Privacy policy

This Privacy Policy explains how Order Wave d.o.o. Novi Sad collects and processes the personal data of visitors to the ordexa.rs website, in line with the Serbian Personal Data Protection Act and the General Data Protection Regulation (GDPR).

1. Data controller. The controller is Order Wave d.o.o. Novi Sad, Bulevar kralja Petra I 24/27, 21000 Novi Sad, registration number 22111566, tax ID (PIB) 115072921. For any data-related questions you can reach us by phone or Viber at +381 61 2144514.

2. What data we collect. We collect the data you enter in the demo request form: restaurant name, your name, a phone number or email, and optionally your city. We also collect technical and statistical visit data through anonymous analytics (Vercel Analytics), with no tracking cookies and no profiling.

3. Purpose and legal basis. We process the form data to contact you about your demo request and provide the information you asked for (legal basis: steps taken at your request prior to entering a contract, and our legitimate interest). We process statistical data to maintain and improve the site (legitimate interest).

4. Cookies and analytics. The site uses Vercel Analytics, which measures visits anonymously and sets no tracking or advertising cookies. Fonts are loaded via Google Fonts.

5. Data retention. We keep the form data only as long as needed to contact you and handle your enquiry, and at most until you withdraw your request or ask us to delete it.

6. Sharing. We do not sell your data. We share it only with the service providers that let us run the site and handle enquiries: Vercel (hosting and analytics), Telegram (delivering demo requests to our team) and Google (fonts). These processors act on our instructions.

7. Your rights. You have the right to access, rectify, erase, restrict and object to processing, as well as the right to data portability. You can send a request to the contacts above. You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

8. Security. We apply reasonable technical and organisational measures to protect data from unauthorised access, loss or misuse.

9. Changes. We may update this policy from time to time. The current version is always published on this page, with the date of the last update.