Cookie政策
Version 1.0 — effective date: 12 May 2026.
This policy explains what cookies and related technologies are, which of them we use on vondi.rs, on what legal basis, and how you can manage them. Your consent is valid for 12 months, after which we ask again. The full legal version is in the Cookie Policy document (07_COOKIE_POLICY_EN.md).
1. What are cookies and related technologies
HTTP cookies — small text files stored by the browser on your device. localStorage — persistent browser storage (up to a few MB). sessionStorage — temporary storage, cleared when the tab closes. Service Worker caches — resource cache for PWA offline. Pixels / web beacons are not currently used. The legal basis differs by category: strictly necessary — performance of contract (ZZPL Art. 12 para. 1 point 2; in practice analogous to the exception under Art. 5(3) of the EU ePrivacy Directive, which is not Serbian law); analytical and marketing — your consent (ZZPL Art. 12 para. 1 point 1, GDPR Art. 6(1)(a) for EU users).
2. Strictly necessary cookies (always active)
Without these cookies and storage the platform cannot perform the contract we have with you (login, cart, payment, language). Legal basis: contract performance — ZZPL Art. 12 para. 1 point 2 (in practice analogous to the exception under Art. 5(3) of the EU ePrivacy Directive, which is not Serbian law).
| Name | Purpose | Duration |
|---|---|---|
| vondi_access_token (sessionStorage) | JWT authorisation after login | Session |
| refresh_token (HTTP Cookie, httpOnly) | Refreshing the access token | 30 days |
| vondi_cart (localStorage) | Shopping cart | Until checkout / deletion |
| NEXT_LOCALE (localStorage + Cookie) | Selected interface language | 1 year |
| vondi_cookie_consent (localStorage + Cookie) | Storing your cookie preferences | 12 months |
| vondi_cookie_client_id (localStorage) | Anonymous identifier for consent audit | 12 months |
| vondi_user, client_id (localStorage) | Profile cache for UI | Until logout |
| OAuth state (HTTP Cookie, httpOnly) | CSRF protection for the Google OAuth flow | 10 minutes |
| Service Worker caches (Cache Storage) | PWA offline (static resources) | Managed by Service Worker |
3. Analytical cookies (with consent)
These help us understand how visitors navigate the platform and improve the service. They are activated only after your active opt-in consent and can be withdrawn at any time via the "Cookie Settings" link in the footer. Third-party cookies are owned by Google LLC; data is transferred to the US on the basis of Standard Contractual Clauses + EU-US Data Privacy Framework. We apply IP anonymisation, prohibit PII in event parameters and disable GA4 advertising features.
| Name | Purpose | Duration |
|---|---|---|
| _ga (Google LLC) | Distinguishing users for GA4 | 2 years |
| _ga_G-WHYNJ0Q62S (Google LLC) | GA4 session state | 2 years |
| Internal analytics (server-side, no cookie) | Platform usage and conversion statistics | Up to 13 months |
4. Marketing cookies (with consent)
There are currently no active marketing cookies on vondi.rs. The category is reserved for future tools (e.g. Facebook Pixel, Google Ads). When activated, this table will be updated and your renewed consent will be requested. Legal basis: consent — ZZPL Art. 12 para. 1 point 1.
| Name | Purpose | Duration |
|---|---|---|
| (currently none active) | — | — |
5. Consent duration and withdrawal
Your consent to analytical and marketing cookies is valid for 12 months. When that period expires, or upon a material change to this policy, we ask again. You can withdraw consent at any time via the "Cookie Settings" link in the footer — withdrawal is as easy as giving consent (Art. 15 para. 4 ZZPL). Withdrawal does not affect the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs, Bulevar kralja Aleksandra 15, Beograd, [email protected], +381 11 3408 900).
6. How to manage cookies
You can change your decision at any time via the "Cookie Settings" link in the site footer. You can also control cookies through your browser settings. Please note: disabling strictly necessary cookies via the browser may break the platform (login, cart, payment).
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
7. Contact
For all questions about cookies and data processing, write to us at: [email protected]