Politika privatnosti — VendPay

Poslednje ažuriranje: 14. oktobar 2026.

Ova politika opisuje koje podatke o ličnosti obrađuje mobilna aplikacija VendPay i prateći servisi, zašto ih obrađujemo, s kim ih delimo, koliko ih čuvamo i koja prava imate.

1. Rukovalac podacima

Rukovalac je SIMONS DOO za proizvodnju, trgovinu i usluge Novi Sad („Simons“, „mi“), Bulevar vojvode Stepe 45, 21000 Novi Sad, Srbija, matični broj 08741034, PIB 101697701.

Kontakt za sva pitanja o privatnosti i zahteve iz ove politike: office@simons.co.rs.

2. Koje podatke obrađujemo

Podaci o nalogu: email adresa, lozinka (čuvamo samo njen heš, bcrypt), ime i prezime i broj telefona ako ih unesete, javni ID naloga (npr. VN-123) i način prijave. Ako se prijavite preko Google ili Apple naloga, čuvamo identifikator koji nam taj servis dostavi i email adresu iz njega. Ako se prijavite brojem telefona, obrađujemo broj telefona i jednokratni SMS kod.
Novčanici, transakcije i kupovine: stanje novčanika, dopune, kupovine i isplate na aparatima, aparat i operater kod kojeg je transakcija nastala, iznosi i vreme.
Platne kartice: podatke kartice unosite isključivo na stranici platnog procesora PaySpot. Mi nikada ne vidimo niti čuvamo pun broj kartice ni CVV; čuvamo samo maskirani broj (npr. •••• 1234), tip kartice, datum isteka i token koji nam PaySpot vrati, da biste karticu mogli ponovo da koristite.
Lokacija: precizna lokacija uređaja, samo dok koristite aplikaciju i samo uz vašu dozvolu. Koristimo je da proverimo da ste pored aparata (u krugu od oko 100 m) kada započinjete kupovinu, dopunu gotovinom ili isplatu, i da prikažemo aparate u vašoj blizini. Koordinate u trenutku započinjanja kupovine, dopune ili isplate čuvamo uz zapis te transakcije; lokaciju za listu obližnjih aparata ne čuvamo.
Kamera: koristi se samo za skeniranje QR koda aparata. Ne snimamo, ne čuvamo i ne šaljemo slike.
Tehnički podaci: token za push obaveštenja i tip uređaja (iOS ili Android); IP adresa i podaci o uređaju (user agent) kod bezbednosno važnih radnji, kao što su brisanje naloga i ručne promene stanja novčanika.
Komunikacija: email poruke koje vam šaljemo (npr. potvrda registracije, potvrda dopune, račun) i podaci o njihovoj isporuci, otvaranju i kliku na link, kao i prepiska ako nam se obratite.

Aplikacija ne koristi oglašivačke identifikatore (IDFA/AAID), alate za analitiku ili praćenje ponašanja, niti obrađuje biometrijske i zdravstvene podatke. Ne šaljemo marketinške poruke.

3. Zašto obrađujemo podatke i po kom osnovu

Pružanje usluge (izvršenje ugovora): otvaranje i vođenje naloga, prijava, novčanici, dopune, kupovine na aparatima, računi, push i email obaveštenja o transakcijama.
Lokacija (izvršenje ugovora i legitimni interes): provera da je kupac zaista pored aparata, radi sprečavanja zloupotreba i pogrešnih kupovina; dozvolu za lokaciju možete u svakom trenutku povući u podešavanjima telefona.
Zakonske obaveze: fiskalizacija prometa, računovodstvene i poreske evidencije, propisi o platnim uslugama i elektronskom novcu.
Bezbednost (legitimni interes): sprečavanje prevara i zloupotreba, evidencija bezbednosno važnih radnji.

