Data protection
Privacy policy
Last updated: 21 September 2026
This page explains what personal data we collect when you use this website, why we need it, who else can access it, and how you can see, correct or delete it. We process data in accordance with the Serbian Law on Personal Data Protection (Official Gazette of RS, No. 87/2018).
Who processes your data
The data controller is Wine Bar Kovač, TC BIG, 23000 Zrenjanin, Serbia.
For any question about your data, write to us at info@winebarkovac.rs.
What we collect
When you create an account:
- first and last name
- email address
- phone number
- date of birth
- your password, stored only in encrypted form, so that not even we can read it
If you sign in with Google, Google shares your name, email address and account identifier with us. You enter your phone number and date of birth yourself, because Google does not share them.
When you book a table:
- the date, time and table you chose
- your name and phone number, and, if you book without an account, your email address if you give one
When you write to us, we keep the message and the address it came from. Like any web server, our hosting provider also records technical data about requests, such as IP address and browser type, to keep the site running and secure.
Why we need it
- So that you can have an account and make bookings. This data is necessary to provide the service you asked for.
- To confirm your booking and to be able to call you if something changes. That is why we ask for a phone number.
- To confirm that you are an adult. The venue serves alcohol and sells tobacco products, and selling them to minors is prohibited by law. That is why we ask for your date of birth.
- To keep the site secure and prevent abuse.
We do not sell your data, share it for advertising, or build profiles from it. We do not send you marketing messages.
Minors
Only adults may create an account. If the date of birth entered shows that the person is under 18, the account is deleted immediately and permanently, together with any data Google shared.
Who else can access the data
We use outside service providers to run the site. They process data only on our instructions and only for the service they provide to us:
- Supabase: database and account sign-in
- Vercel: website hosting
- Resend: sending emails, such as account and booking confirmations
- Google: Google sign-in, if you choose it, and receiving mail sent to our address
- Cloudflare: domain management and mail forwarding
Some of these providers process data outside Serbia, in the European Union and the United States, under the safeguards set out in their data processing agreements.
We disclose data to public authorities only when the law requires us to.
How long we keep it
- Account data is kept for as long as the account exists. You can delete the account yourself on the My profile page, or write to us and we will.
- Bookings are kept as the venue's business records. On request we delete them or remove the details that identify who made them, unless the law requires us to keep them.
- Technical request logs are kept briefly by the hosting provider, under its own rules.
Your rights
You can change your name and phone number, and delete your account, yourself on the My profile page. Beyond that, at any time you can ask for:
- access to the data we hold about you, and a copy of it
- correction of inaccurate data
- deletion of your data and account
- restriction of processing
- transfer of your data to another controller
You can also object to the processing. Send your request to info@winebarkovac.rs from the address linked to your account, so we can confirm it is really yours. We reply within 30 days at the latest.
If you believe we are not processing your data lawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, www.poverenik.rs.
Changes to this policy
When we change how we process data, we will update this page. The date of the last change is shown at the top.