Privacy Policy for Kartica Vrednica

Effective Date: 28 July 2026

Welcome to Kartica Vrednica, a service operated by PORTAL 381 DOO (“Kartica Vrednica”, “we”, “our”, or “us”).

This Privacy Policy explains how Kartica Vrednica collects, uses, stores, shares, and protects personal data when users access our mobile application, website, and related services (collectively, the “Services”).

Kartica Vrednica is a subscription-based mobile application offering users access to discounted offers, promotions, and special deals across Serbia. The platform is designed primarily for tourists visiting Serbia, but is also available to local residents and other users. Unless otherwise stated, each offer may only be redeemed once per user.

By using the Kartica Vrednica application or subscribing to our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data is:

  • PORTAL 381 DOO (operator of the Kartica Vrednica service)
  • Episkopa Visariona 1, 21000 Novi Sad
  • Republic of Serbia
  • VAT ID (PIB): 112625935

Email: info@karticavrednica.rs

For any privacy-related questions or requests, you may contact us at:

info@karticavrednica.rs

2. What Information We Collect

We may collect the following categories of personal data:

Account Information

When creating an account or subscribing to Kartica Vrednica, we may collect:

  • Full name
  • Email address
  • Phone number
  • Country of residence
  • Preferred language
  • Password and login credentials

Subscription & Payment Information

When purchasing a subscription:

  • Billing information
  • Transaction history
  • Subscription status
  • Payment confirmation

Payments are processed securely through third-party payment providers. Kartica Vrednica does not store full credit or debit card details.

Offer Redemption Data

To prevent abuse and enforce the “single use per offer” policy, we collect:

  • Offer redemption history
  • Time and location of redemption
  • Merchant/store identifier
  • Device/account verification information

Device & Technical Data

We may automatically collect:

  • Device type
  • Operating system
  • App version
  • IP address
  • Mobile identifiers
  • Browser type
  • Crash reports and analytics data

Location Data

With your consent, Kartica Vrednica may access your location to:

  • Show nearby offers
  • Improve recommendations
  • Verify offer eligibility

You may disable location permissions at any time through your device settings.

3. How We Use Your Data

We use personal data for the following purposes:

  • To create and manage user accounts
  • To provide subscription services
  • To display relevant discounts and offers
  • To verify and process offer redemptions
  • To ensure each offer is redeemed only once per user
  • To improve app functionality and user experience
  • To communicate important account or subscription information
  • To provide customer support
  • To detect fraud, abuse, or unauthorized use
  • To comply with legal obligations

Where required by law, processing is based on:

  • Contractual necessity
  • Legitimate business interests
  • User consent
  • Legal compliance obligations

4. Marketing Communications

We may send promotional emails, notifications, or updates regarding:

  • New offers
  • Travel promotions
  • Partner discounts
  • Seasonal campaigns

Users may unsubscribe from marketing communications at any time through:

  • The unsubscribe link in emails
  • App notification settings
  • Contacting Kartica Vrednica support

5. Sharing of Personal Data

We may share limited personal data with:

Partner Businesses

Restaurants, cafés, hotels, attractions, and other merchants participating in Kartica Vrednica may receive limited information necessary to validate and process offer redemption.

Service Providers

Third-party providers assisting with:

  • Payment processing
  • Cloud hosting
  • Analytics
  • Customer support
  • Marketing tools
  • Security monitoring

All service providers are contractually obligated to protect your data.

Legal Authorities

We may disclose information where required by law, court order, or regulatory obligation.

We do not sell users’ personal data to third parties.

6. International Users

Kartica Vrednica is operated by PORTAL 381 DOO, established in the Republic of Serbia, and processes personal data in accordance with the Serbian Law on Personal Data Protection (“Official Gazette of the Republic of Serbia”, No. 87/2018), which is aligned with the General Data Protection Regulation (GDPR). Where we offer our Services to users located in the European Economic Area (EEA), we also process their personal data in accordance with the GDPR.

Users accessing the Services from outside Serbia acknowledge that their data may be transferred to and processed in the Republic of Serbia, and may also be processed within the EEA by our service providers.

Serbia is a party to the Council of Europe Convention 108 and its Protocol on the protection of individuals with regard to automatic processing of personal data. Where personal data is transferred from the EEA to Serbia or to any other country, we rely on appropriate safeguards recognised under applicable law, such as the European Commission’s Standard Contractual Clauses.

7. Data Retention

We retain personal data only for as long as necessary to:

  • Provide the Services
  • Maintain legal and accounting records
  • Resolve disputes
  • Enforce agreements
  • Prevent fraudulent redemptions

When data is no longer necessary, it will be securely deleted or anonymized.

8. Your Data Protection Rights

Under the Serbian Law on Personal Data Protection and, where applicable, the GDPR, users may have the right to:

  • Access their personal data
  • Correct inaccurate data
  • Request deletion (“Right to be Forgotten”)
  • Restrict processing
  • Object to processing
  • Withdraw consent
  • Request data portability
  • Lodge a complaint with a supervisory authority

Requests may be submitted to:

info@karticavrednica.rs

We may request identity verification before processing requests.

In the Republic of Serbia, the competent supervisory authority is the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), Belgrade, www.poverenik.rs. Users located in the EEA may also lodge a complaint with the supervisory authority of their country of residence.

9. Security Measures

Kartica Vrednica implements appropriate technical and organizational security measures designed to protect personal data against:

  • Unauthorized access
  • Misuse
  • Loss
  • Alteration
  • Disclosure

However, no internet-based system can be guaranteed to be completely secure.

10. Children’s Privacy

Kartica Vrednica is not intended for children under the age of 18.

We do not knowingly collect personal data from minors.

If we become aware that a child has provided personal data without parental consent where required, we will delete such information promptly.

11. Cookies & Analytics

Kartica Vrednica may use cookies, SDKs, and similar technologies to:

  • Remember user preferences
  • Analyse app usage
  • Improve functionality
  • Measure marketing performance

Users may manage certain tracking permissions through their device or browser settings.

12. Fraud Prevention & Offer Abuse

To maintain fairness for users and partner businesses:

Each promotional offer may only be redeemed once per eligible user unless otherwise stated.

Kartica Vrednica may use account verification, device identifiers, location verification, transaction logs, and anti-fraud monitoring systems to detect duplicate or abusive redemptions.

Accounts suspected of fraud or misuse may be suspended or terminated without refund where legally permitted.

13. Third-Party Links & Services

The Kartica Vrednica app may contain links to third-party websites, businesses, or booking services.

Kartica Vrednica is not responsible for the privacy practices of third-party services.

Users should review the privacy policies of those third parties separately.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be published within the application and/or on our website.

Continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

15. Contact Information

For questions, privacy requests, or complaints, please contact:

  • PORTAL 381 DOO
  • Episkopa Visariona 1, 21000 Novi Sad
  • Republic of Serbia
  • VAT ID (PIB): 112625935

Email: info@karticavrednica.rs

This Privacy Policy is governed by the laws of the Republic of Serbia, in particular the Law on Personal Data Protection (“Official Gazette of the Republic of Serbia”, No. 87/2018), and by applicable European Union legislation, including the GDPR, where it applies.