4. S kim delimo podatke

Operateri vending aparata. Kada kupite proizvod kod nekog operatera ili koristite njegov novčanik, taj operater postaje vaš „pružalac“ i preko svog panela vidi vaše ime i prezime, email, broj telefona, javni ID, stanje novčanika i transakcije kod njega. Operater koristi te podatke za vođenje svog novčanika, korisničku podršku i svoje evidencije, i za to odgovara kao samostalni rukovalac. Operater kojem još niste kupac, a zna vaš javni ID, vidi samo vaše inicijale (npr. „M. Ž.“), bez email adrese i telefona, da bi vas dodao u svoj novčanik.
PaySpot (platni procesor i izdavalac elektronskog novca): kod dopune karticom novčanika operatera PaySpot dobija vašu email adresu i podatke kartice koje unesete na njegovoj stranici. Za VendPay novčanik (elektronski novac) PaySpot dobija samo pseudonimni identifikator, bez vašeg imena, email adrese i telefona. PaySpot obrađuje te podatke po svojoj politici privatnosti.
Intervend (sistem operatera i fiskalizacija): podaci o prodaji (aparat, artikal, iznos, vreme) radi evidencije prometa i izdavanja fiskalnog računa, bez vaših ličnih podataka.
Obrađivači koji rade za nas: DigitalOcean (serveri i baza podataka, EU), Google Firebase (push obaveštenja), Resend (slanje email poruka, EU), Simons SMS servis (slanje SMS kodova), kao i Google i Apple kada se prijavljujete preko njihovih naloga.
Državni organi, kada to zakon nalaže.

Podatke ne prodajemo i ne ustupamo nikome u marketinške svrhe.

5. Prenos podataka iz Srbije

Serveri i baza podataka nalaze se u Evropskoj uniji (Frankfurt), kao i servis za email. Push obaveštenja isporučuje Google Firebase, koji podatke može obrađivati i van EU. Prenos se vrši u skladu sa Zakonom o zaštiti podataka o ličnosti, u zemlje sa primerenim nivoom zaštite ili uz odgovarajuće mere zaštite koje ti pružaoci usluga obezbeđuju.

6. Koliko čuvamo podatke

Nalog: dok je nalog aktivan.
Transakcije, kupovine i dopune: dok je nalog aktivan, a posle toga onoliko koliko zahtevaju računovodstveni, poreski i propisi o platnim uslugama, najduže 10 godina.
SMS kod: 5 minuta. Token za push obaveštenja: dok se ne odjavite ili ne obrišete nalog.
Lokacija sačuvana uz transakciju: dok je nalog aktivan.
Sadržaj poslatih email poruka: 30 dana; evidencija njihove isporuke: dok je nalog aktivan.
Verifikacioni kodovi: brišu se svakodnevno po isteku. Evidencija bezbednosno važnih radnji: 24 meseca.

7. Brisanje naloga

Nalog možete obrisati sami u aplikaciji (Profil → Obriši nalog). Pri brisanju:

uklanjamo vašu email adresu, ime i prezime, broj telefona, javni ID i vezu sa Google ili Apple nalogom, i zatvaramo sve sesije;
brišemo lokaciju sačuvanu uz vaše transakcije, poslate email poruke i evidenciju njihove isporuke, i verifikacione kodove;
brišemo sačuvane kartice i tokene za push obaveštenja, a od procesora PaySpot tražimo da obriše i token vaše kartice;
zapise o transakcijama zadržavamo bez vaših identifikacionih podataka, onoliko koliko zakon nalaže;
novčanici kod operatera se zatvaraju; preostalo stanje na njima se ne vraća, o čemu vas aplikacija upozorava pre potvrde.

Ako imate otvoren VendPay novčanik (elektronski novac), nalog ne može da se obriše iz aplikacije dok se novčanik ne zatvori i sredstva ne isplate preko izdavaoca; za to nam pišite na office@simons.co.rs.

