Vitrina PlayLog in

Privacy policy

Last updated:

This policy explains how 24SETUP DOO BAČKA PALANKA processes personal data when you visit this website, use the Vitrina Play web app or the Vitrina Play TV app, or write to us. We process it in line with the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018).

1. Who processes your data

The controller is 24SETUP DOO BAČKA PALANKA, Vladimira Rolovića 24, 21400 Bačka Palanka, registration number 21712949, tax ID 112646430. For any question about personal data, write to support@vitrinaplay.rs.

For the data our customers put into the service (their staff accounts, videos and TV details), the customer company is the controller, and we process that data on its behalf, as a processor, under our contract with it. If you appear in a video, or have an account your company set up for you, contact that company to use your rights. We’ll help it respond.

2. What data we process

When you visit the website

The website uses no cookies, analytics or forms, and loads its fonts from our own server. Like any web server, the one hosting the site logs technical details of requests: IP address, time, page address and browser details. We use them only to run and secure the site.

When you write to us

Your email address, name and whatever you write, for example your company, city, number of screens and phone number when you ask for a demo.

When you use the web app

  • Account details: username, first and last name and email address if an administrator enters them, your password (stored only as a hash, so not even we can read it), when the account was created and last signed in, and whether it’s active and an administrator.
  • The videos you upload, with their title, description and original file name.
  • The names, addresses and descriptions you enter for TVs.

When you use the TV app

  • A device ID that the app creates when it first starts.
  • Technical details of the TV: manufacturer, model, Android and app version, display and memory details, supported video formats, language, time zone and the device name if one is set.
  • Storage use and when the TV last checked in.
  • The IP address the TV checks in from, and the approximate location (city and country) worked out from it. We work out the location with a database on our own server, without sending the address to anyone.

3. Why, and on what legal basis

  • To provide the service under our contract with your company: accounts, signing in, videos and managing TVs (Article 12(1)(2) of the Law).
  • Our legitimate interests: protecting the service from abuse (for example by limiting sign-in attempts), checking that TVs are working and answering your messages (Article 12(1)(6)).
  • When the law requires it, for example accounting rules (Article 12(1)(3)).

We don’t send marketing, build profiles or make automated decisions about you.

4. Who we share data with

We don’t sell data. Only the providers we use to run the service, such as hosting and email, have access to it, processing it on our instructions under contracts with us, and public authorities when the law requires. If one of those providers processes data outside the Republic of Serbia, we do so only with the safeguards the Law requires.

5. How long we keep data

  • Accounts: for as long as we work with your company. Accounts are deactivated rather than deleted, so the history stays accurate. When our contract ends, we delete accounts, videos and TV details within 90 days, except what the law requires us to keep longer.
  • Videos: until you delete them. Deleting a video also deletes its file.
  • TV details: until you delete the TV in the app.
  • Messages you send us: if you’re a customer, for as long as we work together and two years after that; otherwise no longer than two years after the last message.
  • Server logs: no longer than 30 days.

6. How we protect data

The website and the app use an encrypted connection (HTTPS). Passwords are stored only as hashes. Videos aren’t public: only their owner, after signing in, and the TVs your company has approved can open them. Only authorized people have access to the servers.

7. Your rights

You have the right to:

  • know whether we process your data, and get a copy of it;
  • have inaccurate data corrected;
  • have your data deleted, or its processing restricted;
  • get your data in a machine-readable format and take it to another controller;
  • object to processing based on legitimate interests.

Write to us at support@vitrinaplay.rs. We’ll reply without delay, and within 30 days at the latest. If you believe we process your data unlawfully, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs.

8. Children

Vitrina Play is a service for businesses and isn’t meant for anyone under 18.

9. Changes

When we change this policy, we publish the new version on this page, with the date of the change at the top. We tell customers about significant changes by email.