Legal documentation
Privacy Policy
& Disclaimer
Last updated: 26 June 2026
GoGreenGo (hereinafter: "Controller") is committed to protecting your personal data and respecting your privacy. This Privacy Policy describes what data we collect, why we collect it, how we protect it, and what rights you have.
We comply with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette RS, No. 87/2018 and 105/2021, "LPDP"), which is fully aligned with the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
1. Data Controller
GoGreenGo
Valjevskog odreda 19, Borča, Beograd
Phone: +381 64 46 82 422
Privacy inquiries: contact form on this site
2. Data We Collect and Why
2.1 Order data
When you submit an order through the site, we collect:
- Full name
- Phone number
- Delivery address (if home delivery is selected)
- Cart contents — ordered items, quantities, prices and any note
- Fulfillment method (delivery or pickup)
- Date and time of the order
Purpose: receiving, confirming and fulfilling your order; communication regarding the order.
Legal basis: performance of a contract — Art. 12(1)(2) LPDP / Art. 6(1)(b) GDPR.
Without this data we cannot process your order and/or arrange delivery.
2.2 Contact form
When you fill out the contact form, we collect:
- Name
- Email address
- Message content
Purpose: responding to enquiries, complaints and requests.
Legal basis: legitimate interest of the Controller to respond to service-related enquiries —
Art. 12(1)(6) LPDP / Art. 6(1)(f) GDPR. The legitimate interest does not override the data subject's rights,
as the data was voluntarily submitted by the user to initiate contact.
2.3 Browser local storage (localStorage)
Only your browser's local storage (localStorage) is used to temporarily hold your cart contents (items, quantities, prices). This data remains exclusively on your device and is not transmitted to our servers until you submit an order. We do not use tracking cookies — there are no analytics, marketing or advertising cookies on this site.
Legal basis: storage strictly necessary to provide a service explicitly requested by the user (functional storage), exempt from prior consent requirements under applicable electronic communications law.
2.4 Technical data (server logs)
Our web server automatically records:
- Device IP address
- Date, time and URL of each request
- Browser type, version and operating system
Purpose: system security, troubleshooting, protection against abuse.
Legal basis: legitimate interest in protecting system integrity — Art. 12(1)(6) LPDP / Art. 6(1)(f) GDPR.
3. Data Retention
| Data type | Retention period |
|---|---|
| Order data (email records) | 3 years from the order date (or until statutory accounting/tax obligations are met, whichever is longer) |
| Contact form messages | 12 months from receipt, or until the enquiry is resolved |
| Technical server logs | 6 months |
| localStorage (cart contents) | Stored locally on your device; managed by clearing your browser data |
After the applicable period expires, data is securely deleted or anonymised.
4. Recipients of Personal Data
We do not sell, rent or share your personal data with third parties for commercial or marketing purposes. Data may be disclosed only to the following categories of recipients:
- SMTP provider (data processor)
Order and contact form data is sent via email to our inbox. The server is located in the Republic of Serbia. A data processing agreement guaranteeing equivalent data protection is in place.
- digitalmenu.rs
The system we use to manage our menu. It receives only technical requests for menu content and does not receive any of your personal data.
- Competent authorities
Where required by law or pursuant to a court or administrative order.
5. International Data Transfers
We do not transfer your personal data outside the Republic of Serbia. All servers and business partners that process personal data on our behalf are located within Serbia.
6. Your Rights
Under the LPDP and GDPR, you have the following rights regarding your personal data:
Right of access (Art. 26 LPDP / Art. 15 GDPR)
You may request confirmation of whether we process your data and a copy of the data we hold about you.
Right to rectification (Art. 29 LPDP / Art. 16 GDPR)
You may request correction of inaccurate or completion of incomplete personal data.
Right to erasure — right to be forgotten (Art. 30 LPDP / Art. 17 GDPR)
You may request deletion of your data, unless we are legally required to retain it (e.g. accounting regulations).
Right to restriction of processing (Art. 31 LPDP / Art. 18 GDPR)
You may request temporary restriction of processing while your objection or request is being resolved.
Right to data portability (Art. 36 LPDP / Art. 20 GDPR)
You may request your data in a structured, machine-readable format (applies to processing based on consent or contract).