8. Vaša prava

U skladu sa Zakonom o zaštiti podataka o ličnosti Republike Srbije imate pravo da:

dobijete informaciju i pristup svojim podacima, i kopiju podataka;
zahtevate ispravku netačnih ili dopunu nepotpunih podataka (ime, prezime i telefon možete izmeniti i sami u aplikaciji);
zahtevate brisanje podataka, ograničenje obrade i prenosivost podataka;
uložite prigovor na obradu zasnovanu na legitimnom interesu;
povučete pristanak, npr. dozvolu za lokaciju ili push obaveštenja, u podešavanjima telefona;
podnesete pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti (Bulevar kralja Aleksandra 15, 11120 Beograd, www.poverenik.rs).

Zahteve šaljite na office@simons.co.rs. Odgovaramo bez odlaganja, a najkasnije u roku od 30 dana.

9. Bezbednost

Sva komunikacija između aplikacije i servera je šifrovana (TLS). Lozinke se čuvaju samo u heširanom obliku (bcrypt). Podatke kartica ne čuvamo. Pristup serverima i bazi podataka imaju samo ovlašćena lica.

10. Deca

Aplikacija nije namenjena licima mlađim od 15 godina. Ako saznamo da je nalog otvorilo lice mlađe od 15 godina bez saglasnosti roditelja ili staratelja, obrisaćemo ga.

11. Izmene politike

Politiku možemo povremeno menjati. Važeća verzija je uvek objavljena na vendpay.it/privacy, sa datumom poslednje izmene. O bitnim izmenama obavestićemo vas u aplikaciji ili email porukom pre nego što stupe na snagu.

12. Kontakt

Email: office@simons.co.rs
Adresa: Simons d.o.o., Bulevar vojvode Stepe 45, 21000 Novi Sad
Web: https://vendpay.it

Privacy Policy — VendPay

Last updated: October 14, 2026.

This policy explains which personal data the VendPay mobile app and its related services process, why, who we share it with, how long we keep it, and what your rights are.

1. Data controller

The controller is SIMONS DOO za proizvodnju, trgovinu i usluge Novi Sad ("Simons", "we"), Bulevar vojvode Stepe 45, 21000 Novi Sad, Serbia, company registration number 08741034, tax ID (PIB) 101697701.

Contact for any privacy question or request under this policy: office@simons.co.rs.

2. Data we process

Account data: email address, password (we store only its hash, bcrypt), your first and last name and phone number if you provide them, your account's public ID (e.g. VN-123) and how you sign in. If you sign in with Google or Apple, we store the identifier that service gives us and the email address from it. If you sign in with your phone number, we process your phone number and a one-time SMS code.
Wallets, transactions and purchases: wallet balances, top-ups, purchases and withdrawals at machines, the machine and operator involved, amounts and times.
Payment cards: you enter card details only on the page of the payment processor PaySpot. We never see or store the full card number or the CVV; we keep only the masked number (e.g. •••• 1234), the card brand, the expiry date and the token PaySpot returns, so you can reuse the card.
Location: your device's precise location, only while you use the app and only with your permission. We use it to check that you are at the machine (within about 100 m) when you start a purchase, a cash top-up or a withdrawal, and to show machines near you. The coordinates at the start of a purchase, top-up or withdrawal are stored with that transaction's record; the location used for the nearby-machines list is not stored.
Camera: used only to scan a machine's QR code. We don't take, keep or send any images.
Technical data: your push-notification token and device type (iOS or Android); your IP address and device information (user agent) for security-relevant actions such as deleting your account or manual changes to a wallet balance.
Communication: the emails we send you (e.g. sign-up confirmation, top-up confirmation, receipt) and data about their delivery, opening and link clicks, as well as any correspondence if you contact us.

The app does not use advertising identifiers (IDFA/AAID) or analytics and behaviour-tracking tools, and does not process biometric or health data. We don't send marketing messages.

3. Why we process data and on what legal basis

Providing the service (performance of a contract): opening and running your account, sign-in, wallets, top-ups, purchases at machines, receipts, push and email notifications about your transactions.
Location (performance of a contract and legitimate interest): checking that the buyer is really at the machine, to prevent abuse and wrong purchases; you can withdraw the location permission at any time in your phone's settings.
Legal obligations: fiscalization of sales, accounting and tax records, and the rules on payment services and electronic money.
Security (legitimate interest): preventing fraud and abuse, and recording security-relevant actions.

