Privacy Policy

General conditions

Privacy policy together with the Terms of Use and the Cookies Policy of d.o.o. Belgrade (hereinafter: the Company) is a User Agreement. d.o.o. is aware of the importance of personal data protection and the approach to personal data protection very seriously.

Privacy Policy The Company has designed the data processing process to be accessible, transparent and understandable.


The privacy policy is applied to the processing of personal data by doo, both through the use of the websites and (hereinafter individually: the Site, and together: the Sites), and through the use of the service. (hereinafter: the Service).

The data controller is the company Kono. bar d.o.o. Belgrade, New Belgrade, st. Bulevar Mihaila Pupina no. 35, registration number 21458775, PIB: 111303650.

You can contact the operator by e-mail: or by phone: 011/212-22-58.

The personal information we collect

The information we collect depends on how you use the Sites and Services, and the following information differs:

The data we collect from users voluntarily

The user can voluntarily leave the following information through the application for using the and services:

  • Name and surname,
  • Email address,
  • Phone,
  • Company name,
  • Address,
  • City and
  • Country.

The user also through the registration of the company account within the service and voluntarily leaves the following data that refer to the legal entity:

  • company name
  • company type (eg restaurant, bar, hotel)
  • identification number,
  • address,
  • city,
  • name of contact person,
  • email address and
  • phone,

and at the same time the user through the registration of the company account voluntarily leaves the following data relating to the natural person or the authorized representative of the legal entity:

  • Name and surname,
  • email address and
  • position (e.g. owner, manager).

The unregistered user through the site and the service voluntarily leaves data in order to place an order, and in order for the User to be able to provide the service of delivery or pickup of food and beverages, as follows:

  • Name,
  • address,
  • municipality and
  • phone number.

The personal information we collect about the user from third parties.

After registering the company account, the user or the owner of the company account within the Service can register additional users or its employees (for example, manager, waiter, bartender, deliverer) in which case the operator processes the following data obtained from the registered user, company account owner:

  • Name and surname,
  • email address and
  • workplace.

Personality data that we collect automatically.

When visiting the site and the site, as well as when using the service, the operator automatically collects certain personal data from the user’s device.

Automatically collected information may include IP address, device type, unique device ID, browser type, and broader geographic location. At the same time, information can be collected on how the user’s device behaves on the site, as well as information on the pages the user accessed and the links he clicked.

The company also collects business data of legal entities for the purpose of improving the service and generating anonymous statistical data, the service, and will not use these data for purposes other than those listed. Anonymous statistical data created through the use of the service are the property of the Company.

The collected information enables us to better understand the users who come to the Sites and who use the Services, as well as to improve the Sites, Services and user experience, ie to improve the entire system.

Internet analytical data uses Google Analytics and other Internet analytics services to compile analytical data and reports on the use of the Site and the Service by visitors, as well as to improve the services of

If the user wants to review Google Analytics, he can do so by visiting Google Analytics.

At the same time, we point out that if the user does not want Google to collect and process user data generated through the use of the Site and the Service, he can turn off Google Analytics by installing a tool on the browser: Google Analitycs opt-out Add-on.

Purpose of data processing and legal basis

The operator processes personal data for the following purposes, in accordance with the stated legal bases:

Purpose of processingLegal basis
forming a company accountthe consent of the data subject
providing services using the services and Klopa.netconclusion and execution of contracts and legitimate interest
Enabling the user to provide a service of delivery or pickup of food and beveragesconsent of the data subject, conclusion and execution of the contract and legitimate interest
user business improvementsconclusion and execution of contracts and legitimate interest
service quality improvements and trend analysislegitimate interest security and fraud prevention
security and fraud preventionrespect for legal obligations and legitimate interest

When processing data based on the legitimate interest of the Company, we take care to process it in a way that does not endanger the rights and freedoms of users. When processing data from legitimate interests, the company takes into account the balance between the personal interests of the company and the right to privacy of users.

Data processing, which is performed on the basis of the consent of the person for data processing, means that the user can withdraw the consent at any time.

