1. Scope
This document explains how we process your personal data when you submit an order for sawn timber, wood products or sawmill services via our web shop. It supplements our Privacy Policy and Terms of Use and applies as lex specialis for checkout data processing.
2. Data controller
Mali Galečić d.o.o., Šuica b.b., 80240 Tomislavgrad, Bosna i Hercegovina, Federacija Bosne i Hercegovina, Bosna i Hercegovina
Email: info@mali-galecic.com | Phone: +387 63 343 723 | Website: https://www.mali-galecic.com
Company ID (JIB): 4281024610008 | VAT: 281024610008 | Registration no.: 1-7715
3. Data collected
The order process collects data from your user profile (if logged in), the checkout form and cart items.
3.1 Mandatory fields
| Data | Reason |
|---|---|
| Name (or contact person for companies) | Customer identification, quote and contract preparation |
| Email address | Account authentication, order confirmation, quotes and invoices |
| Customer type (individual / company) | Legal status and applicable tax/accounting obligations |
| Order items (product, quantity) | Processing request, quote and production/delivery |
3.2 Mandatory fields for business customers
If you select company as customer type:
| Data | Reason |
|---|---|
| Company name | Business identification on quotes and invoices |
| Company ID (JIB, 13 digits) | Tax and accounting identification under FBiH regulations |
| Company address | Official business address on documentation |
3.3 Optional fields
| Data | Purpose |
|---|---|
| Phone number | Faster communication about the order or delivery |
| Delivery address | Organising transport and delivery of wood products |
| Dimensions and specification per item | Product customisation (length, width, thickness, wood type, quantity) |
| Order notes | Additional instructions for production, delivery or contact |
| Promo code | Applying discounts or benefits under code terms |
3.4 Cart data
Cart items may include product name, quantity, indicative unit price, dimensions and specifications. Data is temporarily stored in browser localStorage under "mali-galecic-cart" until you submit the order.
After submission, cart data is stored in our database as part of the order and your order history.
4. Purposes and legal bases
We process order data to:
- Receive and process your web shop order – pre-contractual measures at your request.
- Verify specifications, dimensions and availability.
- Contact you to confirm, clarify or send a quote.
- Prepare and perform the purchase contract after written confirmation.
- Produce, saw and prepare wood products according to confirmed specifications.
- Organise delivery and transport where agreed.
- Apply promo codes and record discounts.
- Meet accounting and invoicing legal obligations.
- Protect legal interests in disputes or complaints – legitimate interest.
5. Recipients
Data may be accessed by authorised Mali Galečić staff (sales, production, logistics, accounting) and IT maintenance providers (F&M d.o.o.) acting as processors under contractual safeguards.
Data is shared with public authorities only when required by law.
Order data is not transferred outside Bosnia and Herzegovina unless you use external services with their own privacy policies and have given consent.
6. Retention
| Record type | Retention period |
|---|---|
| Unconfirmed or rejected orders | 3 years from last contact |
| Confirmed orders – correspondence | 5 years from end of contractual relationship |
| Accounting records (invoices, payments) | At least 10 years |
| Promo code usage data | Until promo programme ends + 1 year |
| Cart localStorage (mali-galecic-cart) | Until user clears browser data |
7. Your rights
You have the right to access, rectification, erasure, restriction, objection, withdrawal of consent and complaint to the supervisory authority.
Submit requests to info@mali-galecic.com. We respond within 30 days (extendable by 60 days for complex requests).
8. Complaints
You may lodge a complaint with Agencija za zaštitu ličnih podataka Bosne i Hercegovine (AZLP), Bana Milosavljevića 2, 78000 Banja Luka, office@azlp.ba. Please contact us first at info@mali-galecic.com.
9. Security
We protect order data with HTTPS, better-auth authentication, role-based access, secure hosting and regular security reviews.
10. Important notes
Submitting an order does not create a purchase contract or payment obligation. A binding contract is formed only upon our written confirmation with final items, price, payment and delivery terms.
Dimensions and specifications serve as a starting point; final measures may be adjusted after review.
Promo codes are validated and usage is recorded to prevent abuse.
Profile data saved once is reused for future orders; you may update your profile before each order.
11. Changes
We may update this document. The date of the last update is shown at the top of this page.
12. Contact
Mali Galečić d.o.o., Šuica b.b., 80240 Tomislavgrad, Bosna i Hercegovina
Email: info@mali-galecic.com
Phone: +387 63 343 723