Уведомление о конфиденциальности
Здесь объясняется, какие персональные данные AfroMarket использует при просмотре сайта, обращении к нам, создании аккаунта и оформлении заказа. Это уведомление об обработке, а не просьба согласиться с необязательной обработкой.
Действует с:
Кто отвечает за ваши данные?
Оператором данных интернет-магазина AfroMarket является:
AfroMarket d.o.o. Novi SadRumenka, Vojvode Putnika 10, Srbija
afromarket.rs@gmail.com
+381 62 960 46 45
Какие данные мы используем и зачем
Мы используем только данные, необходимые для указанных целей. Если закон устанавливает срок хранения, использование транзакционных записей ограничивается этой целью.
| Операция | Данные и цель | Правовое основание | Срок хранения |
|---|---|---|---|
| Browse and secure the site | Session identifier, IP address, browser/device data and security events, used to operate the cart, prevent abuse and diagnose faults. | Service necessity and our legitimate interest in a secure, reliable shop. | Session data expires when the session ends. Routine security and diagnostic logs are normally kept for up to 30 days; relevant incident records may be kept longer. |
| Account and social sign-in | Name, email, telephone, password hash, preferences and registration IP. When you approve a trusted device we also store its IP and browser signature. Social sign-in adds the provider and stable identifier returned by Google or Meta; OAuth access tokens are not retained. | Steps requested before a contract and performance of the account service. Security is our legitimate interest. | While the account is active, then deleted or anonymised following a valid request except where a legal retention duty applies. Registration IP is anonymised within 30 days, trusted-device authorisation expires after 90 days, and the social link is removed with the account. |
| Orders and delivery | Contact and delivery details, cart, order history, chosen delivery method and order comments, used to fulfil and support the order. To protect checkout we also record the ordering IP, browser user agent and accepted language. | Contract, steps requested before a contract, legal duties relating to commerce, tax and accounting, and our legitimate interest in preventing fraud. | Operational data is kept only while needed. Core transaction and accounting records may be retained for the applicable statutory period, no longer than 10 years where such a period applies. Order fraud metadata is anonymised within 12 months unless it is linked to an active security incident, fraud review or legal claim. |
| Payments and refunds | Order number, amount, payment status/reference and contact details sent to the selected payment provider. AfroMarket does not receive or store your full card number or card security code. | Contract, accounting/legal duties, and our legitimate interest in preventing payment fraud and resolving disputes. | Payment and transaction evidence is retained for the statutory accounting, refund, chargeback and claims periods, with access restricted. |
| Customer support | Name, contact details, message and any order details you provide, used to answer and document the request. | Contract where the request concerns an order; otherwise our legitimate interest in providing support. | Normally up to 24 months after the request is closed, or longer only when needed for an active dispute or legal duty. |
| Public reviews and article comments | The author name, review, comment or reply text, rating and publication date are shown publicly. We use the account identifier for product-review moderation. Article comments and ratings also record the submission IP to prevent abuse. | Publication at your request and our legitimate interest in operating trustworthy community features and preventing abuse. | Published author, text and rating data is deleted after a verified erasure request. Article-comment and article-rating submission IPs are deleted or anonymised within 30 days. Content may also be removed earlier through moderation. |
| Affiliate programme and payouts | Company and website, tax details, payment method and, depending on your choice, payee, PayPal or bank-account details, commission and payout history. Data is shared only as needed with the selected bank or payment service, accountants and authorised AfroMarket staff. | Steps requested before an affiliate contract, performance of that contract, accounting and tax duties, and our legitimate interest in preventing payout fraud and reconciling payments. | The active affiliate profile is kept while the programme relationship continues. It is then deleted or anonymised, while the minimum commission and payout ledger may be retained with restricted use for the applicable statutory accounting and claims periods. |
| Store credit and rewards | Store-credit funding and balance allocations, reward points and their application to orders, used to keep balances accurate, prevent duplicate use and reconcile refunds. | Contract, applicable accounting duties, and our legitimate interest in maintaining an accurate credit and reward ledger. | Non-essential account display data is removed with the account. Where law or an unresolved claim requires it, the minimum store-credit and reward ledger is retained with restricted use for the applicable accounting and claims periods. |
| Product requests, ratings and stock alerts | Account or temporary browser identifier, selected product, request or rating, date, and email when you ask for a stock alert. | The service you request, our legitimate interest in improving the catalogue, and consent for an email stock alert. | A stock-alert email address is deleted after the alert is sent or withdrawn; unresolved alerts expire after 12 months. Guest product requests and ratings expire after 12 months. Account-linked choices remain while the account is active and are removed with it. |
| Newsletter | Email address and evidence of the subscription choice, used only to send the newsletter. | Consent. Subscription is optional and can be withdrawn at any time. | Until you unsubscribe or a verified account erasure is completed. While the account remains, its choice history contains no email or IP address. No separate newsletter-consent evidence is retained after account erasure. |
| Optional analytics and marketing attribution | Search terms, campaign parameters, referrer and interaction data used to understand campaigns and improve the catalogue. | Consent where required. Optional collection is off until you choose it. | Identifiable first-party optional analytics records are kept for no more than 30 days, then deleted or aggregated. If an optional provider integration is enabled after consent, its browser-cookie durations are listed separately in the Cookie Policy. |
Кому передаются данные?
Доступ получают только сотрудники и поставщики, которым данные нужны для указанной цели. В зависимости от вашего выбора это:
- AfroMarket staff responsible for sales, customer support, accounting and security;
- delivery providers, including D Express, for the delivery you select;
- Alta Bank / the hosted payment processor for card payments, refunds and fraud checks;
- banks, payment services and accounting advisers where needed for affiliate payouts and reconciliation;
- Google or Meta only when you choose the corresponding social sign-in;
- Cloudflare for anti-bot and security checks on protected forms;
- hosting, email, maintenance and professional advisers under appropriate confidentiality and data-protection terms;
- public authorities where disclosure is required by law.
Некоторые технологические поставщики могут обрабатывать данные за пределами Сербии или страны вашего нахождения. До включения такой обработки AfroMarket оценивает поставщика и применяет необходимые для сервиса договорные и иные гарантии передачи. Информацию о гарантиях для ваших данных можно запросить.
Что обязательно?
Отмеченные обязательными поля нужны для создания выбранного аккаунта, доставки заказа или ответа на форму. Без них услуга может быть невозможна. Рассылка и необязательная аналитика никогда не являются условием покупки.
AfroMarket не принимает решений с юридическими или сопоставимыми существенными последствиями исключительно посредством автоматического профилирования.
Ваш выбор и права
С учётом условий и исключений применимого закона вы можете:
- ask for a copy of your personal data and information about its use;
- correct inaccurate or incomplete data;
- ask for deletion or restriction of processing;
- object to processing based on legitimate interests;
- receive data you supplied in a portable format where the right applies;
- withdraw consent at any time, without affecting earlier lawful processing.
Используйте форму запроса данных или напишите на afromarket.rs@gmail.com. Мы проверим личность и ответим в установленный законом срок.
Можно обратиться к Уполномоченному Сербии по информации общественного значения и защите персональных данных: poverenik.rs. Когда применяется GDPR, также можно подать жалобу надзорному органу страны ЕС/ЕЭЗ по месту обычного проживания, работы или предполагаемого нарушения.
Как мы защищаем данные
- Encrypted HTTPS connections and secure session controls;
- role-based administrative access and password hashing;
- minimisation of data sent to payment and social-login providers;
- logging, backups and access review appropriate to the service risk;
- incident assessment and notification where required by law.
После удаления данные могут временно оставаться в защищённых ротационных резервных копиях до перезаписи в рамках контролируемого цикла. Они не возвращаются в активное использование, а после восстановления резервной копии удаление применяется повторно. Текущий срок ротации можно запросить у нас.
Cookies и аналогичное хранилище
Необходимое хранилище обеспечивает работу корзины, безопасность и язык. Необязательные категории выключены до выбора. В Политике cookies можно проверить или изменить настройки.
Изменения уведомления
Существенные изменения публикуются здесь с новой датой. Если понадобится новое согласие, мы запросим его отдельно.