Right to object (Art. 37 LPDP / Art. 21 GDPR)
You may object to processing based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
Right to lodge a complaint with the supervisory authority
If you believe we are processing your data unlawfully, you have the right to lodge a complaint with:
Commissioner for Information of Public Importance and Personal Data Protection
Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia
Tel: +381 11 3408 900 · Fax: +381 11 3343 379
www.poverenik.rs · office@poverenik.rs
To exercise your rights, contact us by phone at +381 64 46 82 422 or via our contact form. We will respond to every request within 30 days of receipt.
7. Automated Decision-Making
We do not use automated decision-making or profiling that would produce legal effects or similarly significantly affect you (Art. 38 LPDP / Art. 22 GDPR).
8. Data Security
We implement appropriate technical and organisational security measures:
- HTTPS/TLS encryption of all traffic between your device and our servers
- Access to personal data restricted to authorised personnel only
- Server credentials and access keys stored outside publicly accessible files
- Regular updates of software infrastructure
Despite all measures taken, absolute security of internet data transmission cannot be guaranteed. Any personal data breach will be reported to the Commissioner and affected individuals within the statutory timeframes.
9. Changes to This Policy
This Policy may be updated to reflect changes in law or in how our service operates. The date of last revision is always shown at the top of this page. Continued use of the site after a revision constitutes acknowledgement of the updated Policy.
Disclaimer
Limitation of Liability
10.1 Nutritional information and health
Nutritional values (calories, protein, carbohydrates, fat) displayed on this site are for informational purposes only and are based on standard recipes. Actual values may vary due to seasonal ingredient variations, preparation methods and portion sizes.
The information on this site does not constitute medical, dietary or nutritional advice and is not a substitute for consultation with a licensed healthcare professional. Individuals with specific health conditions — diabetes, cardiovascular disease, eating disorders or similar — should consult a doctor or registered dietitian before making dietary decisions.
GoGreenGo accepts no liability for consequences arising from reliance on nutritional information published on this site without prior medical consultation.
10.2 Allergens and cross-contamination
Our kitchen handles various allergens, including (but not limited to): gluten, milk and dairy products, eggs, tree nuts, peanuts, soy, fish, shellfish and sesame.
Despite all care taken during preparation, we cannot guarantee the complete absence of allergen traces or cross-contamination, as shared equipment and kitchen surfaces are used.
Individuals with food allergies, intolerances or special dietary requirements (vegan, halal, gluten-free, etc.) must contact our staff before ordering to obtain accurate information about the ingredients in a specific dish. GoGreenGo accepts no liability for allergic reactions or health consequences arising from failure to do so.
10.3 Menu availability, prices and terms
Dishes, prices, portion sizes and promotions shown on this site are subject to change without prior notice, depending on ingredient availability, seasonal factors or business decisions. GoGreenGo reserves the right to change, remove or add items to the menu without advance notification.
In the event of a discrepancy between a price shown on the site and the actual price at the time of ordering, the customer will be informed before the order is confirmed and given the option to cancel.
10.4 Accuracy of information and site availability
We strive to keep the information on this site accurate and up to date, but it is provided "as is" without express or implied warranties of accuracy, completeness or fitness for a particular purpose.
GoGreenGo accepts no liability for loss or damage arising from:
- reliance on inaccurate or outdated information on the site
- temporary unavailability of the site or any of its features
- technical errors, server outages or cyber incidents beyond our reasonable control
- errors occurring during internet data transmission
10.5 Third-party links
This site contains links to independent platforms (Wolt, Instagram, etc.). By clicking these links you leave our site and enter the domain of third parties, to which this Policy and Disclaimer do not apply. We recommend reviewing the privacy policies of those platforms. GoGreenGo accepts no responsibility for the content, privacy practices or accuracy of information on third-party sites.
10.6 Governing law and jurisdiction
This Policy and any disputes arising from it are governed by the laws of the Republic of Serbia. The competent court in Belgrade has jurisdiction, without prejudice to consumers' rights to bring proceedings before the Consumer Protection Commission or a mediator under the Law on Consumer Protection (Official Gazette RS, No. 88/2021).
This Privacy Policy and Disclaimer have been prepared in accordance with the LPDP (Official Gazette RS, No. 87/2018 and 105/2021), GDPR (Regulation 2016/679), the Law on Electronic Communications and the Law on Consumer Protection. Last updated: 26 June 2026.