Privacy policy

Who looks after your data

The data controller is 360 Ukrug, Niš, Serbia.

For anything about your data, reach us on +381 63 106 8837, by phone or WhatsApp. We reply within 30 days at the latest, usually the same day.

When you message or call us

The site has no form and sends none of your data by itself. The configurator only writes the text of a message, and you decide whether to send it on WhatsApp.

When you get in touch, we see what you send us:

• your phone number and the name on your WhatsApp account,
• the message itself: date, city, the setup you picked and anything you add.

We use it only to reply and agree on a booking. The legal basis is taking steps at your request before entering into a contract (Serbian ZZPL Art. 12(1)(2), GDPR Art. 6(1)(b)).

We keep the conversation while the booking is being arranged and for at most one year after the event. If a contract follows, invoice data is kept as long as accounting law requires.

Messages travel over WhatsApp, provided by Meta (WhatsApp Ireland Limited), and their privacy terms apply to that part too.

Analytics, only with your consent

If you click “Accept” in the banner, we turn on Google Analytics 4. Until you do, the script is not loaded at all and nothing is sent to Google.

With your consent Google records for us:

• a random device identifier from the _ga cookie, with no name or number attached,
• which parts of the site you look at and what you click (for example the WhatsApp button or a package in the configurator),
• device type, browser, language and approximate location at city level. Google Analytics 4 does not store your IP address.

The legal basis is your consent (ZZPL Art. 12(1)(1), GDPR Art. 6(1)(a)). Google Signals and ad personalisation are switched off. Google keeps event data for at most 14 months.

The processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA. Google is certified under the EU–US Data Privacy Framework and uses standard contractual clauses.

You can withdraw consent at any time with one click on “Cookies” at the bottom of the page. We then delete the _ga cookies from your browser and measurement stops. Withdrawal does not affect what was processed before.

What happens on every visit

To show you the page at all, your browser sends our servers its IP address and basic request data. This is necessary, so we do not ask for consent; the basis is our legitimate interest in running the site securely (ZZPL Art. 12(1)(6), GDPR Art. 6(1)(f)).

• The site is hosted on a server in the European Union (Hetzner Online GmbH, Germany). The server keeps technical request logs for a short time, only to fix errors and prevent abuse.
• Clips and images in the gallery load from Backblaze B2 (Backblaze, Inc., USA), so Backblaze also sees your browser’s IP address.
• We host our fonts ourselves. Your browser does not contact Google Fonts for them.

Cookies and browser storage

Without your consent we use a single entry in your browser’s storage (360ukrug:consent) to remember your cookie choice, for six months. After that we ask again. We also ask again if we add a new tool.

With analytics consent, Google sets the _ga cookie and a _ga_ cookie tagged with our measurement ID, for two years. The exact list, purpose and lifetime are in the cookie settings.

Who we share data with

We do not sell it or hand it to anyone for advertising. Only the processors named above have access, as far as their job requires, and public authorities when the law explicitly demands it.

We make no automated decisions about you and build no profiles.

Your rights

At any time you can ask us:

• what data we hold about you, and for a copy of it,
• to correct inaccurate data,
• to delete your data,
• to restrict processing,
• to hand your data over in a common electronic format (portability),
• to stop processing based on legitimate interest (objection),
• to withdraw consent, with no consequences for you.

Just contact us on +381 63 106 8837. If you think we got something wrong, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs. If you live in the European Union, you can also turn to the supervisory authority in your country.

Under 15

A person aged 15 or over can consent to analytics on their own (ZZPL Art. 16). For anyone younger, a parent decides.

Changes

When we change this policy we update the date at the top. If a change introduces something that needs consent, the banner will ask you again.