Privacy policy

Controller

What a plain visit generates

When you open a page, your browser sends technically necessary data to our host: IP address, date and time, the address requested, status code, volume transferred, referrer and browser identification. These server logs serve operation and defence against attacks. The legal basis is our legitimate interest in a functioning service under Article 6(1)(f) GDPR.

Fonts and most scripts used by this website are served from our own server. One exception is the Google tag (gtag.js), which every page loads from Google's servers. As a result Google receives your IP address, the address of the page and technical browser data even before you make a cookie choice. Until you accept, the tag works without cookies and without identifiers stored on your device. It tells Google that a page was viewed or an enquiry was sent and transmits the address of the page; if you came from one of our advertisements, that address contains the click identifier of the advertisement (consent mode). The legal basis is our legitimate interest in economical measurement of our advertising, Article 6(1)(f) GDPR. Details follow in the next section.

Cookies and analytics

On your first visit a banner asks whether you accept cookies for Google services. Reject is as easy as Accept, and you can change your choice at any time through the "Cookies" link at the bottom of every page. We keep your choice in your browser local storage for 12 months; after that, or when the purposes described here change, we ask again.

If you accept, we use two services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland:

Google Ads conversion tracking and remarketing. Google stores cookies (for example _gcl_au, lifetime 90 days) so that we can see whether a click on one of our advertisements led to an enquiry, and so that Google can show our advertisements again to visitors of this website on other Google services.

Google Analytics 4. Google stores cookies (_ga and _ga_ with the measurement ID, lifetime up to two years) to measure how the website is used: which pages are opened, where visitors come from, where the enquiry form is started and where it is abandoned. Google Analytics 4 does not log or store IP addresses.

The legal basis for these cookies and the related processing is your consent under Article 6(1)(a) GDPR and the national rules implementing Article 5(3) of the ePrivacy Directive. Google may transfer data to Google LLC in the United States; Google LLC is certified under the EU-US Data Privacy Framework. How Google uses this data: policies.google.com/technologies/partner-sites.

If you reject or make no choice, Google sets no cookies and reads none. The Google tag then only sends signals without cookies (consent mode). If you arrived from one of our advertisements, these signals include the click identifier of that advertisement (gclid) from the page address, so that Google can attribute an enquiry to the advertisement that produced it and count it. No identifier is stored on your device for this. The legal basis is our legitimate interest in measuring the effect of our advertising, Article 6(1)(f) GDPR.

For the duration of your session, the page stores campaign parameters in your browser if you arrived from an advertisement, that is values such as gclid and utm. This is not a cookie, it leaves your device only if you submit the form, and it is discarded when you close the tab. Its purpose is to connect an enquiry with the advertisement that produced it.

When you start filling in the enquiry form, the page keeps what you have entered so far in your browser local storage, so that an interruption does not send you back to the beginning. It keeps the three answers from the short qualification and, where you have already entered them, your name, telephone number and email address. None of it leaves your device before you submit. The draft is deleted after a successful submission and in any case after seven days, and you can clear it yourself at any time with the button above the form. The consent tick is deliberately not stored. This storage is strictly necessary for the service you asked for and therefore does not require consent.

The home page opens in the language of your country. To do this, our host looks up which country your IP address belongs to when the page is requested and forwards you to the matching language version; nothing is stored for this. If you pick a language yourself with the language switcher, the site sets a cookie called bs_lang that holds only the language code and lasts twelve months, so that the home page opens in your language on your next visit. It is set only when you click, it is strictly necessary for the function you asked for and therefore does not require consent. The legal basis for forwarding by country is our legitimate interest in showing the home page in the visitor's language, Article 6(1)(f) GDPR.

Linking an enquiry to an advertisement

When you send the enquiry form after accepting cookies, the page passes your email address and, if you gave one, your telephone number to the Google tag in your browser. The tag turns them into an irreversible hash value (SHA-256) before anything leaves your device, and Google uses that value only to recognise whether the enquiry followed a click on one of our advertisements (enhanced conversions). The email address and telephone number themselves are not sent to Google. If you accepted cookies, we may also report the later outcome of your enquiry to Google, for example that it led to an offer, together with the click identifier of the advertisement, so that Google learns which advertisements lead to real business. Google processes this data as our processor. The legal basis is your consent, Article 6(1)(a) GDPR. If you have rejected cookies, none of this happens.

Your enquiry through the form

When you submit the form we process your name, phone number and email address, together with the answers you gave in the fit check, the address of the page the enquiry came from, the referrer, the campaign parameters described above and the cookie choice you made, so that we know whether the enquiry may be reported to Google as described in the previous section.

The purpose is to handle your enquiry and prepare an offer; the campaign parameters and the cookie choice serve the purposes described in the sections above. The legal basis is Article 6(1)(b) GDPR, because the processing serves steps taken prior to entering into a contract, and, where you have also given consent, Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

Providing the data is voluntary. Without a name and at least one way to reach you, however, we cannot reply.

Who else processes the data

We do not pass your data to third parties in order to market or sell it. The only recipients are service providers acting on our instructions:

Hosted by: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

Transfers to third countries

The controller itself is established in Serbia. There is no adequacy decision of the European Commission for Serbia under Article 45 GDPR. When you submit the form, your entries are therefore transferred to a third country without an adequacy decision. The legal basis for that transfer is Article 49(1)(b) GDPR: it is necessary in order to take steps at your request prior to entering into a contract, namely to prepare a purchase offer for your stock. Without that transfer we cannot deal with your enquiry.

The service providers named above are established outside the European Union or process data there. Such transfers are based on the Standard Contractual Clauses of the European Commission under Article 46(2)(c) GDPR, supplemented, for transfers to the United States, by participation in the EU-US Data Privacy Framework where the provider concerned is certified under it.

Please note that third countries may not offer a level of protection equivalent to the European one in every respect, in particular as regards access by state authorities.

How long the data is kept

Enquiries that do not lead to business are deleted no later than six months after the last contact. Where a purchase contract is concluded, statutory commercial and tax retention periods apply, as a rule six or ten years. Server logs are deleted or truncated after 30 days at the latest.

Your rights

You have the following rights in relation to us:

• Access to the data we hold about you, Article 15 GDPR
• Rectification of inaccurate data, Article 16 GDPR
• Erasure, Article 17 GDPR
• Restriction of processing, Article 18 GDPR
• Data portability, Article 20 GDPR
• Objection to processing based on legitimate interests, Article 21 GDPR
• Withdrawal of consent with effect for the future, Article 7(3) GDPR
• Complaint to a supervisory authority, Article 77 GDPR

Contact on data protection matters

An informal message is enough for access, erasure or objection: