Privacy Policy

This Privacy Policy explains how PLASTOPEX d.o.o. ("PLASTOPEX", "we", "us") collects, uses and protects personal data when you visit this website, request a quote, contact us, or use our "Plastiša" chatbot assistant.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti).

1. Who we are (Data Controller)

The data controller is PLASTOPEX d.o.o., Pere Jovanovića Komirićanca 50, 14530 Osečina, Srbija.

For any privacy-related request, contact us at info@plastopex.com or +381 69 723 200.

2. What data we collect

We only collect data you choose to provide and a minimal amount of technical data needed to operate the site securely:

• Contact & quote requests: your name, company, email, phone number, the product category and the details of your enquiry, and any photo/drawing you attach.
• Chatbot (Plastiša): the messages you send and any contact details or lead information you provide in the conversation.
• Technical data: your IP address and request metadata, used for rate-limiting and to protect the site from abuse.
• Cookies / local storage: see our Cookie Policy.

We do not knowingly collect special categories of data. Please do not include sensitive personal data in your messages.

3. Why we use your data and our legal basis

• To respond to your enquiry and prepare a tailored quote - on the basis of your consent and steps taken at your request prior to entering a contract.
• To send a confirmation and communicate with you about your request - consent / legitimate interest.
• To operate, secure and improve the website (rate-limiting, abuse prevention) - our legitimate interest in a safe, functional service.
• To comply with legal obligations where applicable.

You can withdraw consent at any time; this does not affect processing carried out before withdrawal.

4. The Plastiša AI assistant

Our chatbot uses a third-party AI provider to generate responses. The messages you send in the chat may be transmitted to and processed by that provider solely to produce a reply.

AI-generated answers are informational only and may be inaccurate or incomplete. They are not binding offers, prices, deadlines, technical guarantees or professional advice - always confirm details by requesting a formal quote.

Please do not share passwords, payment details or other sensitive information with the assistant.

5. Sharing and processors

We do not sell your personal data. We share it only with service providers ("processors") who act on our instructions, including:

• our website hosting and database provider;
• our email/SMTP provider (to deliver notification and confirmation emails);
• our AI provider (to generate chatbot responses).

Some providers may process data outside Serbia/the EEA (for example, an AI provider based in the United States). Where that is the case, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

We keep enquiry and quote data for as long as needed to handle your request and our subsequent business relationship, and thereafter only as required to meet legal, accounting or legitimate-interest obligations. Technical logs are kept for a short period for security purposes.

Indicative retention is up to 24 months after our last contact unless a longer period is required by law - the company confirms exact periods internally.

7. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with the competent supervisory authority (in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection).

To exercise any of these rights, email info@plastopex.com.

8. Security

We apply appropriate technical and organisational measures - including transport encryption (HTTPS), access controls, input validation and abuse protection - to safeguard your data. No method of transmission or storage is perfectly secure, but we work to protect your information.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date below reflects the latest revision. Material changes will be communicated where appropriate.

10. Contact

Questions about this policy or your data? Contact PLASTOPEX d.o.o. at info@plastopex.com or +381 69 723 200, Pere Jovanovića Komirićanca 50, 14530 Osečina, Srbija.