some information is collected automatically. For example, if we automatically collect your browser’s Internet Protocol (IP), your browser type, the nature of the device from which you are visiting the Service (e.g., a mobile device), the identifier for any handheld or mobile device that you may be using, the website that you visited immediately prior to accessing any web-based Service, the actions you take on our Service, and the content, features, and activities that you access and participate in on our Service.
Such storage in the so-called server log files is necessary for technical reasons and to guarantee system security and troubleshooting. This data is used exclusively for statistical purposes and to improve the quality of our Services. We do not assign this data to an identified or identifiable person nor do we commission third parties to do so. In addition, this data is not used to create personal user profiles. However, we reserve the right to later check the server log files if there are concrete indications of illegal use. No conclusions about persons can be drawn from this data.
The legal basis for data processing is the safeguarding of legitimate interests. The legitimate interest lies in the continuous improvement of the www.vojjo.io website for reasons of data security and to guarantee the stability and operational safety of our website, for which the collection of statistical data is indispensable. For this reason, there is no possibility for the user to object.
These server log files are deleted by us immediately after the end of the use process.
We may collect this information passively using technologies such as standard server logs, cookies, and clear GIFs (also known as “Web beacons”) and geo-location tools. We use passively-collected information to administer, operate, and improve the Site and our other Service and systems, and to provide other content that is tailored to you.
Cookies
We use various technologies to collect and store Analytics Data and other information when the Users visit the Services, including cookies and web beacons.
Cookies are small text files sent and saved on your device that allows us to identify users of the Services and facilitate the use of the Services and to create aggregate information of our users. This helps us to improve the Services and better serve our users. The cookies will not harm your device or files. We use cookies to tailor the Services and the information we provide in accordance with the individual interests of our users.
Please note that some parts of the Services may not function properly if use of cookies is refused.
The data stored in the cookie are anonymous and do not contain any Personal Data about you, such as your name or IP address, so it is not possible to assign this data to a specific person later on.
The browsers of many computers, smartphones and other Internet-enabled devices are typically set up to accept cookies. If you do not wish to use cookies on this or any other website, you can set your browser to refuse cookies. The help function of your browser will assist you in doing so.
If we link or associate any information gathered through passive means with Personal Data, or if applicable laws require us to treat any information gathered through passive means as Personal Data, we treat the combined information as Personal Data under this Policy. Otherwise, we use and disclose information collected by passive means in aggregate form or otherwise in a non-personally identifiable form. Please be aware that in the course of your use of the Services, websites or other services provided by third parties (“Third-Party Services”), including marketing or website optimization vendors, may set cookies on your hard drive or use other means of passively collecting information about your use of their Third-Party Services or other services or content. To do this, they may use first-party cookies (which are set by the same domain your browser is receiving data from) or third-party cookies (which are set by a different domain). We also may make non-personally identifiable information available to Third-Party Services, and these Third-Party Services may collect such information, to assist such parties in understanding our users’ activities and usage patterns on the Services. If desired, you may use the Google Analytics Opt-out Browser Add-on to opt-out of having information collected by Google Analytics: https://policies.google.com/privacy?hl=en-US . We do not have access to, or control over, the actions of Third-Party Services. Each provider of Third-Party Services uses information that it collects in accordance with its own privacy and security policies.
Service Providers
We may disclose Personal Data to third-party service providers (e.g., payment processing and data storage and processing facilities, storage providers, courier services) that assist us in our work. We limit the Personal Data provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Personal Data.„Amazon Web Services (AWS)“: https://aws.amazon.com/legal/?nc1=f_cc
Information from Other Sources
We may receive information about you, including Personal Data, from third parties, and may combine this information with other Personal Data we maintain about you. If we do so, this Policy governs any combined information that we maintain in a personally identifiable format.
Use of Personal Data
We may use Personal Data to provide Service and information that you request; to enhance, improve, operate, and maintain our Service, our programs, Service, Web sites, and other systems; to prevent fraudulent use of our Service and other systems; to prevent or take action against activities that are, or may be, in violation of our Terms of Service or applicable law; to tailor content, and other aspects of your experience on and in connection with the Service; to maintain a record of our dealings with you; for other administrative purposes; and for any other purposes that we may disclose to you at the point at which we request your Personal Data, and pursuant to your consent.
We may also use Personal Data you provide to contact you regarding products, Service, and offers, both from ourselves and from third parties, that we believe you may find of interest. We allow you to opt-out from receiving marketing communications from us as described in the “Choice” section below.
Disclosure of Personal Data
Except as described in this Policy, we will not disclose your Personal Data that we collect on the Service to third parties without your consent.
Business Transfers
Information about our users, including Personal Data, may be disclosed and otherwise transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of Delux assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which Personal Data is transferred to one or more third parties as one of our business assets.
To Protect our Interests
We also disclose Personal Data if we believe that doing so is legally required, or is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights or property of others, or otherwise to help protect the safety or security of our Service and other users of the Service.
Choice
If you receive commercial e-mail from us, you may unsubscribe at any time by following the instructions contained within the e-mail. You may also opt-out from receiving commercial e-mail from us, and any other promotional communications that we may send to you from time to time (e.g., by postal mail) by sending your request to us by e-mail at contact@vojjo.io or by writing to us at the address given at the end of this policy. Additionally, if we offer user account functionality on the Service, we may allow you to view and modify settings relating to the nature and frequency of promotional communications that you receive from us.
You may make various choices with the Service regarding the amount and type of data that an unmanned aerial vehicle managed by the Service will collect.
Please be aware that if you opt-out of receiving commercial e-mail from us, it may take up to ten business days for us to process your opt-out request, and you may receive commercial e-mail from us during that period. Additionally, even after you opt-out from receiving commercial messages from us, you will continue to receive administrative messages from us regarding our Service.
Access
If we offer the ability to create user accounts or profiles on our Service, you may have the ability to access and update many categories of Personal Data that you provide to us by logging in to your account and accessing your account settings. If you wish to access or amend any other Personal Data we hold about you, you may contact us at contact@vojjo.io or you can change Personal Data via Service.
If you request that we delete your account on any of our Service (via a user settings page, by e-mail, or otherwise), we will do so within a reasonable period of time, but we may need to retain some of your Personal Data in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.
Links
The Service may contain links to other websites, products, or Services that we do not own or operate. For example, the Service may contain links to upload data to another website or service for processing on our behalf. The Service also may contain links to Third-Party Services such as social networking services. If you choose to visit or use any Third-Party Sites or products or Service available on or through such Third-Party Sites, please be aware that this Policy will not apply to your activities or any information you disclose while using those Third-Party Sites or any products or Service available on or through such Third-Party Sites. We are not responsible for the privacy practices of these Third-Party Sites or any products or Service on or through them. Additionally, please be aware that the Service may contain links to websites and Services that we operate but that are governed by different privacy policies. We encourage you to carefully review the privacy policies applicable to any website or service you visit other than the Service before providing any Personal Data on them.
Security
We use reasonable security measures that are designed to protect Personal Data from accidental loss, disclosure, misuse, and destruction. Please be aware, however, that no data security measures can be guaranteed to be completely effective. Consequently, we cannot ensure or warrant the security of any information that you provide to us. You transmit information to us at your own risk.
YOUR RIGHTS
We set out here which rights you have in connection with your personal data. Please be aware that data protection regulations and data handling directions e.g., by Google can change all the time. It is therefore advisable and requisite to keep up to date about the changes in legal requirements and the practice of the business e.g., Google.
Rights of Access and Rectification.
Without giving reasons, you will receive information at any time about data stored by us.
Your request for information may relate to the following information:
- the reasons why your personal data is being processed;
- the categories of personal data which are being processed;
- the recipient or category of recipients to whom the personal data has been or will be disclosed;
- the planned length of time for storing your personal data, if exact information is not possible for this, criteria to determine the storage time;
- the existence of a legal right to rectify or erase your personal data, a right to restrict its processing by the responsible controller or a right of objection to its processing;
- the existence of a right of appeal to a regulatory body;
- all available information about the source of the data if the personal data was not collected from you;
- the existence of automated decision-making including profiling and – at least in these cases – meaningful information about the logic involved as to the extent and the intended impact on you of such processing.
You can at any time rectify or complete data collected by us if your processed data is incorrect or incomplete.
Right to Restrictions of Processing.
Under the following conditions you may set restrictions on the processing of your personal data
- if you challenge the accuracy of your personal data, for a period of time which allows us to check the accuracy of the personal data;
- the processing is wrong, and you refuse the erasure of the personal data and instead demand restriction on the use of the personal data;
- we no longer require the personal data for processing purposes, but you require it to assert, carry out or defend a legal claim;
- if you have made an objection to processing and have not yet established whether our grounds of justification outweigh yours.
Where the processing of your personal data has been restricted, this data – apart from its storage – may only be processed with your consent or in order to assert, carry out or defend a legal claim or to protect rights of another natural or legal person or for reasons in the important public interest.
Where the restrictions on processing have been imposed under the above requirements you will be notified by us before the restriction is removed.
Right to Erasure.
You can require us to immediately erase your personal data if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or was processed in another way.
- You withdraw your consent on which, under Art. 12, para 1 (1) of the Law or Art. 17 para 2 (1) of the Law / Art. 6 para.1 (a) or Art. 9 para. 2 (a) GDPR the processing is approved and there is no other legal basis for the processing.
- Pursuant to Art. 37 para. 1 of the Law / Art. 21 para.1 GDPR you lodge an objection against the processing and there are no justified reasons having priority for the processing or you lodge an objection under Art. 37. para 2 of the Law / Art. 21 para. 2 GDPR against the processing.
- Your personal data was wrongfully processed.
- The erasure of your personal data is to fulfil a legal obligation of the controller.
- Your personal data was collected relating to services offered by information societies pursuant to Art. 16 para 1 of the Law / Art. 8 para. 1 GDPR.
Right to Information.
If you have asserted a right for rectification, erasure or restrictions of the processing, you have the right to be informed about the recipient to whom your personal data was disclosed.
Right to Data Transfer.
You have the right to receive the personal data which you have supplied to us in a structured, normal and machine-readable format. In addition, you have the right to pass this data to another responsible person if
- the processing is based on consent given in accordance with Art. 12 para 1 (1) or Art. 17. para 2. (1) of the Law / Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or in a contract pursuant to Art. 12 para. 1 (2) of the Law / Art. 6 para. 1 (b) GDPR and
- the processing is made with help of an automated process.
In exercising these rights, you further have the right to have your personal data transferred directly from us to another responsible person provided this is technically possible. Liberties and rights of other persons are not to be infringed by this.
Right of Objection.
You may object to the presentation of data collection and storage set out in the data protection declaration. You may also at any time, without giving any reasons, withdraw your consent for our future data collection and usage.
Right of Appeal.
Regardless of other administrative or legal remedies you have the right to appeal to a regulatory body, if you are of the opinion that the processing of your data is in breach of the Law/GDPR.
Personal data processed in the context of this section (Law/GDPR) may be transferred to a country outside the European Economic Area without the prior written consent of the person whose data is being collected only to countries that have implemented Privacy Shield or similar. If personal data processed under this Privacy policy are transferred from a country within the European Economic Area to a country outside the European Economic Area, we shall ensure that the personal data are adequately protected. To achieve this, we shall, unless agreed otherwise, rely on EU approved standard contractual clauses for the transfer of personal data.
The Regulatory Body of the Republic of Serbia:
Commissioner for Information of Public Importance and Personal Data Protection
15 Bulevar kralja Aleksandra Str.,
Belgrade 11120
Tel: +381 11 3408 900
Fax: +381 11 3343 379
Email: оffice@poverenik.rs
Updates to this Policy
We may occasionally update this Policy. When we do, we will also revise the “last updated” date at the beginning of the Policy. Your continued use of our Service after such changes will be subject to the then-current policy. If we change this Policy in a manner that is materially less restrictive of our use or disclosure of your Personal Data, we will use reasonable efforts to notify you of the change and to obtain your consent prior to applying the change to any Personal Data that we collected from you prior to the date the change becomes effective. We encourage you to periodically review this Policy to stay informed about how we collect, use, and disclose Personal Data.
Contact
Your trust and your rights are important for us. Therefore, we are willing to account to you at any time about the processing of your personal data.
