Access
You can ask for a copy of everything we hold about you. As a rule that is one message from the form and the exchange that followed it.
BeeCenter · Privacy policy
What happens here to your data
This site measures visits with Google Analytics, but only once you accept it in the cookie preferences; until then it sets no tracking cookie, and there is no Meta Pixel. The personal data we receive is what you type in yourself: into the contact form or into the account for the Friends of the Garden membership. The data is handled by BeeCenter, the Honey Garden inside Dom kulture Silosi in Belgrade.
01 How the site works
What is measured, and only once you say yes
The site is static HTML. The only measurement tool is Google Analytics 4, and it is not loaded at all until you press "Accept" in the cookie preferences. There is no Meta Pixel and no advertising cookie.
Once you accept, Google Analytics sets the cookies _ga and _ga_TH5VK9SF8L (they last up to two years) and records which pages you opened, from what kind of device and from which country. The IP address is truncated, advertising signals are switched off, and the data is kept on Google's side for 14 months. It is processed by Google Ireland Ltd. under a data processing agreement.
Alongside pages it records a few actions: an enquiry sent or a session booked (only the kind of enquiry, never what you wrote), a newsletter sign-up, an account opened or a sign-in, a click on the phone number, e-mail or map, products viewed, the basket, and a completed purchase with the order number, amount and products, without name, address or contact details. So that the same purchase is not counted twice, the browser keeps the numbers of the latest orders under the key bc_ga_kupovine in localStorage. These actions, for example an enquiry sent or a completed purchase, may also be counted in Google Ads so that BeeCenter can measure the results of its own Google ads, without personalised advertising and without advertising cookies.
Your answer is remembered by the cookie bc_pristanak, for six months. Change your mind whenever you like: the cookie button in the bottom left corner of every page, and the "Cookies" link in the footer, both reopen the preferences, and "Reject" stops measurement at once and removes the analytics cookies from this domain.
Fonts, images and scripts are loaded from our own domain. There is no Google Fonts and no external CDN; before you answer that question, the page contacts no third-party server at all.
The shop basket sits in your browser localStorage under the key bc_korpa_v1. It stays on your device, it is never sent to us, and it goes away when you clear the site data in your browser.
02 What data, and why
Everything we hold you typed in yourself
Three fields are required: name, e-mail and message. Everything else is filled in only when it is needed to make an offer accurate.
- Full name required, so we know who we are answering
- E-mail required, our reply arrives there
- Message required, the enquiry itself. Write only what the arrangement needs.
- Phone optional, for when a call is quicker than writing
- Company, date, number of people, age of children, quantity optional, these appear on the forms for groups, events and orders, and they are there to keep an offer accurate
- Consent a checkbox you tick yourself. Until it is ticked, the form does not send.
- Visit: pages, actions, device, country only after "Accept" in the cookie preferences, through Google Analytics 4, in aggregate form and with a truncated IP address. Never tied to a name, an enquiry or an account; a purchase carries the order number, with no details of the buyer.
- Account: name, e-mail, password, phone only if you open an account for the membership. The password is stored as a hash nobody can read; the phone is optional.
- Membership: last 4 card digits, payments the card is entered and stored with ChipCard; we receive the last four digits, the expiry month and the details of every charge (date, amount, transaction numbers), which we keep as an accounting trail.
03 What happens to an enquiry
One enquiry, from the button to deletion
-
You tick the consent box
The form does not send until you tick the box below the fields yourself. That consent is the legal basis on which we may process your data at all.
-
The enquiry reaches us
The message goes from the form to our server and from there to us. Someone at BeeCenter reads it, in order to reply and arrange things.
-
We reply and arrange
We use the details only for that exchange: a date, a number of people, an offer or an order. We do not build a profile from them and we do not merge them with other sources.
-
The data stays with us
We do not sell it and we do not hand it to advertisers. We do not add you to any marketing list, and we pass data to a third party only where the law expressly requires it.
-
We delete
We keep the exchange while the arrangement lasts and while we need it for the obligations that come out of it. When you ask for deletion, we delete it, apart from what the law obliges us to keep.
04 Your rights
What you can ask for, and how
Every request goes through the form on the Contact page. Write what you are asking for and we will come back to the address you enter.
Correction
If an e-mail address was mistyped or a detail has changed since, tell us and we will change it.
Deletion
On request we delete the exchange and the data in it, apart from what the law obliges us to keep.
Withdrawing consent
You can withdraw the consent given by the checkbox or in the cookie preferences at any time; for analytics the cookie button in the bottom left corner and "Reject" is enough. It takes effect from then on and does not undo processing that was lawful before it.
If you believe something is wrong with the handling of your data, you also have the right to complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection.
05 Cookies and changes
Short questions
Does this site use cookies?
Three, each with a reason. bc_pristanak remembers your answer from the cookie preferences, for six months. _ga and _ga_TH5VK9SF8L are set by Google Analytics only after "Accept", to tell a returning visit from a new one; they last up to two years, and "Reject" removes them. bc_sesija you get only when you sign in to the account, purely so it recognises you, and it goes when you sign out or after 30 days. There are no advertising cookies.
What happens to my card?
You enter it on the secure page of ChipCard a.d. Belgrade, the card processor, and it stays there. Our system never sees the card number; we receive the last four digits and the expiry month, to show them on the account.
How long do you keep account data?
For as long as the account exists. When you close it, the name, e-mail, phone and password are removed from the database, while the payment records stay because they are an accounting trail and evidence in any dispute about a charge.
What is bc_korpa_v1, then?
It is an entry in your browser localStorage holding what you put in the shop basket. It stays on your device, it is never sent to us, and it disappears when you clear this site data in your browser.
Do you record who visited the site?
Only if you pressed "Accept" in the cookie preferences, and then through Google Analytics 4 in aggregate: how many visits, which pages, which actions (an enquiry sent, the basket, a purchase), from what kinds of devices, from which countries. We do not know who you are; a visit is never joined to an enquiry or an account. The technical records a server keeps in order to run and stay secure are not used for profiling.
How do I switch measurement off?
Click the cookie button in the bottom left corner of any page, or "Cookies" in the footer, and choose "Reject". Measurement stops at once and the analytics cookies are removed from this domain; what was sent to Google before that stays with them for up to 14 months. The same path leads back, should you change your mind again.
How does this policy change?
When the site changes, this page changes with it, and the version standing here is the one that applies. Larger changes, such as adding a new tool, are announced by a consent notice before anything starts running.
Where do I send a request about my data?
Through the form on the Contact page. Write what you are asking for and we will reply to the address you enter in the form.
Your data, your request
For access, correction, deletion or withdrawal of consent, send a message through the form. We reply to the address you enter in it.