The company NLM Power doo, with its registered office at Braće Nešković br. 7, Pećinci, Deč, registration number: 22165135 PIB: 115488893 (hereinafter referred to as: NLM Power doo or Controller) in order to implement the protection of privacy and personal data of users, customers or third parties who otherwise cooperate or wish to cooperate in business with NLM Power doo, (hereinafter referred to as: users) regardless of the method or means of collection, adopts this Privacy Policy which describes the method of collection and processing, the purpose of collection and processing, the method of use and storage, as well as the rights of persons whose personal data are collected and processed with regard to their protection.

NLM Power doo provides permanent availability of the Privacy Policy which is available at any time on the NLM Power doo website. NLM Power doo as the controller has provided contact for any questions or complaints related to this privacy policy or the handling of personal data, during business hours, at the following address:

NLM Power doo
Braće Nešković br. 7
Pećinci, Deč
Tel: +381 62 969 3988
E-mail: office@wheycoll.com

Definitions

Personal data are any data by which an identified or identifiable natural person can be identified, directly or indirectly, indirectly or directly, in particular by reference to an identifier such as a name, an identification number, location data, identifiers in electronic communications networks or to one or more data specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
Processing of personal data is any operation which is performed on personal data, whether or not by automated means, such as collection, recording, structuring, storage, adaptation or alteration, disclosure, access, use, disclosure by transmission or dissemination or otherwise making available, alignment or combination with others, restriction, erasure or destruction.
The controller is a natural or legal person or public authority which, alone or jointly with others, determines the purposes and methods of processing.
Processor is a natural or legal person, or a public authority, that processes personal data on behalf of the controller.
A personal data breach is a breach of the security of personal data that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

 

1)  Responsibilities for the security of collected personal data?

NLM Power doo is responsible for the security of collected personal data.

Data will be processed by NLM Power doo as a controller and processor based on a legal transaction concluded with the owner of personal data lawfully, fairly and transparently, exclusively for specified, explicit and legitimate purposes in accordance with the principle of data minimization and storage limitation. In order to protect personal data, enable their processing and exercise the rights of the owner of personal data as a subject whose personal data is processed, personal data may be transferred to natural and/or legal persons with whom it cooperates based on contractual or legal obligations (e.g. accounting services, law firms, competent public authorities, etc.).

 

2)  Personal data collected and processed

Personal data that may be subject to collection and processing may include:

• data for concluding a contract and establishing and maintaining contact, such as name and surname, parents’ name and surname, date and place of birth, type and number of identification document, residential address, permanent address, personal identification number, gender, citizenship, occupation-business function, postal address, photos, landline phone number, mobile phone number, e-mail;
• data related to issuing invoices and processing payments;
• other information that is strictly necessary for the purpose of fulfilling obligations under the contractual relationship or that has been voluntarily submitted to us, such as orders given, specific requests, etc.;
• previously published information that we collect through publicly available registers and records;
• details of mutual communication (written correspondence, etc.), as well as conversations conducted, to the extent necessary for the exercise of rights and obligations under the contractual relationship.

 

3) Collection of personal data

Personal data is collected and processed based on the given circumstances, including:

• when and if it is absolutely necessary to collect personal data for the purpose of establishing a contractual relationship and exercising rights and obligations under it;
• when the owner of personal data contacts NLM Power doo directly or via electronic communications or via the contact form located on the website https://wheycoll.com/ and/or with employees for the purpose of establishing a business relationship or expressing interest in establishing a business relationship, and in particular at the time of processing an order for products or services;
• when and if it is absolutely necessary to collect personal data for the purpose of establishing a business relationship or expressing interest in establishing a business relationship;
• when if it is absolutely necessary to collect personal data for the purpose of distributing promotional material and advertising NLM Power doo products and services;

Also, NLM Power doo technical solutions may use statistical software. These programs are standard tools of all Internet browsers and are not specific to NLM Power doo websites. Such statistical programs enable NLM Power doo to adapt its websites in a way that makes them as efficient and simple as possible for visitors and users (identifying data that is most or least interesting to users, adapting pages for individual web browsers, efficiency of site structure and website traffic).

