Who processes the data

Čudoteka is a toy library in Novi Sad.

We are responsible for the data you give us and decide how it is used.

What we collect

We deliberately do not ask for card details: payment is taken in person. Your child's name and date of birth are optional — the subscription works the same without them. We ask for an address only from those who chose delivery — and only in order to deliver.

• The name you provide, or the one Telegram passes on when you log in.
• A phone number, if you sent a request without Telegram.
• Your Telegram identifier, so we can send reminders.
• Which toys you borrowed, when, and when you returned them.
• Your membership plan and its expiry date.
• Your child's name and date of birth — if you gave them to us. Only to suggest toys by age and to address the child by name. You may give them approximately, or not at all.
• Our correspondence on Telegram: your messages and our replies — so that a month later it is clear what was agreed.
• If you wrote to the bot before we recognised you — your name and Telegram nickname, to link you to your card.
• A delivery address, if you chose delivery. For pick-up we do not ask for it.
• Photos you attached to a request yourself.
• The library's working notes about you — for example a convenient time or how you prefer to receive a set. Only staff see them.
• Technical details of how consent was given: IP address and browser name. Only so that we can demonstrate the consent really happened.

Why we need it

The legal basis is performance of the agreement between you and Čudoteka, together with the consent you give by ticking the box when sending a request.

• To lend you toys and keep track of what you have.
• To remind you about returns so you do not have to remember.
• To count the points of your membership.
• To contact you about your request.
• To answer you and not lose a conversation already begun.

Who we share it with

We do not sell or pass data to third parties for advertising.

Technically the data passes through two companies: the hosting provider where the server runs (city below) and Telegram, if you chose it for contact. Bot messages travel through Telegram servers, which is unavoidable for that channel.

We keep backup copies of the database on the server and in a private Telegram chat, in encrypted form only: they cannot be opened without our key.

Where the data is stored

The server is located in Sofia, Bulgaria, which is in the European Union. EU countries are on the list of states with an adequate level of data protection under Serbian law, so storage there is permitted.

How long we keep it

• While you use the service and for three years after the last rental. Then the account is erased automatically, every night: name, phone, children, correspondence. Rentals and payments stay in the books without a name — for accounting and to resolve disputes.
• Consent records — also without your name, phone, IP address and browser: only the date and the document version remain, so we can demonstrate that consent was given.
• Each message of the correspondence — one year after it was sent. After that it is deleted automatically, every night.
• A record that someone we do not yet know wrote to the bot — 90 days. If we have not recognised them by then, it is deleted.
• If you ask us to delete your data, we will delete everything except what we are legally required to keep.
• Backup copies of the database are encrypted and expire: on the server they are kept for six days. What we erase at your request may remain in copies already made until they are replaced by new ones.

Your rights

You can download your data and delete your account yourself, in your personal cabinet. Deletion is possible when you have no toys at home.

For anything else, write to us.

• To learn what data about you we hold.
• To correct inaccuracies.
• To request deletion.
• To withdraw consent, after which we stop sending reminders.
• To complain to the Commissioner for Data Protection of the Republic of Serbia.

Children's data

We work with families with children under three. About the child we record only what you have told us yourself: a name and a date of birth — to suggest toys by age and to address the child by name. Neither is required, and the date of birth may be approximate. We do not collect photographs, health information or any other data about the child. A child's record can be removed at any time — write to us and we will delete it.