Privacy Policy
Last updated: March 27, 2026
1. Introduction
This Privacy Policy describes how RSALE TECHNOLOGY AND DESIGN DOO (hereinafter "Rsale", "we", "us") collects, uses, stores, and protects your personal data when you use our platform rsale.rs (hereinafter the "Platform"). This Policy complies with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette RS No. 87/2018, hereinafter ZZPL).
2. Data Controller
The controller of your personal data is:
RSALE TECHNOLOGY AND DESIGN DOO BEOGRAD-NOVI BEOGRAD
Registration Number: 154613764
Tax ID (PIB): 21986437
Address: Belgrade-Novi Beograd 11070, Serbia
Email: privacy@rsale.rs
3. Data We Collect
We collect the following categories of personal data:
- Registration data: first name, last name, email address, phone number, password (encrypted)
- Profile data: profile picture, address, city, company information (for legal entities)
- Transaction data: purchase and sales history, payment data
- Technical data: IP address, browser type, operating system, device information
- Usage data: visited pages, search queries, interaction with listings
- Communications: messages between users through our platform
4. Legal Basis for Processing
We process your personal data on the following legal bases in accordance with ZZPL:
- Consent (Art. 12 ZZPL): for sending marketing notifications and using non-essential cookies
- Contract performance (Art. 12 ZZPL): for providing platform services, processing transactions, and order-related communications
- Legal obligation (Art. 12 ZZPL): for fulfilling tax and accounting obligations
- Legitimate interest (Art. 12 ZZPL): for improving the platform, preventing fraud, and ensuring security
5. How We Use Your Data
We use your personal data to:
- Create and manage your user account
- Enable buying and selling on the platform
- Process payments and transactions
- Communicate with you regarding your orders and listings
- Provide customer support
- Improve and personalize user experience
- Prevent fraud and abuse
- Fulfill legal obligations
6. Data Sharing
We do not sell your personal data to third parties. We may share data with:
- Other users: when you complete a transaction, the buyer and seller exchange necessary data for its fulfillment
- Service providers: hosting providers, payment processors, email services — only to the extent necessary to provide services
- Government authorities: when required by law or court order
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:
- Account data: while the account exists, plus 30 days after deletion
- Transaction data: 5 years in accordance with tax regulations
- Technical data: up to 12 months
- Communications: while the account exists
8. Your Rights
Under ZZPL, you have the following rights regarding your personal data:
- Right of access (Art. 26): you may request information about which of your data is being processed
- Right to rectification (Art. 29): you may request correction of inaccurate data
- Right to erasure (Art. 30): you may request deletion of your data
- Right to restriction of processing (Art. 31): you may request restriction of processing in certain situations
- Right to data portability (Art. 36): you may request transfer of data in a structured, commonly used, machine-readable format
- Right to object (Art. 37): you may object to processing based on legitimate interest
- Right to withdraw consent: if processing is based on consent, you may withdraw it at any time
To exercise your rights, contact us at: privacy@rsale.rs
9. Cookies
Our platform uses cookies for:
- Essential cookies: required for platform functionality (authentication, language preferences)
- Analytics cookies: help us understand how you use the platform
You can manage cookies through your browser settings.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse, including:
- Data encryption in transit (SSL/TLS)
- Encrypted password storage
- Regular security system updates
- Restricted access to personal data for authorized personnel only
11. International Data Transfers
Your data is primarily stored on servers in Europe. If data transfer outside Serbia is necessary, we ensure an adequate level of protection in accordance with ZZPL, including standard contractual clauses.
12. Children's Data
In accordance with Article 16 of ZZPL, our platform is not intended for persons under 15 years of age. We do not knowingly collect personal data from children under 15. If we learn that we have collected data from a minor without parental or guardian consent, we will take steps to delete that data.
13. Changes to Privacy Policy
We reserve the right to modify this Privacy Policy. You will be notified of all significant changes via email or a notification on the platform. Continued use of the platform after changes constitutes acceptance of the new Policy.
14. Contact and Complaints
For any questions regarding the protection of your personal data, contact us:
Email: privacy@rsale.rs
Address: Belgrade-Novi Beograd 11070, Serbia
If you believe your rights have been violated, you have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti):
Address: Bulevar kralja Aleksandra 15, 11000 Belgrade
Website: www.poverenik.rs