Personal Data Protection Policy

This policy describes how we collect, use and protect your personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia ("Zakon o zastiti podataka o licnosti", Sl. glasnik RS 87/2018), harmonized with the EU General Data Protection Regulation (GDPR).

Data Controller

Konstantin Kuiukov, preduzetnik (sole proprietor), 33 Resavska Street, Beograd 11000, Serbia. Email: yakon@inbox.ru.

What Personal Data We Collect

We collect the following categories of personal data:

Email address -- for order confirmation, delivery of activation codes, and customer communication;
Session and cookie data -- strictly necessary for shopping cart functionality and site operation;
Billing information (name, address, company, VAT number) -- only if you provide it voluntarily for invoice generation;
Automatically collected data: IP address, browser type, access timestamps -- standard web server logs necessary for security and site operation.

Legal Basis for Processing

We process your personal data on the following legal grounds (Art. 12, Zakon o zastiti podataka o licnosti):

Performance of a contract -- processing necessary to fulfill your order and deliver licenses;
Consent -- where you voluntarily provide data (e.g. billing details for invoicing);
Legitimate interest -- security logging, fraud prevention, website operation.

Purpose of Processing

Your data is used exclusively to:

Process and fulfill orders (send activation codes, manage licenses);
Provide customer support;
Comply with legal obligations;
Ensure the security of our website and services.

Cross-Border Data Transfer

Your data may be transferred to the following third parties and jurisdictions:

PayPal (Pte. Ltd., Singapore / PayPal Inc., USA) -- payment processing;
PayPro Global (Canada) -- payment processing for card payments;
Licensing servers located in Germany, Singapore, Brazil, USA, and Russia -- for license verification.

Where data is transferred outside Serbia or the EU, we rely on adequacy decisions, standard contractual clauses, or the necessity of the transfer for contract performance (Art. 65, Zakon o zastiti podataka o licnosti).

Your Rights

Under the Serbian Data Protection Act you have the right to:

Access -- obtain confirmation whether your data is being processed and receive a copy;
Rectification -- correct inaccurate data;
Erasure -- request deletion of your data when there is no legal basis for continued processing;
Restriction of processing -- limit how your data is used;
Data portability -- receive your data in a structured, machine-readable format;
Objection -- object to processing based on legitimate interest.

To exercise any of these rights, contact us at yakon@inbox.ru.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog znacaja i zastitu podataka o licnosti), Bulevar kralja Aleksandra 15, 11000 Beograd, Serbia, www.poverenik.rs.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. Order-related data is kept for the duration required by tax and accounting regulations. Session and cookie data expires at the end of the browser session or within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted via HTTPS/TLS.

Changes to This Policy

We may update this policy from time to time. The current version is always available at this page. Last updated: April 2026.