Privacy policy



Please read this Privacy Policy carefully to understand how we collect, use, and process your personal data. We will explain in detail how we protect your privacy, how you can check and access your data at any time, request its correction and deletion, and how the strict application of this policy is monitored.

This Privacy Policy applies to the website


By using, you agree to the terms of this Privacy Policy. Vinarija Legat 1903 reserves the right to occasionally change the terms of this Privacy Policy, of which you will be notified.

  1. Categories of personal data and processing purposes

The type and amount of data we receive, and store depends on the way you use the Vinarija Legat 1903 website. You can access most pages on the site without revealing your identity or any personal information. Our network servers collect anonymous logs during the user’s visit to our site to provide us with useful information for its improvement, as well as when sending inquiries on the page with a form that the site user fills out if desired. For more information, please see the Cookie Statement below.

We can use your personal data for promotional purposes, primarily to present and show you the advertising and promotional materials of Vinarija Legat 1903. We will ask you for permission to forward advertising material or product information before sending advertising and promotional material. You can change your mind about direct marketing and withdraw your consent to the processing of your personal data for direct marketing purposes at any time by unsubscribing from all marketing communications, changing your user profile or data, and you can also contact us. You can object at any time to the way your personal data is processed for direct advertising purposes. Your request should be signed and dated, with a clear indication of the processing of your personal data of which you object to and for what reasons. You can submit your complaint in the manner specified in Point 8 (Contact Us) below. Also, on this basis, you have the right to complain to the competent supervisory body for data protection – the Commissioner for Information of Public Importance and Protection of Personal Data, 15 Bulevar Kralja Aleksandra Street, 11000 Belgrade.


You can use our website with or without providing any personal data, depending on the needs of the specific situation. If you do not leave personal data, Vinarija Legat 1903 can only collect the following metadata based on your use of the same:

The page from which you reached our website, date and time of access, amount of data transferred, transfer status, type of web browser, IP address, operating system and interface, language and browser software version.

Prize games, prize contests and loyalty programs

If you participate in a prize game, competition or loyalty program organized by Vinarija Legat 1903, Vinarija Legat 1903 collects and processes your personal data, namely: first and last name, phone number, email address, residential address, Citizen Registration Number or ID card or passport registration number (only for winners in a prize game in a bet with a legal requirement), date of participation, selection of the winner or the winner of the prize competition, game or program. Vinarija Legat 1903 processes such personal data exclusively to realize a prize game, i.e., a prize contest or loyalty program, contact participants, inform, and deliver the prize to the winner. Vinarija Legat 1903 collects and stores data on winners, prize games and program participants to fulfil the legal requirements of the game organiser on the mandatory record keeping of winners and submitting the records to the competent authority.

Your personal information will be kept confidential. It will be used only for the purposes for which it was acquired, or if necessary for our compliance with legal and audit obligations.

Job applications

If you apply for a job, internship, or volunteering at Vinarija Legat 1903, we will collect your data to process and file your application and assess your suitability for the role. Candidate data and CVs collected through this means will be used exclusively to select CVs under open positions, contact applicants regarding job interviews or potential employment in the company, with which the applicants agree and are aware.

Our website may contain links to other websites that are not covered by this Privacy and Cookies Notice. If you access other websites using the links provided, the operators of those websites may collect information from you that they will use by their own privacy policies, which may differ from ours. Vinarija Legat 1903 is not responsible for data collected by other websites.

  1. Third parties

Other recipients

Vinarija Legat 1903 informs you of the fact that your personal data may be transferred – under the relevant regulations on data protection – to bodies that enforce laws, by-laws and other imperative acts, to state bodies, legal advisors, external consultants or business partners. In the event of a merger, takeover or other status change of Vinarija Legat 1903, personal data may be transferred to third parties participating in the merger or takeover process.

International transfer of personal data

The personal data we collect or receive about you may be transferred to and processed by recipients located within or outside the European Economic Area (“EEA”). Those countries include those listed on the page, which provide an adequate level of data protection from the point of view of European regulations on the protection of personal data. Recipients in the US are partially certified under the EU-US Privacy Shield and are therefore considered to provide an adequate level of data protection from the point of view of European data protection regulations. Other recipients may be located in other countries that do not provide an adequate degree of protection from the point of view of European data protection regulations. If the transfer occurs, Vinarija Venčac will take all necessary measures to ensure that transfers outside the EEC are adequately protected as required by the applicable regulations on data protection. In connection with the transfer to countries that do not provide an adequate level of data protection, we base the transfer on appropriate safeguards, such as standard data protection clauses adopted by the European Commission or supervisory authority, an approved code of conduct together with binding and enforceable obligations of the recipient or approved certification mechanisms together with binding and enforceable obligations of the recipient. You may request a copy of such appropriate safeguards by contacting us (Contact Us).

  1. Legal basis for processing

We can base the processing of your personal data on the following legal grounds:

  • You have consented to the processing of your data for one or more specific purposes;
  • The processing is necessary for the realization of a contract in which you are one of the parties or to take steps, at your request, before concluding the contract;
  • The processing is necessary to comply with the legal obligations to which we are subject;
  • Processing is necessary for the protection of vital or life-important interests – yours or another natural person’s;
  • The processing is necessary for the performance of tasks performed in the public interest or within the framework of the implementation of official powers granted to us by law;
  • Processing is necessary for legitimate interests that we or a third party seeks to protect, except when your interests or fundamental rights and freedoms that require the protection of personal data prevail over such interests, especially if you are a child or a minor;

You submit your personal data voluntarily unless the obligation to collect is stipulated as our legal obligation. Failure to provide personal data may lead to unfavourable aspects for you as a user, e.g. you will not be able to receive certain benefits and services. However, unless otherwise stated, non-provision of your personal data does not entail other legal consequences for you.