If you have questions about this Agreement or about Delux or you have the request relating to your rights stated in the Section YOUR RIGHTS, please contact us by e-mail at contact@vojjo.io.
Privacy Policy
This privacy policy (the “Policy”) describes the collection of Personal Data by Delux Ltd. Belgrade, with registered office at address 31/A Partizanski blok, ulica 1 Str., 11000 Belgrade, Serbia (hereinafter “Delux”, “we” or “us” or “controllers” ) from users of our website at www.vojjo.io (the “Site”), all related applications, widgets, software, tools, and other Service provided by us and on which a link to this Policy is displayed, and hardware we provide to enable the use of our software platform (jointly the “Service”).
We, the aforementioned controllers, are jointly responsible for processing your personal data and have therefore concluded an agreement in accordance with Art. 43 of the Law/ Art. 26 GDPR. The purpose of this agreement is to record which of the controllers assumes which legal obligation. Among other things, it regulates the following key points:
All controllers are themselves responsible for keeping a processing directory, carrying out a data protection impact assessment or consulting the supervisory authorities. The controllers have undertaken appropriate technical and organizational security measures for the data to be processed in order to ensure and be able to prove that the processing takes place in accordance with the provisions of data protection law. The safety measures shall ensure a level of protection appropriate to the risk and shall be reviewed and updated as necessary. The technical and organizational measures shall also ensure that the processing of the data is carried out in accordance with the statutory requirements. The persons responsible shall inform each other immediately of any disruptions to the course of operations which may entail risks for the data and of any suspected breaches of data protection in connection with personal data. The controllers shall coordinate the content of the report and keep themselves informed of communication with the supervisory authority on an ongoing basis. This also applies if there is a legal obligation to inform you as the user of the data protection violation.
If you assert one of your rights as a user against one of the controllers, the respective controller shall inform the other controllers of this immediately in text form. The controller who will be contacted directly by you is responsible for fulfilling your rights as a data subject.
The controller contacted by you will, for example, communicate with you, compile the necessary information, check the asserted claim and implement it accordingly. The controllers are obliged to support each other in fulfilling such claims. They keep themselves informed on an ongoing basis and intend to reach agreement on all essential steps. You can assert your rights against each controller. Should measures become necessary in accordance with the asserted right of data subjects (e.g. correction, deletion, restriction, notifications to recipients, transfer and publication), the controllers shall implement them on their own responsibility.
Although you can assert your rights mentioned below against each controller, we have set up the following central point of contact for your questions and suggestions:
Delux Ltd. Belgrade
31/A Partizanski blok, ulica 1 Str.,
11000 Belgrade
Serbia
E-mail: contact@vojjo.io
As the performance of the Services and the delivery of the Services implies the processing of personal data of persons in EU, we made this Policy in compliance with the requirements of the current legal framework in relation to data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), that is applicable only to persons in EU. This Policy contains information for you about the type, scope and purpose of the collection and use of personal data when you visit our website by us – Delux – in accordance with the Law on Personal Data Protection of the Republic of Serbia (the “Law”), the EU General Data Protection Regulation (the “GDPR”) and relevant legislation of the USA.
This Policy also describes our use and disclosure of such information. By using our Service, you consent to the collection, use, and disclosure of personal data in accordance with this Policy. This Policy is incorporated by reference into the https://vojjo.io/terms-of-services/ (the “Terms of Services”) available and subject to the provisions of the Terms of Services.
Personal Data
“Personal Data” as used in this Policy, is information that specifically identifies an individual, such as an individual’s name, address, telephone number, or e-mail address. Personal Data also includes information about an individual’s activities, such as information about his or her activity on our Service, and demographic information, such as date of birth, geographic area, and preferences, when any of this information is linked to Personal Data that identifies that individual.
Personal Data does not include “aggregate” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, Service, or users that is not personally identifiable or from which individual identities are removed. We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes.
Assigned Data Use
We observe the principle of purpose limitation and collect, process and store your personal data only for the purposes of which we have informed you. There is no disclosure of your personal data to third parties or to an allied company without your expressed consent unless it is not necessary to provide the services or to perform the contract or otherwise specified in this Policy. Disclosure to third parties or to allied companies is assured by guarantee pursuant to Art. 65 of the Law/Art. 46 of GDPR. In addition, any disclosure to state institutions and authorities entitled to information is only made within the framework of the statutory disclosure duties or when we are bound by a legal ruling to provide information.