4. Who we share data with

Vending machine operators. When you buy at an operator's machine or use its wallet, that operator can see in its panel your first and last name, email, phone number, public ID, wallet balance and your transactions with it. The operator uses this data to run its wallet, for customer support and for its own records, and is an independent controller for that. An operator you are not yet a customer of, but who knows your public ID, sees only your initials (e.g. "M. Ž."), without your email or phone number, in order to add you to its wallet.
PaySpot (payment processor and electronic money issuer): for a card top-up of an operator's wallet, PaySpot receives your email address and the card details you enter on its page. For the VendPay wallet (electronic money), PaySpot receives only a pseudonymous identifier, without your name, email or phone number. PaySpot processes this data under its own privacy policy.
Intervend (the operators' system and fiscalization): sale data (machine, product, amount, time) to record the sale and issue the fiscal receipt, without your personal data.
Processors working for us: DigitalOcean (servers and database, EU), Google Firebase (push notifications), Resend (sending email, EU), the Simons SMS service (sending SMS codes), and Google and Apple when you sign in with their accounts.
Public authorities, when the law requires it.

We don't sell your data or give it to anyone for marketing.

5. Transfers outside Serbia

Our servers and database are in the European Union (Frankfurt), as is the email service. Push notifications are delivered by Google Firebase, which may process data outside the EU. Transfers follow the Serbian Personal Data Protection Act: to countries with an adequate level of protection, or with appropriate safeguards provided by those service providers.

6. How long we keep data

Account: while the account is active.
Transactions, purchases and top-ups: while the account is active, and afterwards as long as accounting, tax and payment-services rules require, at most 10 years.
SMS code: 5 minutes. Push token: until you sign out or delete your account.
Location stored with a transaction: while the account is active.
Content of the emails we send: 30 days; their delivery records: while the account is active.
Verification codes: deleted daily once expired. Records of security-relevant actions: 24 months.

7. Deleting your account

You can delete your account yourself in the app (Profile → Delete account). When you do:

we remove your email address, first and last name, phone number, public ID and the link to your Google or Apple account, and sign you out everywhere;
we delete the location stored with your transactions, the emails we sent you and their delivery records, and your verification codes;
we delete your saved cards and push tokens, and ask the processor PaySpot to delete your card token too;
we keep transaction records without your identifying data, as long as the law requires;
your wallets with operators are closed; any remaining balance on them is not refunded, and the app warns you about this before you confirm.

If you have an open VendPay wallet (electronic money), the account can't be deleted in the app until the wallet is closed and the funds are paid out through the issuer; write to office@simons.co.rs for that.

8. Your rights

Under the Serbian Personal Data Protection Act you have the right to:

be informed about and access your data, and get a copy of it;
have inaccurate data corrected or incomplete data completed (you can change your name and phone number yourself in the app);
request erasure, restriction of processing and data portability;
object to processing based on legitimate interest;
withdraw consent, e.g. the location or push-notification permission, in your phone's settings;
lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs).

Send requests to office@simons.co.rs. We reply without undue delay and within 30 days at the latest.

9. Security

All communication between the app and our servers is encrypted (TLS). Passwords are stored only as hashes (bcrypt). We don't store card data. Only authorized people have access to the servers and the database.

10. Children

The app is not intended for anyone under 15. If we learn that someone under 15 opened an account without a parent's or guardian's consent, we will delete it.

11. Changes to this policy

We may change this policy from time to time. The current version is always published at vendpay.it/privacy with the date of the last change. We will tell you about significant changes in the app or by email before they take effect.

12. Contact

Email: office@simons.co.rs
Address: Simons d.o.o., Bulevar vojvode Stepe 45, 21000 Novi Sad, Serbia
Web: https://vendpay.it