 

4) Provision of personal data

All personal data is provided by the user solely voluntarily; based on this and other information on the type of data and its purpose. In principle, there are no negative or harmful consequences if personal data is not provided, although this may make it impossible to conclude a certain legal transaction. Certain personal data may be necessary on a legal or business basis, such as data necessary for the preparation of an invoice, etc. For certain services or activities, such as promotional activities, certain personal data is also required, which are provided solely for a specific purpose and can be withdrawn at any time, as explained in more detail below.

Any voluntarily given consent to the use of personal data may be withdrawn by giving a written statement at any time. An oral statement of refusal of consent will be taken into account in the event that there are justified circumstances due to which it is not possible to give a written statement.

However, in addition to the above, there are circumstances when NLM Power doo cannot undertake business activities, including legal actions, without the necessary personal data, for example when personal data is necessary for the establishment of a binding legal relationship, processing requests and applications of the owner of personal data or for the purpose of sending promotional materials.

In all such cases, the collection and processing of personal data is a condition for the provision of services by NLM Power doo, unless there is another legal basis for their collection, such as a statutory or contractual basis.

 

5) Purposes for which personal data are processed

Personal data are processed exclusively for the following purposes:

• for the purpose of establishing a contractual relationship and exercising rights and obligations arising from it;
• for the purpose of marketing, promotion and advertising, and the production and delivery of promotional material;
• for the purpose of management and administration in business processes related to the fulfillment of the contract and the exercise of rights and obligations arising from it, including payment processing, accounting purposes, auditing, collection of receivables and support services in connection with the above;
• for the purpose of harmonizing and fulfilling legal obligations, as well as obligations that may arise from European Union law and the law of third countries to the extent applicable and to the extent and content in which the aforementioned rights do not conflict with the law of the Republic of Serbia;
• for the purpose of analyzing and improving services and communication;
• for the purpose of protecting security and managing access to business premises, IT and communication systems, online platforms, websites;
• for the purpose of complying with court decisions and decisions of public law bodies and legal entities with public powers and exercising our rights and legally based interests;
• for the purpose of keeping records of statistics related to our business;
• for any purpose deemed necessary in connection with the achievement of any of the above-mentioned purposes.

Personal data will not be used to undertake any other actions or create profiles except in the cases specified here.

Depending on the purpose for which personal data is processed, it may be processed, among other things, on the following legal grounds:

• for the processing of personal data of users, the Personal Data Protection Act and the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and the Enforcement and Security Act, the Payment Transactions Act, the Accounting Act, the Audit Act;
• for the processing of personal data of employees and persons engaged outside of employment in NLM Power doo is the Labor Law, the Law on Records in the Field of Labor, the Law on Health Insurance, the Law on Pension and Disability Insurance, the Law on Personal Income Tax, the Law on Contributions to Mandatory Social Insurance, the Law on State and Other Holidays in the Republic of Serbia, the Law on Safety and Health at Work, the Law on Fire Protection, the Law on Private Security, the Law on Defense, the Law on Military, Labor and Material Obligation, the Law on Disaster Risk Reduction and Emergency Management, the Law on Critical Infrastructure, the Law on Accounting, the Law on Audit;
• The basis for the processing of personal data of visitors entering the business premises and facilities of NLM Power doo is the Law on Private Security;
• if consent has been given to the processing of personal data for one or more purposes;

 

6) Sharing of personal data

Personal data may only be shared in the following circumstances:

Personal data may be transferred on a confidential basis with the consent of the personal data owner, only when necessary for the fulfillment of contractual obligations, for the purpose of issuing invoices, for the purpose of additional protection of personal data (back-ups), for the realization and protection of contractual rights and legal interests, as well as in the case of other justified business purposes in order to protect the rights and interests of users.