Within our company, we take internal data protection very seriously. Our employees and companies commissioned by us to provide services are contractually bound to secrecy and to observe the statutory data protection regulations.
Children
Children’s safety is important to us, and we encourage parents and guardians to take an active interest in the online activities of their children. Our Service are not directed to children under the age of 16, and we do not knowingly collect Personal Data from children under the age of 16 without obtaining parental consent. If we learn that we have collected Personal Data from a child under the age of 16 on our Service, we will delete that information as quickly as possible. If you believe that we may have collected any such Personal Data on our Service, please notify us at contact@vojjo.io.
Collection of Information
We collect your personal data on our website in two ways: (1) indirectly (for example, through the technology on our website) and (2) directly (for example, if you sign up for our Newsletters). All personal data shall be kept as long as you have profile, i.e., until you withdraw the consent, except for those personal data that are kept in accordance with legal regulations in order to fulfill our legal obligations and for accounting purposes.
Directly – Collection of Voluntarily-Provided Information
We collect information, which may include Personal Data, that our users provide to us in a variety of ways through our Service. If you have registered with our Services, we collect and store your personal data after your consent. We use appropriate precautions and modern technologies on our infrastructure to protect your data. These include the following:
Data Gathered by Platform and Application. Our Service collects geolocation information when you use our mobile application. This information may include physical location, such as street address and Internet Protocol address. The legal basis for data collection in this case is provided for in Art. 12 para 1 (2) Law/Art. 6 para. 1 (b) GDPR.
E-mail Newsletters. We may offer e-mail newsletters from time to time on our Service. If you sign up to receive a newsletter from us, we collect your e-mail address. The legal basis for collecting this data is your consent (Art. 12 para 1 (1) Law/Art. 6 para. 1 (a) GDPR). At any time, you can withdraw your consent to the storage of data as well its use for sending the newsletter. In every newsletter you will find a “cancellation” link whereby, with one click, you can deregister. Until your cancellation, we store this data so that we can provide the services requested by you.
User Accounts and Profiles. Our Service may give you the ability to register for an Vojjo account or to create and update a user profile on the applicable Service. If we offer user account or profile functionality on the Service, we will collect the Personal Data that you provide to us in the course of registering for an account or creating or updating a user profile. This information may include, for example, name, postal address, telephone number, e-mail address, and related demographic information about you. We may indicate that some Personal Data is required for you to register for the account or to create the profile, while some is optional. The legal basis for collecting this data is your consent (Art. 12 para 1 (1) Law/Art. 6 para. 1 (a) GDPR).
If you contact us by e-mail, using a contact form on the Service, or by mail, or other means, we collect the Personal Data contained within, and associated with, your correspondence. Otherwise, we would explicitly point this out to you and ask for your consent. Since e-mail communication does not use a secure data connection, please refrain from transmitting confidential information in this way. The contacts are stored in the inboxes of the respective e-mail addresses.
When you make a purchase through the Site or mobile application, depending on the case, you may be required to leave certain personal information necessary to conclude a distance sale and purchase contract, create an order or to fulfill obligations under the agreement – delivery, collection and receipt of goods.
When you use our online shopping services through the Site or mobile app, in addition to your first and last name; telephone number; address (city, street and number, postal code, apartment number and floor), we additionally need information about your e-mail address, in order to confirm the purchase and send you a purchase order. If you make an online payment to ensure a secure purchase, we also collect your payment card number and transaction data. We use the data collected in this way exclusively for the purpose of concluding and executing distance sale and purchase contracts, which includes managing and tracking orders, communicating with you, as well as acting in the event of a complaint or warning.
In order to ensure that the products you purchase from us are delivered to the correct address, we share your data with our external partners, in order to provide appropriate services (e.g., your name, delivery address).
