Privacy Policy

Last updated: January 2025.

1. Data Controller

ŠUM RENT, Ljube Didića 21, Beograd, Republic of Serbia.
Email: sumsbeograd@gmail.com
Tel: +381631907812

2. Data We Collect

Identity & contact data: full name, email address, phone number, delivery address — collected when making a booking
Booking data: equipment name, rental dates, message / event description
Technical data: IP address (abuse prevention), session cookies

3. Purpose and Legal Basis

Performance of a rental contract — processing bookings, confirmation, delivery and payment
Legitimate interests of the controller — service security and fraud prevention

Your data is not used for direct marketing without your explicit consent.

4. Data Retention

Booking data is retained for 5 years from the contract execution date in accordance with accounting obligations. After this period, data is permanently deleted.

5. Cookies

NEXT_LOCALE — stores your selected interface language
clt — client account session (active for 1 year or until logout)
next-auth.session-token — administrator session

6. Sharing with Third Parties

Your personal data is not sold or shared with third parties for commercial purposes. The only exception is our hosting provider, who processes data solely on our behalf under a data processing agreement.

7. Your Rights

Right of access — view the data we hold about you
Right to rectification — correct inaccurate or incomplete data
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to object
Right to data portability

Submit requests to: sumsbeograd@gmail.com. We will respond within 30 days.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection: www.poverenik.rs.

9. Changes to This Policy

We reserve the right to update this privacy policy. We will notify you of any significant changes via a notice on the website.