Privacy policy
1.Who processes the data
The controller is Planeta računari, Tax ID 106957267, Milice Pavlović 32/3/12, 32000 Čačak, Serbia.
For any question about data, write to office@planeta-racunari.rs.
The Serbian Personal Data Protection Act applies, and for users in the European Union, the General Data Protection Regulation (GDPR).
2.Data you provide at checkout
| Data | Why | Basis |
|---|---|---|
| Full name | The invoice and identifying the payment | contract |
| Sending the key and the proforma | contract | |
| Domain | Tying the license to a site | contract |
| Address and city | Issuing the proforma invoice | law |
| Company, VAT, registration number | Invoicing for companies | law |
| IP address | Protecting the form from abuse | legitimate interest |
We ask for the address, company and VAT number only where they are needed for an invoice. If you buy by card, we do not ask for them at all.
3.What the plugin sends us
The plugin talks to the license server when activating, when checking the license, and when checking for a new version. It then sends exactly four pieces of data:
- The license key, so we know which license it is
- The site domain, so the number of sites in the package is respected
- The WordPress version, so we know which versions to support
- The plugin version, so we know whether a newer one exists
Alongside that, we record when a license was last seen on which domain, to protect against key sharing.
4.Your clients' data
Because of that, you are the controller of that data, and we are neither controller nor processor. A data processing agreement between us is not needed, because there is no processing on our side.
That means you are responsible for your clients' consents, for answering their requests, and for what you do with that data. The plugin gives you the tools for it:
- Export of all data for one client, from their record
- Deletion of a client's data
- The consent text in the form, which you edit yourself
If you use a webhook or the API to send data to a third-party service, for example Zapier or Make, then you choose that processor and settle the relationship with them. We take no part in it and do not know what you have connected.
5.This site and cookies
This site sets no tracking cookies and uses no third-party analytics. Visit counting runs on our own server, without cookies: we record which page was opened, where you came from, and whether you are on a phone or a computer. Your IP address is not stored.
Browser local storage is used, and only for two things: to remember the language you picked and the currency you view prices in. That stays in your browser and is sent to no one.
The checkout page uses a session cookie, needed for the form to work and to prevent abuse. It is deleted when you close the browser.
Fonts load from Google Fonts, which sees your IP address in the process. That is the only external service this site uses.
6.How long we keep data
| Data | How long |
|---|---|
| Orders and invoices | 10 years, as tax law requires |
| License and activations | As long as the license exists, since it is perpetual |
| License check records | 12 months |
| Email correspondence | While useful for support, at most 3 years |
7.Who we share data with
We do not sell data, we do not trade it and we do not use it for advertising. We share it only where it is necessary:
| With whom | What and why |
|---|---|
| Hosting | The site and database sit on a server in Serbia |
| Paddle | Email and amount, only if you pay by card through Paddle |
| Accounting | Invoice data, because the law requires it |
| Authorities | Only under a legal obligation |
For card payments, Paddle is the seller and an independent controller and applies its own privacy policy.
8.Your rights
At any time you have the right to:
- Request a copy of the data we hold about you
- Ask us to correct inaccurate data
- Ask for deletion, except what we must keep under tax law
- Object to processing based on legitimate interest
- Lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection
Send your request to office@planeta-racunari.rs. We answer within 30 days, and usually the same or the next working day.
9.Who we are
We have no data protection officer, because the law does not require us to appoint one. The owner answers every question personally.