Privacy policy
Privacy Policy – Culture Card BiH
Last updated: 03.05.2026
Culture Card BiH operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated purchasing process hereinafter referred to as the “Services”. Culture Card BiH uses the Shopify platform, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal data when you visit, use, make a purchase or other transaction through the Services, or otherwise communicate with us.
If there is a conflict between our Terms of Use and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and understand how your information is collected, used, and disclosed as described herein.
Privacy Statement
We are committed to protecting our customers’ personal data by collecting only the necessary, basic information about customers/users required to fulfill our obligations. We inform customers about how the collected data is used and regularly provide customers with the option to choose how their data is used, including the option to decide whether they want their name removed from lists used for marketing campaigns.
All user data is strictly protected and accessible only to employees who require such data to perform their work. All our employees and business partners are responsible for respecting the principles of privacy protection.
Personal Data We Collect or Process
When we use the term “personal data”, we refer to information entered by the customer that can reasonably be used for the purpose of fulfilling the order.
Purpose of Data Collection
The data entered on the checkout page is collected exclusively for the purpose of processing orders and delivering the ticket. This data is not used to identify customers for any other purposes, nor is it processed in the context of tracking the identity of natural persons. The customer enters this data voluntarily and may, at their own discretion, enter data that does not necessarily reflect their real identity, provided that delivery to the requested address is possible.
Limitation of Processing
The collected data is used exclusively for order fulfillment, communication related to delivery, and, where applicable, the exercise of rights related to warranty or complaints. We do not perform any additional analysis, linking, or automated profiling of users based on this data.
The data does not include anonymously collected data or de-identified data that cannot identify you or reasonably be linked to you.
We may collect or process the following categories of data, including conclusions derived from such data, depending on how you use the Services, your place of residence, and in accordance with applicable laws:
Contact information: name, address, billing address, delivery address, phone number, and email address.
Financial information: credit or debit card number, bank account information, transaction details, payment method, payment confirmation, and other payment details.
Account information: username, password, security questions, settings, and preferences.
Transaction data: items you view, add to your cart, add to a wish list, purchase, return, or cancel, as well as your previous transaction history.
Communication with us: information contained in your messages to us, for example when you contact customer support.
Device data: information about your device, browser, network connection, IP address, and other unique identifiers.
Usage data: information about your interaction with the Services, including how and when you use and navigate them.
Sources of Personal Data
We may collect your personal data from the following sources:
Directly from you – when you create an account, use the Services, communicate with us, or provide us with your data.
Automatically through the Services – through your device when you use our products, visit our websites, or through cookies and similar technologies.
From service providers – for example, when we engage partners who collect or process your data on our behalf.
From partners or other third parties.
How We Use Your Personal Data
Depending on how you use the Services, we may use your personal data for the following purposes:
Providing, customizing, and improving the Services — payment processing, delivery, account management, purchase personalization, and product recommendations.
Marketing and advertising — sending promotional offers by email, SMS, or post, and displaying online ads based on your activity.
Security and fraud prevention — account authentication, detection, and investigation of potential illegal or malicious activities.
Communication with you — responding to inquiries, customer support, and maintaining our relationship with you.
Legal obligations — compliance with applicable regulations, responding to requests from competent authorities, court orders, and similar obligations.
How We Share Your Personal Data
In certain circumstances, we may share your data with third parties:
With Shopify and other service providers, including IT, payment, logistics, and customer support providers.
With business and marketing partners for advertising and promotional purposes.
When you explicitly request or approve this, for example for product delivery.
With our affiliated companies within the group.
In connection with business transactions, such as mergers, acquisitions, or bankruptcy.
For the purpose of complying with legal obligations and protecting our rights.
Relationship with Shopify
Our Services are hosted by Shopify, which collects and processes data about your use of the Services in order to enable and improve them. The data you enter may be shared with Shopify and third parties in different countries.
Shopify may also use your data to improve its services and for personalized advertising. In such cases, Shopify is responsible for data processing. You can learn more about their practices here: https://privacy.shopify.com/en.
Third-Party Websites and Links
Our website may contain links to third-party websites. We are not responsible for the security, accuracy, or privacy policies of those websites. We recommend that you always review their terms of use and privacy policies.
Children’s Data
The Services are not intended for children, and we do not knowingly collect data from children under the age of majority in your jurisdiction. If you are a parent/guardian and believe that a child has provided their data, please contact us so that the data can be deleted.
Data Security and Retention
We use appropriate security measures, but we cannot guarantee “complete security”. We retain data for as long as necessary to fulfill contractual and legal obligations, resolve disputes, and enforce our policies.
Your Rights
Depending on your jurisdiction, you may have the right to:
Access/view your data
Delete your data
Correct inaccurate data
Data portability
Manage communication preferences, for example unsubscribing from promotional emails
To exercise these rights, you may contact us using the details below or use the options available on the website.
Complaints
If you have any complaints regarding data processing, please contact us. You also have the right to contact the competent data protection authority in your country.
International Transfers
Your data may be transferred to and processed outside your country. If data is transferred outside the EEA or the UK, we use appropriate legal protection mechanisms, such as the EU Standard Contractual Clauses.
Changes to the Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date.
Contact
If you have any questions regarding our privacy practices or wish to exercise your rights, please contact us:
Agilitas d.o.o.
Milana Preloga 12a/20
71000 Sarajevo, BiH
Email: podrska@culturecard.ba