  1. What rights do you have and how can you exercise them?

If you have given your consent to certain collection, processing, and use of your personal data, you can withdraw your consent at any time, with effect for the future.

According to the applicable regulations on data protection, you have the right (i) to request access to and insight into your personal data, (ii) to request correction or addition of your personal data, (iii) to request deletion of your personal data, (iv) to request restriction of the processing of your personal data, (v) to request data portability, (vi) to object to the processing of your personal data.

To exercise your rights or to object to the way your personal data is processed, please contact us as set out in Section 8 (Contact Us) below. Send your request regarding the exercise of your rights concerning your personal data with a clear indication: which of your personal data you want to access and review, which of your personal data you want to supplement, correct or delete, i.e. which of your personal data you object to processing and for what reasons. Your request should be signed and dated. Vinarija Legat 1903 will meet your request as soon as possible and send you the appropriate notification.

In case of objection to the processing of your personal data, you also have the right to file a complaint with the competent supervisory body for data protection – the Commissioner for Information of Public Importance and Protection of Personal Data, 15 Bulevar Kralja Aleksandra Street, 11000 Belgrade, as well as a lawsuit to the competent court.

  1. Cookies and other tracking technologies – Statement on the use of cookies

This website, like most websites, uses small text files called cookies. This section provides information on what cookies are, which cookies Vinarija Legat 1903 uses and how they can be controlled.

If the settings on the software you use to view this site (your browser) are adjusted to accept the cookies we use, and you continue to use our site, we will assume your consent. If you do not want to receive cookies, you can set your browser to limit or block them. All modern browsers allow you to change your cookie settings, usually found in the ‘options’ menu. However, disabling cookies will likely mean that the Vinarija Legat 1903 website will not work as expected.

5.1. What are cookies?

Cookies are text files with small amounts of information that your device downloads when you visit a website. The cookies are then returned to the original page on each subsequent visit or to another page that recognizes that cookie. Cookies are often used because they allow the site to recognize the user’s device and thereby improve functionality.

5.2. How does Vinarija Legat 1903 use cookies?

Our cookies

For our site to work as well as possible, we use cookies that include:

Saving the parameters of your searches

Allowing comments to be added to our site

There is no way to prevent these cookies, other than not using the site.

Social network cookies

To easily share our content on social networks, our site has sharing options. The level of data privacy protection will vary from social network to social network and will depend on the privacy settings you have chosen on these networks.

Cookies for anonymous collection of visitor statistics

We use cookies to collect statistical information about visitors, such as: how many people visit our site and what type of technology they use (e.g. operating system, which helps us identify problems on certain platforms), how long they use the site, which pages of the site they stay on etc. This helps us to constantly improve the site. These programs also anonymously tell us how people got to our site (via Google, social networks, directly, etc.) and whether they have been here before.

You Tube

Sometimes we may embed videos from YouTube. The use of cookies on YouTube is governed by Google’s privacy policy.

5.3. Definitions

First-party cookies and third-party cookies

First-party cookies are those placed by the site that the user is currently visiting – the site that is displayed in the URL field. Third-party cookies are set by a domain that does not belong to the site the user is currently visiting. If a user visits a site and another entity places a cookie through that site, it is a third-party cookie.

Persistent cookies

These cookies remain on the user’s device for the period specified in the cookie. They are activated every time the user visits the page that created that cookie.

Session cookies

These cookies enable the linking of user actions during a browser session. A browser session begins when the user opens the browser window and ends when the user closes the browser window. Session cookies are created temporarily. When you close your browser, all session cookies are deleted.

5.4. Turning off cookies

You can usually turn off cookies by adjusting your browser settings to prevent cookies from being accepted. However, you will probably limit the functionality of our and many other sites, because cookies are a standard part of most modern sites.

  1. How long do we store your personal data?

Your personal data is kept for as long as necessary so that we are able to provide you with the requested benefits and services. When our relationship ends, we will either delete your personal data or anonymize your personal data, unless there are legal requirements to retain it (for example, for tax purposes). Also, applicable laws may require us to retain your certain personal data for a period of 10 years after the end of the relevant tax year. We may also retain your personal data after the termination of the contractual relationship if your personal data is required to comply with other applicable laws or if we need your personal data to establish, exercise or defend legal claims, only when necessary. To the extent possible, we will limit the processing of your personal data for those limited purposes after the end of the contractual relationship.

  1. How safe is your data?

Vinarija Legat 1903 stores your personal data in a secure environment. We take appropriate security measures to protect your personal data and information from unauthorized access, use, loss or disclosure. These systems and measures are regularly tested and updated if necessary.

Taking into account the level of technological achievements and the costs of their application, nature, scope, circumstances and purpose of processing, when processing your data:

  • we apply the necessary protection mechanisms during processing to meet the conditions for processing your data and protect your rights.

We hereby inform you that by constantly applying appropriate technical, organizational and personnel measures, we ensure that only that personal data of yours that is necessary for the achievement of each individual purpose of the processing is always processed. This obligation is applied concerning the number of collected data, the scope of their processing, the term of their storage and their availability.

  1. Contact us

Vinarija Legat 1903 is committed to protecting the privacy of all users of its website. If you have any questions regarding this Privacy Policy, please contact us using the contact information provided below. This Privacy Policy applies to all pages on the Vinarija Legat 1903 website. It does not apply to websites of other organizations, including websites of related organizations and websites of third parties. The website of Vinarija Legat 1903 may contain links to the Internet pages of such organizations, which have their own privacy policy that applies to them.

If you have any questions regarding this Privacy Policy, please contact us:

Vinarija Legat 1903 d.o.o. Banja – Aranđelovac, 41 Brezovačka Street, 34304 Banja

Phone: +381 (0)34 6777500