Personal data may be shared with external collaborators such as law firms, accounting services, tax advisors, credit bureaus and financial institutions, business entities with which cooperation is necessary for the realization of rights and obligations arising from a mutual contractual relationship, debt collection agencies, public law bodies and bodies with public authority, when necessary for the purpose of protecting contractual rights and/or claims, or when it is in the public law interest or when it represents a legal obligation.

Personal data may be used for statistical purposes, to monitor visits and use of the website, with the aim of improving products and services and improving the quality of the website.

Finally, personal data may be disclosed to a third party only if the consent and permission for this has been given by the owner of the personal data, regardless of the manner in which the consent in question was given, with the mandatory conclusion of a personal data protection agreement, by which the third party, as the other contracting party, will also guarantee the security of the personal data.

 

7) Use of Cookies

In order for the website to function properly and to enable further improvements to the website and business, and to improve the user experience, the website must transfer a certain amount of information (Cookies) to the user’s computer, but only and exclusively based on the user’s consent, and in this regard, there is an obligation to request the user’s consent to the use of the aforementioned Cookies before transferring Cookies. If the user blocks the use of Cookies, the website will still be able to be browsed, but some of its features will not be available. More information about cookies can be found on the website https://wheycoll.com/

 

8) Protection of personal data

Personal data will be protected by applying appropriate technical and organizational security measures, in accordance with internal regulations and procedures regarding the storage, disclosure and access to personal data. Personal data may be stored in paper form or stored in special electronic personal data protection systems at NLM Power doo.

 

9) Changes to personal data

If any personal data provided by the user changes (e.g. e-mail address, residential address, etc.) or if the user becomes aware that incorrect personal data is available, the user is obliged to inform NLM Power doo by sending an e-mail to the following e-mail address: office@wheycoll.com. NLM Power doo is not liable for any losses arising from incorrect, untrue, incomplete or incomplete personal data provided to us.

 

10) Personal data retention periods

Personal data is considered a business secret, and as such NLM Power doo protects it in accordance with applicable legal regulations and best practices.

Access to personal data made available within NLM Power doo is only available to employees who need it to fulfill the purpose for which the personal data was collected

Personal data is retained for the period specified by law or bylaw, contract, or the purpose and need for data processing itself.

Personal data will be deleted when the need for their retention ceases in accordance with the basis for determining the retention period, or when consent is withdrawn, provided that there is no obligation to retain personal data on the basis of some other legal basis (e.g. legal obligations).

 

11) Rights of the person whose personal data is processed

Subject to the conditions prescribed by the regulations of the Republic of Serbia, namely the General Regulation, the owner of personal data has: (i) the right to withdraw consent to the processing of personal data (if the processing of personal data is based on consent, and there is no other legal basis for it); (ii) the right to insight into the collected personal data; (iii) the right to access and obtain information; (iv) the right to request the issuance of an extract of personal data; (v) the right to request the amendment/correction and supplementation of the collected personal data or the restriction of processing; (vi) the right to erasure of personal data; (vii) the right to transfer the collected personal data; (viii) the right to object to the processing of personal data. The exercise of any of the above rights can be carried out by sending an e-mail to the following e-mail address: office@wheycoll.com

When exercising the above rights, it is necessary for the owner of personal data to prove his identity by submitting a copy of a personal document from which the identity can be established in order to comply with applicable regulations and prevent unauthorized disclosure of personal data. All requests and complaints submitted by the owner of personal data will be considered and responded to in a timely manner.

The owner of personal data has the right to file a complaint with the Commissioner for Personal Data Protection, if he believes that the processing of his personal data has been carried out in violation of the provisions of the Law.

 

12) Changes to the Privacy Policy

NLM Power doo reserves the right to change this Privacy Policy from time to time to reflect changes in legal or other regulations or changes in the procedures and methods of processing personal data in accordance with the law. In the event of such changes, the changes will be published on the NLM Power doo website or in another appropriate manner. The changes will enter into force on the date of publication.

 

13) Contacts

Contact details are e-mail address: office@wheycoll.com or in writing to the address: Braće Nešković br. 7, Pećinci, Deč.

This Privacy Policy was last updated on 12.06.2026.