Indirectly – Passive Information Collection
When you use our Service, some information is collected automatically. For example, if we automatically collect your browser’s Internet Protocol (IP), your browser type, the nature of the device from which you are visiting the Service (e.g., a mobile device), the identifier for any handheld or mobile device that you may be using, the website that you visited immediately prior to accessing any web-based Service, the actions you take on our Service, and the content, features, and activities that you access and participate in on our Service.
Such storage in the so-called server log files is necessary for technical reasons and to guarantee system security and troubleshooting. This data is used exclusively for statistical purposes and to improve the quality of our Services. We do not assign this data to an identified or identifiable person nor do we commission third parties to do so. In addition, this data is not used to create personal user profiles. However, we reserve the right to later check the server log files if there are concrete indications of illegal use. No conclusions about persons can be drawn from this data.
The legal basis for data processing is the safeguarding of legitimate interests. The legitimate interest lies in the continuous improvement of the www.vojjo.io website for reasons of data security and to guarantee the stability and operational safety of our website, for which the collection of statistical data is indispensable. For this reason, there is no possibility for the user to object.
These server log files are deleted by us immediately after the end of the use process.
We may collect this information passively using technologies such as standard server logs, cookies, and clear GIFs (also known as “Web beacons”) and geo-location tools. We use passively-collected information to administer, operate, and improve the Site and our other Service and systems, and to provide other content that is tailored to you.
Cookies
We use various technologies to collect and store Analytics Data and other information when the Users visit the Services, including cookies and web beacons.
Cookies are small text files sent and saved on your device that allows us to identify users of the Services and facilitate the use of the Services and to create aggregate information of our users. This helps us to improve the Services and better serve our users. The cookies will not harm your device or files. We use cookies to tailor the Services and the information we provide in accordance with the individual interests of our users.
Please note that some parts of the Services may not function properly if use of cookies is refused.
The data stored in the cookie are anonymous and do not contain any Personal Data about you, such as your name or IP address, so it is not possible to assign this data to a specific person later on.
The browsers of many computers, smartphones and other Internet-enabled devices are typically set up to accept cookies. If you do not wish to use cookies on this or any other website, you can set your browser to refuse cookies. The help function of your browser will assist you in doing so.
If we link or associate any information gathered through passive means with Personal Data, or if applicable laws require us to treat any information gathered through passive means as Personal Data, we treat the combined information as Personal Data under this Policy. Otherwise, we use and disclose information collected by passive means in aggregate form or otherwise in a non-personally identifiable form. Please be aware that in the course of your use of the Services, websites or other services provided by third parties (“Third-Party Services”), including marketing or website optimization vendors, may set cookies on your hard drive or use other means of passively collecting information about your use of their Third-Party Services or other services or content. To do this, they may use first-party cookies (which are set by the same domain your browser is receiving data from) or third-party cookies (which are set by a different domain). We also may make non-personally identifiable information available to Third-Party Services, and these Third-Party Services may collect such information, to assist such parties in understanding our users’ activities and usage patterns on the Services. If desired, you may use the Google Analytics Opt-out Browser Add-on to opt-out of having information collected by Google Analytics: https://policies.google.com/privacy?hl=en-US . We do not have access to, or control over, the actions of Third-Party Services. Each provider of Third-Party Services uses information that it collects in accordance with its own privacy and security policies.
Service Providers
We may disclose Personal Data to third-party service providers (e.g., payment processing and data storage and processing facilities, storage providers, courier services) that assist us in our work. We limit the Personal Data provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Personal Data.„Amazon Web Services (AWS)“: https://aws.amazon.com/legal/?nc1=f_cc
Information from Other Sources
We may receive information about you, including Personal Data, from third parties, and may combine this information with other Personal Data we maintain about you. If we do so, this Policy governs any combined information that we maintain in a personally identifiable format.
Use of Personal Data
We may use Personal Data to provide Service and information that you request; to enhance, improve, operate, and maintain our Service, our programs, Service, Web sites, and other systems; to prevent fraudulent use of our Service and other systems; to prevent or take action against activities that are, or may be, in violation of our Terms of Service or applicable law; to tailor content, and other aspects of your experience on and in connection with the Service; to maintain a record of our dealings with you; for other administrative purposes; and for any other purposes that we may disclose to you at the point at which we request your Personal Data, and pursuant to your consent.
