Privacy policy
Effective date: 19 October 2026. Version 1.0.
1. Who controls your information
IMPEX CONNECT DOO BEOGRAD is the controller for personal information processed for its business enquiries, procurement and customer relationships. Registered address: JURIJA GAGARINA 231 (lokal 329), Beograd (Novi Beograd), Srbija. Registration number: 21984396. PIB / VAT number: 114183890. Contact us at info@impex-connect.com or +381 63 8214 003.
This policy concerns our website and related business correspondence. It also protects individuals who contact us on behalf of a business. Business-only sales do not remove personal-data obligations concerning employees, representatives or sole traders.
2. Information and sources
Depending on your interaction, we process your name, professional role, company, business contact details, enquiry and correspondence, technical documents you provide, and quotation, order, delivery, billing and payment records. Technical documents can contain personal information such as names and signatures. Please avoid sending identity documents, special-category data or unrelated personal information unless genuinely required and agreed.
Website services can also process IP addresses, browser and device information, timestamps, pages requested, security events, cookie identifiers and consent choices. See the Cookie Policy for platform information and available choices.
Information comes from you, your employer or colleagues, business counterparties involved in a transaction, and the technical services supporting the website. If we use other sources such as public business registers for verification, we will provide applicable information about those sources.
3. Purposes and legal grounds
| Purpose | Ground and limits |
|---|---|
| Responding to business enquiries, technical selection and preparing quotations | Our legitimate interests in communicating with business representatives and evaluating transactions; steps requested before a contract where the individual is personally a prospective contracting party. |
| Performing orders, arranging delivery and administering customer relationships | Contract necessity where you are the contracting individual; legitimate interests in administering corporate contracts and communicating with representatives. |
| Accounting, tax, required trade-compliance checks and legal disclosures | Applicable legal obligations; legitimate interests where a particular verification is not legally mandatory, subject to an appropriate balancing assessment. |
| Website operation, fraud prevention, security and defending claims | Applicable legal obligations and proportionate legitimate interests in maintaining secure services and protecting rights. |
| Optional analytics, advertising or marketing subscriptions | Only if actually introduced, with the legally required notice and valid consent or another applicable lawful ground. Enquiry handling is not conditional on marketing consent. |
Where we rely on legitimate interests, we consider the purpose, necessity and impact on individuals. You may object on grounds relating to your situation, and may object to direct marketing at any time. Refusing optional data may prevent the optional service; withholding information necessary to evaluate or fulfil a transaction may prevent us from proceeding.
4. Services and recipients
Our website is hosted by Shopify and we use email for business correspondence. We have not independently connected Google Analytics, advertising pixels, a newsletter platform or live chat as of the effective date. Shopify's own platform services may process device and usage information, so this does not mean that the website uses only necessary cookies.
Information may be shared, as necessary for the relevant purpose, with Shopify and email/IT service providers, manufacturers and engineering or supply partners evaluating or fulfilling your request, transport and customs providers, banks involved in the transaction, accountants, professional advisers and competent authorities. We limit information to what is relevant; technical partners do not need unrelated personal information.
Shopify processes information about access to and use of our website to provide, secure and improve its services. Its role can include processing on our behalf and, for certain enabled platform or enhanced services, processing as a separate controller under its own notices. Enhanced services, where enabled, can involve information from interactions with this store and other merchants. See Shopify's Privacy Policy, the Data Processing Addendum and Shopify's privacy controls for details and applicable rights. This policy does not state that every optional Shopify service is enabled.
Shopify Network Intelligence is enabled for this store as of the effective date. It uses information about interactions with this store together with information from other merchants and Shopify for enhanced services, including service improvement, personalisation and advertising-related features. For that processing Shopify acts as a separate controller responsible for applicable rights requests. See the Shopify Consumer Privacy Policy and privacy portal. No other merchant can access our customer data through this feature.
5. International processing
The Shopify admin identifies the primary data-hosting location for this store as the United States as of the effective date. Our service providers and relevant business recipients may also process information outside Serbia and your country of residence. Shopify hosting and support should not be assumed to take place only in Serbia or the EU. Shopify's applicable processing agreement and provider notices describe its international processing and safeguards.
International transfers are subject to the applicable Serbian rules and any other rules governing the specific transfer. Applicable safeguards can include a recognised adequacy decision or approved contractual safeguards, depending on the destination and relationship. EU/UK and Serbian mechanisms are not interchangeable merely because they have similar names. Contact info@impex-connect.com to request information about relevant recipients, destinations and safeguards or how to obtain a copy, subject to lawful redactions.
6. Retention
We retain information for the time needed to handle an enquiry, administer the resulting business relationship, meet applicable accounting/tax and trade-compliance obligations, deal with defects and claims, and establish, exercise or defend legal rights. These are the criteria used where no single period applies to every record.
Enquiries that do not lead to business are retained while follow-up or a justified legal purpose remains necessary. Transaction, accounting and tax records follow applicable statutory periods. Routine security logs are distinguished from evidence needed for a specific incident. Information under a legal hold is limited to the relevant matter, and access is restricted as appropriate. Provider logs and backups follow the relevant service's retention and backup lifecycle. We do not claim an arbitrary universal deletion period for provider-controlled records.
7. Your rights
Depending on applicable law and circumstances, you may request access and a copy, correction, deletion, restriction, portability and information about international transfers, and may object to processing. Where consent is the legal ground, you may withdraw it without affecting the lawfulness of processing before withdrawal. You may object to direct marketing at any time. Rights are subject to applicable conditions, including legally required retention and the defence of claims.
Send requests to info@impex-connect.com. We may request proportionate information to verify identity. Under Serbian law we respond without undue delay and ordinarily within 30 days; a permitted extension requires notice and reasons within the applicable period. Where another applicable law requires a different deadline, that deadline applies. We do not penalise you for exercising applicable privacy rights.
You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection at poverenik.rs, or another competent supervisory authority where applicable. Contacting us first is not a condition of filing a complaint.
8. Security, external services and children
We use proportionate technical and organisational safeguards and restrict access according to business need. No website or email system guarantees absolute security. Please avoid sending sensitive personal information through ordinary enquiry forms. Suspected incidents are assessed and notifications made where legally required.
Links to manufacturers and other external websites lead to services with their own privacy notices. Embedded players, social widgets or chat may transmit information without leaving our page, and must be assessed separately when introduced. The website is intended for professional business users and is not directed at children. Contact us if a child has provided personal information so that we can address it appropriately.
Our business enquiry and order acceptance process is conducted by email. We do not use a solely automated decision to accept or reject a business order with legal effect on an individual. Platform security and anti-spam tools may automatically evaluate technical events to protect the website.
9. Cookies, future services and updates
See our Cookie Policy for cookies, similar technologies and available choices. Browsing the website or sending an enquiry does not itself provide consent to optional tracking or marketing. If optional tools are introduced, the relevant notices and legal grounds must be addressed before their use. An enquiry is not a newsletter subscription.
This policy will be updated when relevant practices change. Its date and version identify the published notice. Material changes will be communicated as required by law; changing this text alone does not create a lawful ground for a new processing purpose.