Skip to main content

Privacy Notice

Last updated

This notice explains how we collect and use personal information when you visit moravamodern.com, send us a request or buy from us. We collect what we need to answer you and fulfill your order, and nothing for advertising.

Who is responsible

Morava Modern is run by CAD ART studio, a design studio in Paraćin, Serbia. CAD ART studio is the controller of your personal data. Full business details are on our Legal Notice. For any privacy question, email jovancadart@gmail.com.

What we collect and why

Order requests. Your name, email address and country; the design, set and add-ons you choose; anything you tell us about your site or project; the acknowledgments you check, with the wording shown and the date and time; and, only if you opt in, your wish to receive occasional news. We use this to prepare your quote and contract and to keep a record of what was agreed.

Inquiries, custom design and visualization requests. Your name, email address and message, and any company, country and project details you share, so we can answer you. For a visualization, the drawings, reference images and photos of your rooms you send us. Please leave out people, documents and anything that shows your address.

Purchases. The details on your invoice, such as your name and billing address, and your business name and tax number if you buy as a business; confirmation of your payment; and a record of what we delivered and when. Your bank or payment provider processes the payment itself. We receive confirmation of it and the payer details it shows us, never your full card details.

Cancellation notices. Your name, email address, order reference and statement, so we can process your cancellation and confirm it.

Visits to the site.

  • Our hosting provider processes technical data, such as your IP address, browser type and the pages you request, to deliver the site and keep it secure.
  • Our forms may briefly check your IP address to block repeated or automated submissions.
  • We measure visits with Vercel Web Analytics, which doesn't use cookies. It counts page views, referring sites and a few named actions, such as opening a 360° tour or sending a form, along with general information such as country, device and browser type. Visitors are recognized only through a hash of the request that is discarded after 24 hours, so we can't follow you from one day to the next or across other sites. See Cookies.
  • Two of the 360° tours on our 3D interior rendering page, Residence and Contemporary, are hosted by Kuula. If you open one of them, your browser connects to Kuula, which receives your IP address and browser details and may set cookies and measure the visit. Nothing loads from Kuula until you select "Start the 3D virtual tour" on one of those tours. The other tours load only from our own site and send nothing to third parties. We decide to offer the Kuula tours; Kuula decides how it uses that data afterward, under its own privacy policy.

If the GDPR or the UK GDPR applies to you, we rely on:

  • Contract: to answer order requests, prepare quotes and fulfill orders;
  • Legal obligation: to keep invoices and tax records and to handle cancellations;
  • Legitimate interests: to answer inquiries, keep the site secure, prevent abuse, understand how the site is used, and keep a record of acknowledgments;
  • Consent: to send occasional news, if you opt in, and to load a 360° tour from Kuula when you start one. You can withdraw your consent at any time.

Who receives your data

We share personal data only with the providers we need to run the service, each in its stated role:

  • Vercel Inc. (United States): hosting, content delivery, cookieless analytics and performance measurement.
  • Resend (United States): delivering the messages our website forms send.
  • Kuula (United States): hosts two of our 360° tours. It receives data only if you open one of them, under its own privacy terms.
  • Google (United States): Gmail, the studio mailbox where requests and our correspondence are kept. This mailbox is our order record; the website itself doesn't store form submissions in a database.
  • Your bank or payment provider: processing your payment, under its own privacy terms.
  • Our accountant and the tax authorities: where accounting and tax law require it.

We may also disclose information when the law requires it, or to establish or defend legal claims. We don't sell or share personal information for advertising, and we don't make automated decisions about you.

International transfers

We're based in Serbia, and our providers process data in the United States and elsewhere. Where the law requires, we rely on safeguards such as standard contractual clauses and, where a provider is certified, the EU-US Data Privacy Framework and its UK extension.

How long we keep it

  • Orders, invoices and tax records: 10 years, as accounting and tax law require.
  • Acknowledgments and license records: for as long as your license is in use, plus 6 years.
  • Inquiries that don't lead to an order: 24 months after our last exchange.
  • Cancellation notices: together with the order they relate to.
  • Visualization project files: for the project, plus 24 months for later changes, unless you ask us to delete them sooner.
  • News emails: until you unsubscribe.
  • Analytics: the request hash is discarded after 24 hours; we keep only aggregated statistics.
  • Hosting logs: for the short period set by our hosting provider.

Your rights

You can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct it;
  • delete it, where we don't need to keep it by law;
  • restrict or object to how we use it;
  • send it to you or to another provider in a portable format;
  • stop sending you news emails. Each one has an unsubscribe link.

Email jovancadart@gmail.com. We may ask you to confirm your identity, and we'll reply within one month. We honor these requests wherever you live, and they include:

  • EU and UK: your rights under the GDPR and the UK GDPR;
  • Australia: access and correction under the Australian Privacy Principles;
  • Canada: access and correction under PIPEDA;
  • United States: we don't sell or share personal information.

Complaints

Please tell us first, and we'll do our best to resolve your concern. You can also complain to a data protection authority:

  • Serbia: the Commissioner for Information of Public Importance and Personal Data Protection
  • EU: the data protection authority in the country where you live or work
  • UK: the Information Commissioner's Office (ICO)
  • Australia: the Office of the Australian Information Commissioner (OAIC)
  • Canada: the Office of the Privacy Commissioner of Canada

Security

The site runs over HTTPS, and access to your information is limited to the studio and the providers listed above.

Children

The site isn't meant for children, and you must be 18 or older to order. We don't knowingly collect data from children.

Changes

We'll update this notice when our practices change and show the date of the latest version on this page.