We may also use Personal Data you provide to contact you regarding products, Service, and offers, both from ourselves and from third parties, that we believe you may find of interest. We allow you to opt-out from receiving marketing communications from us as described in the “Choice” section below.
Disclosure of Personal Data
Except as described in this Policy, we will not disclose your Personal Data that we collect on the Service to third parties without your consent.
Business Transfers
Information about our users, including Personal Data, may be disclosed and otherwise transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of Delux assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which Personal Data is transferred to one or more third parties as one of our business assets.
To Protect our Interests
We also disclose Personal Data if we believe that doing so is legally required, or is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights or property of others, or otherwise to help protect the safety or security of our Service and other users of the Service.
Choice
If you receive commercial e-mail from us, you may unsubscribe at any time by following the instructions contained within the e-mail. You may also opt-out from receiving commercial e-mail from us, and any other promotional communications that we may send to you from time to time (e.g., by postal mail) by sending your request to us by e-mail at contact@vojjo.io or by writing to us at the address given at the end of this policy. Additionally, if we offer user account functionality on the Service, we may allow you to view and modify settings relating to the nature and frequency of promotional communications that you receive from us.
You may make various choices with the Service regarding the amount and type of data that an unmanned aerial vehicle managed by the Service will collect.
Please be aware that if you opt-out of receiving commercial e-mail from us, it may take up to ten business days for us to process your opt-out request, and you may receive commercial e-mail from us during that period. Additionally, even after you opt-out from receiving commercial messages from us, you will continue to receive administrative messages from us regarding our Service.
Access
If we offer the ability to create user accounts or profiles on our Service, you may have the ability to access and update many categories of Personal Data that you provide to us by logging in to your account and accessing your account settings. If you wish to access or amend any other Personal Data we hold about you, you may contact us at contact@vojjo.io or you can change Personal Data via Service.
If you request that we delete your account on any of our Service (via a user settings page, by e-mail, or otherwise), we will do so within a reasonable period of time, but we may need to retain some of your Personal Data in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.
Links
The Service may contain links to other websites, products, or Services that we do not own or operate. For example, the Service may contain links to upload data to another website or service for processing on our behalf. The Service also may contain links to Third-Party Services such as social networking services. If you choose to visit or use any Third-Party Sites or products or Service available on or through such Third-Party Sites, please be aware that this Policy will not apply to your activities or any information you disclose while using those Third-Party Sites or any products or Service available on or through such Third-Party Sites. We are not responsible for the privacy practices of these Third-Party Sites or any products or Service on or through them. Additionally, please be aware that the Service may contain links to websites and Services that we operate but that are governed by different privacy policies. We encourage you to carefully review the privacy policies applicable to any website or service you visit other than the Service before providing any Personal Data on them.
Security
We use reasonable security measures that are designed to protect Personal Data from accidental loss, disclosure, misuse, and destruction. Please be aware, however, that no data security measures can be guaranteed to be completely effective. Consequently, we cannot ensure or warrant the security of any information that you provide to us. You transmit information to us at your own risk.
YOUR RIGHTS
We set out here which rights you have in connection with your personal data. Please be aware that data protection regulations and data handling directions e.g., by Google can change all the time. It is therefore advisable and requisite to keep up to date about the changes in legal requirements and the practice of the business e.g., Google.
Rights of Access and Rectification.
Without giving reasons, you will receive information at any time about data stored by us.
Your request for information may relate to the following information:
- the reasons why your personal data is being processed;
- the categories of personal data which are being processed;
- the recipient or category of recipients to whom the personal data has been or will be disclosed;
- the planned length of time for storing your personal data, if exact information is not possible for this, criteria to determine the storage time;
- the existence of a legal right to rectify or erase your personal data, a right to restrict its processing by the responsible controller or a right of objection to its processing;
- the existence of a right of appeal to a regulatory body;
- all available information about the source of the data if the personal data was not collected from you;
- the existence of automated decision-making including profiling and – at least in these cases – meaningful information about the logic involved as to the extent and the intended impact on you of such processing.
You can at any time rectify or complete data collected by us if your processed data is incorrect or incomplete.
Right to Restrictions of Processing.