How to use data

We process user data on the basis of the explicit consent of the user and in accordance with other reasons permitted by law.

User data will not be used for purposes other than those for which it was originally collected.

The Company guarantees that it will not misuse, sell or pass on to third parties the data of registered and unregistered users, nor the business data of registered legal entities.

The Company does not collect or use the personal data of unregistered users of the Service or forward the data to third parties, except for the anonymous use of data on the IP addresses of the device that accesses the Service. The IP address information of the unregistered user is used exclusively to provide access to the Service, security and fraud protection.

The company does not collect or store personal data of unregistered users of the Service that are submitted for the purpose of providing services of delivery or pickup food and beverages through the site, nor forwards data to third parties other than a specific registered user (eg restaurant, bar, etc.) for the purpose of providing services of delivery or pickup food and drink.

The members of our team are obliged to keep business secrets, and all legal measures have been taken in order to prevent the disclosure and revelation of information, except for the purposes for which they were collected.

Data sharing d.o.o. does not share user data with third parties unless it has the consent of the user or if there is a legal obligation to share user data with e.g. public authorities (then we do not need the consent of the user).

Data storage time

The operator keeps the data for the period necessary to achieve the purpose for which they were collected, ie for the period while there is the consent of the user.

If the user decides to delete the user account, the Operator undertakes to delete all data related to the specific user within 100 days.

Certain user data listed in the user account may be stored to the extent required by law for such processing or as required by law for our legal obligations, for conducting proceedings, peaceful settlement of disputes, bookkeeping.

We store analytical data of users who do not have a registered user account on the service for a period of 365 days.

User rights

The user, as the person whose data we process has the following rights:

  • the right of access,
  • the right to revoke consent,
  • the right to correction and supplementation,
  • the right to delete,
  • the right to object,
  • the right to limit processing,
  • the right to data portability
  • the right to complain to the Commissioner for the Protection of Information of Public Importance.

The company reminds the user that the use of the right to revoke consent does not affect the admissibility of data processing based on consent in the period before revocation.

The user can exercise these rights by sending a letter to the address of the operator or by sending an e-mail to the data protection representative: When addressing, it is necessary for the user to submit the name and surname, address, e-mail and telephone number, the operator reserves the right to request additional information to confirm the user’s identity.

The competent supervisory authority for d.o.o. is the Commissioner for Information of Public Importance, Belgrade, st. Bulevar Kralja Aleksandra no. 15, e-mail:


The company has taken all organizational, technical, physical and administrative measures to protect all data it collects and processes from all forms of abuse and theft.

The user independently chooses the password during registration and is solely responsible for the secrecy of the password and the use of the and services via access data. The user will not use other people’s access data or give his user data to a third party. The User may notify the Operator if he suspects unauthorized use of his access data.

The controller shall, at each individual opportunity, provide full support for the protection of personal data, user rights, privacy, property rights and intellectual property rights to all persons holding those rights, or to those whose rights have been violated, by:

upon a reasoned request, supported by appropriate documentation, remove the content so that it is not publicly available, and preserve the content for the purposes of proof;
upon request, submit to the competent authority data on the user whose entry violates any of the stated or other rights,
all in accordance with the applicable legislation of the Republic of Serbia.

If, in addition to the measures taken, the security of user data is violated, and if as a result negative consequences for the user’s privacy may occur, the Company will immediately notify the user and relevant public authorities when necessary in accordance with applicable legislation of the Republic of Serbia.


We reserve the right to change or modify the applicable Privacy Policy of the Sites and Services.

Users will be notified that the Privacy Policy has been changed through the Sites, the Service or via email registered by the User.

If the User does not accept the changes to the Privacy Policy, the Company will suspend the use of the Service for a specific User and ask the same to stop using the Sites.

Privacy policy was updated on 10.04.2020. and enters into force on the day of publication.

„Great companies are built by people who never stop thinking about ways to improve the business.“

John Willard Marriott

Scan QR code Scan
QR code