This document explains what data about you we process when you buy on this site, why, for how long, and what you can ask of us.
Last updated: 10 October 2026
The controller is Aleksandar Knežević PR trgovina na veliko sportskom opremom CUTLINE Smederevo, Izletnička 16a/1/2, 11300 Smederevo, Srbija, VAT 115916612, registration number 68744407.
For any question about data processing, write to info@cutline.rs.
Data you enter yourself: full name, delivery address, email address, phone number, cart contents and order details.
Account data, if you create one: email address and a hashed password. We do not store passwords in readable form and cannot read them.
Technical data: a cart session identifier stored in your browser so the cart survives closing the page.
Site usage data, only if you consent: which pages and products you open, what you add to the cart and whether the purchase was completed, device and browser type, and approximate location (city, derived from the IP address). Google Analytics collects it, and we use it to see what works on the site and what doesn't.
We do not collect or store payment card data. You enter the card number on the bank's page and it never passes through our site.
Performance of a contract. Without a name, address and contact we cannot deliver an order or issue an invoice.
Legal obligation. We keep accounting and tax records of issued invoices.
Consent. This covers newsletter signup and analytics cookies. You can withdraw consent at any time: for the newsletter via the link in every email or by writing to info@cutline.rs, for cookies via the "Cookie settings" button at the bottom of every page.
Legitimate interest. Answering your questions and handling claims.
We pass your name, address and phone to the courier, solely for delivery.
We pass the invoice data to our accountant and the tax authority, as required by law.
We pass our hosting and email providers only what is technically necessary for the site and notifications to work.
When you pay by card, we pass your name, email, billing address, the amount and the order number to NLB Komercijalna banka a.d. Beograd and its payment gateway Bankart, to process the payment and prevent fraud.
Google Ireland Limited (Google Analytics) processes site usage data as our processor, only if you have consented. Google may transfer data to the US under standard contractual clauses and the EU–US Data Privacy Framework. Google Analytics advertising features are turned off: the data is not used for ads.
We do not sell, trade or pass data to third parties for marketing purposes.
Order and invoice data is kept for as long as tax legislation requires, counted from the invoice date.
Account data is kept while the account exists. Deleting the account deletes it, except what we must retain by law.
Newsletter email addresses are kept until consent is withdrawn.
The cart session identifier expires after 30 days of inactivity.
Google Analytics cookies (_ga and _ga_*) expire after 13 months, and Google keeps site usage data for 14 months. When you withdraw consent, we delete the cookies from your browser.
Without consent we use only what the site needs to function: your language choice, the cart identifier, your cookie choice and, if you're signed in, a session token.
With your consent, Google Analytics sets the _ga and _ga_* cookies, which it uses to tell visits apart. Until you consent it does not set them, and Google receives only signals without identifiers (Google Consent Mode).
You make the choice on the bar shown on your first visit and can change it at any time with the "Cookie settings" button at the bottom of the page. We ask again after six months.
We do not use advertising networks or cross-site tracking cookies.
Clearing your browser's local storage clears the cart and signs you out.
You can request access to your data, rectification of inaccurate data, erasure, restriction of processing, portability, and you can object to processing.
Send requests to info@cutline.rs. We respond within 30 days.
If you believe we process data unlawfully, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.
All traffic to the site runs over HTTPS. Passwords are stored hashed. Access to order data is limited to people who need it for their work.
No system is absolutely secure. If a data breach affects you, we will notify you and the supervisory authority within the statutory deadline.
We may amend this policy. The date of the last change is shown at the top of the page. Significant changes are announced by email to account holders.
Requests for access, rectification or erasure go by email. We respond within 30 days.