Under the following conditions you may set restrictions on the processing of your personal data
- if you challenge the accuracy of your personal data, for a period of time which allows us to check the accuracy of the personal data;
- the processing is wrong, and you refuse the erasure of the personal data and instead demand restriction on the use of the personal data;
- we no longer require the personal data for processing purposes, but you require it to assert, carry out or defend a legal claim;
- if you have made an objection to processing and have not yet established whether our grounds of justification outweigh yours.
Where the processing of your personal data has been restricted, this data – apart from its storage – may only be processed with your consent or in order to assert, carry out or defend a legal claim or to protect rights of another natural or legal person or for reasons in the important public interest.
Where the restrictions on processing have been imposed under the above requirements you will be notified by us before the restriction is removed.
Right to Erasure.
You can require us to immediately erase your personal data if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or was processed in another way.
- You withdraw your consent on which, under Art. 12, para 1 (1) of the Law or Art. 17 para 2 (1) of the Law / Art. 6 para.1 (a) or Art. 9 para. 2 (a) GDPR the processing is approved and there is no other legal basis for the processing.
- Pursuant to Art. 37 para. 1 of the Law / Art. 21 para.1 GDPR you lodge an objection against the processing and there are no justified reasons having priority for the processing or you lodge an objection under Art. 37. para 2 of the Law / Art. 21 para. 2 GDPR against the processing.
- Your personal data was wrongfully processed.
- The erasure of your personal data is to fulfil a legal obligation of the controller.
- Your personal data was collected relating to services offered by information societies pursuant to Art. 16 para 1 of the Law / Art. 8 para. 1 GDPR.
Right to Information.
If you have asserted a right for rectification, erasure or restrictions of the processing, you have the right to be informed about the recipient to whom your personal data was disclosed.
Right to Data Transfer.
You have the right to receive the personal data which you have supplied to us in a structured, normal and machine-readable format. In addition, you have the right to pass this data to another responsible person if
- the processing is based on consent given in accordance with Art. 12 para 1 (1) or Art. 17. para 2. (1) of the Law / Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or in a contract pursuant to Art. 12 para. 1 (2) of the Law / Art. 6 para. 1 (b) GDPR and
- the processing is made with help of an automated process.
In exercising these rights, you further have the right to have your personal data transferred directly from us to another responsible person provided this is technically possible. Liberties and rights of other persons are not to be infringed by this.
Right of Objection.
You may object to the presentation of data collection and storage set out in the data protection declaration. You may also at any time, without giving any reasons, withdraw your consent for our future data collection and usage.
Right of Appeal.
Regardless of other administrative or legal remedies you have the right to appeal to a regulatory body, if you are of the opinion that the processing of your data is in breach of the Law/GDPR.
Personal data processed in the context of this section (Law/GDPR) may be transferred to a country outside the European Economic Area without the prior written consent of the person whose data is being collected only to countries that have implemented Privacy Shield or similar. If personal data processed under this Privacy policy are transferred from a country within the European Economic Area to a country outside the European Economic Area, we shall ensure that the personal data are adequately protected. To achieve this, we shall, unless agreed otherwise, rely on EU approved standard contractual clauses for the transfer of personal data.
The Regulatory Body of the Republic of Serbia:
Commissioner for Information of Public Importance and Personal Data Protection
15 Bulevar kralja Aleksandra Str.,
Belgrade 11120
Tel: +381 11 3408 900
Fax: +381 11 3343 379
Email: оffice@poverenik.rs
Updates to this Policy
We may occasionally update this Policy. When we do, we will also revise the “last updated” date at the beginning of the Policy. Your continued use of our Service after such changes will be subject to the then-current policy. If we change this Policy in a manner that is materially less restrictive of our use or disclosure of your Personal Data, we will use reasonable efforts to notify you of the change and to obtain your consent prior to applying the change to any Personal Data that we collected from you prior to the date the change becomes effective. We encourage you to periodically review this Policy to stay informed about how we collect, use, and disclose Personal Data.
Contact
Your trust and your rights are important for us. Therefore, we are willing to account to you at any time about the processing of your personal data.
If you have questions about this Agreement or about Delux or you have the request relating to your rights stated in the Section YOUR RIGHTS, please contact us by e-mail at contact@vojjo.io.