Preview mode — sign-ups aren’t saved. This is a test version of the site, nothing is recorded.
zarkadi

Privacy notice

This notice explains how zarkadi processes data collected through the pilot waitlist for Vračar. The pilot hasn’t started yet; this page covers the sign-up period.

Data controller [LEGAL CHECK]

The data controller is [POPUNITI], [POPUNITI]. For any privacy question, write to [POPUNITI].

What data we collect [LEGAL CHECK]

E-mail address; phone number, if you leave one (optional); the street/area you live in; survey answers (parcel volume, couriers, segments); your assigned price variant and price answer; a referral code and, if you came via a friend, theirs; the source of your visit (UTM parameters); the version and time of the consent you gave (e.g. "en-2026-09-28"), so we can show what you actually agreed to.

Technical data for abuse protection: your IP address and e-mail are never stored in readable form — only as a hash (a one-way value computed with a secret key we keep separately), plus browser data (user agent).

Purpose and legal basis [LEGAL CHECK]

We process this data to: run the pilot waitlist, invite you to the pilot once it starts, and assess demand and interest across Vračar.

The legal basis is your consent (Article 12 of the Serbian Data Protection Act — ZZPL, and Article 6(1)(a) GDPR), given when you sign up and withdrawable at any time.

Processors and recipients [LEGAL CHECK]

The following service providers process data on our behalf and under our instructions: Supabase (database, EU region — Frankfurt), Vercel (site hosting), Resend (e-mail delivery), Cloudflare Turnstile (bot protection), and Plausible or Vercel Analytics (cookieless visit statistics).

We don’t sell data and don’t share it for marketing without separate consent.

Data transfers [LEGAL CHECK]

Data is stored with providers in the European Union (Supabase: Frankfurt, Germany). Where a processor is based outside the EU/EEA, the transfer relies on appropriate safeguards (e.g. standard contractual clauses).

How long we keep data [LEGAL CHECK]

Unconfirmed sign-ups are deleted after 30 days at the latest.

Confirmed sign-ups and waitlist data are deleted at most 12 months after the pilot ends, or earlier on request.

Shop (partner) applications are kept for at most 12 months after our last contact with you.

Hashed IP and e-mail values used only for abuse protection (e.g. too many sign-up attempts) are kept for at most 2 days, then deleted automatically.

Your rights [LEGAL CHECK]

You have the right to access the data we hold about you, correct inaccurate data, request deletion, restrict processing, and object to processing. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, write to [POPUNITI]. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Cookies and local storage [LEGAL CHECK]

We use a first-party cookie "zk_pv" (180 days): a randomly assigned price-test variant, with no personal data.

In browser local storage we keep "zk_ref" (the referral code of the friend who invited you) and "zk_utm_first" (the source of your first visit, 30 days). In sessionStorage we keep which headline/ad variant you saw, only for the length of your session.

We don’t use advertising or third-party tracking cookies. Cloudflare Turnstile (bot protection) may set its own cookie for that purpose.

Minors [LEGAL CHECK]

The service is intended for people 16 and older. We don’t knowingly collect data from younger people.

Changes to this notice [LEGAL CHECK]

We may update this notice from time to time, especially ahead of the pilot start. The last-updated date will appear at the top once published.