1. Data controller
The controller of personal data processing and records is Vora doo (hereinafter: the Company), with its registered seat at Komitska bb, Bijeljina. For any questions regarding the protection of your data, you can contact us by email: [email protected].
2. What data we collect
The Company collects and processes only the minimal set of data necessary for its operations:
- Full name
- Home / delivery address
- Email address and phone number
- A photo of the package you provide when sending it
- Company name and registration number (for business customers)
3. Purpose and legal basis for processing
We collect your data exclusively for the following purposes:
- Performance of a contract or delivery: To deliver the products you ordered or provide the agreed services to your address.
- Legal obligations: To issue invoices and meet tax obligations in Bosnia and Herzegovina.
The legal basis for processing is your consent (when entering the data) and the necessity to perform contractual obligations under the Law on the Protection of Personal Data of Bosnia and Herzegovina.
4. Data retention period
Personal data is kept for as long as necessary to fulfil the purpose for which it was collected, namely:
- For the duration of the contractual relationship.
- In accordance with the statutory periods for retaining financial and accounting documentation in BiH (most commonly 5 to 11 years).
The history of an individual package or order is automatically deleted 6 months after that package or order is delivered/cancelled, while your user account remains active for possible future use.
5. Sharing data with third parties
The Company does not sell or share your data without authorisation. Your name and address are forwarded only to trusted partners without whom the service cannot be provided:
- Courier / delivery services (to deliver packages).
All partners are contractually obliged to use the data solely for the stated purposes and to protect it. Data is not transferred outside the borders of Bosnia and Herzegovina.
6. Data protection and security
We apply technical and organisational measures to ensure a high level of security for your data. This includes access control (only authorised persons within the company have access) and the use of secure protocols on our website (SSL encryption).
7. User rights
In accordance with the Law on the Protection of Personal Data of BiH, you have the following rights:
- Right of access: You can request confirmation of whether your data is being processed and obtain access to it.
- Right to rectification: You can request correction of inaccurate data or completion of incomplete data.
- Right to erasure: You can request deletion of data when it is no longer necessary for the purpose for which it was collected, provided there is no legal obligation to retain it.
- Right to object: You have the right to lodge an objection directly with us or with the competent state authority.
We respond to your request no later than 30 days from the date of receipt.
8. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data is contrary to the law, you have the right to lodge a complaint with the independent state authority: the Personal Data Protection Agency of Bosnia and Herzegovina.