The data controller is MILOŠ MIJATOVIĆ PR CVEĆARA GRANA BEOGRAD, Bulevar kralja Aleksandra 274, Beograd, tax ID (PIB) 115923394, company no. (MB) 68750466. For anything about your data, write to cvecara@grana.rs or call +381 69 110 1080.
We ask for only as much as it takes to get the bouquet where it should go. We do not sell or trade it.
What we collect
When you order, we take from you:
- the name of the person ordering
- a phone number and an email address, so we can confirm the order
- the delivery address (street and number, floor and flat if you give them), or a note that you are collecting at the shop
- the date and part of the day for delivery
- the contents of the cart, the card message and any note you leave
- the recipient's name and phone number, when the bouquet goes to someone else's address
Why we process it
Each purpose has its own legal basis:
- Performance of the contract: making the bouquet, delivering it, getting in touch about the order.
- Legal obligation: accounting and tax rules.
- Legitimate interest: handling complaints and guarding against misuse, for example false orders.
- Consent: only where you explicitly sign up for messages. You can withdraw consent whenever you like, with one message.
Who else sees the data
The site also relies on technical partners, each only for the part it needs to work:
- Vercel: hosting the site.
- Supabase: the database and photo storage; the data sits on servers in the European Union.
- Google Maps Platform: measuring the distance to the address and suggesting streets as you type. Google receives the text of the address, without your name, phone number or the contents of the cart.
- Resend: sending the order confirmation email.
- A courier service, when we do not drive the delivery ourselves: the recipient's name, address and phone number.
How long we keep it
Order and invoice data is kept for as long as accounting rules require. After that we delete it, or reduce it to statistics from which you cannot be identified.
We delete the card message after delivery and any complaint period. No one else needs it.
Your rights
At any time you have the right to:
- ask what data we hold about you, and for a copy of it
- ask for an incorrect entry to be corrected
- ask for deletion, where there is no longer a basis for keeping it
- ask us to restrict processing, or object to it
- ask for your data to be transferred to another controller
Cookies and data in your browser
The cart is kept in your browser (localStorage), on your device, not with us.
The details from your last order stay there too, so you do not have to type them again. If you are on a shared or someone else's computer, clear the site data in the browser.
We use no third-party advertising cookies and build no marketing profiles. If chat is switched on, it sets its own cookie so the conversation stays connected.
Complaints about data
If you think we are not handling your data properly, come to us first — that is the quickest. You also have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade.