This document is a draft pending legal review. Final wording will be confirmed before commercial launch.

Privacy Policy

How Winfield Token handles your personal data

Version 1.0 · Effective 25 June 2026

1. Data controller

The controller of your personal data is Winfield Inženjering doo Užice, Nikole Pašića 37, 31000 Užice, Republic of Serbia (reg. no. 21714003, PIB 112652869). For any privacy question, contact info@winfieldtoken.com.

2. What data we collect

Identification & contact data you provide in the reservation form: full name, date of birth, passport/ID number, address, email and phone.
Transaction data: contract number, package, amount, payment status and timestamps. Card numbers are never collected or stored by us — they are handled by our payment processor.
Technical & usage data: IP address, browser/device information, pages visited and approximate country (for security and aggregate analytics).

3. Why we use it (purposes & legal basis)

Purpose	Legal basis
Preparing and performing your pre-agreement and reservation	Performance of a contract
Processing card payments	Performance of a contract
KYC / AML and regulatory compliance	Legal obligation
Security, fraud prevention and aggregate analytics	Legitimate interest

4. Sharing with processors

We share data only as necessary with:

Monri (Monri d.o.o.) — payment processing; receives the data needed to authorise your card transaction.
Our acquiring/partner bank, for settlement and regulatory purposes.
Hosting and infrastructure providers acting on our instructions.

We do not sell your personal data. Processors are bound by confidentiality and data-protection obligations.

5. Retention

We keep contract and transaction data for as long as required to fulfil the agreement and to comply with accounting, tax and AML retention obligations under Serbian law. Technical logs are kept for a shorter period for security purposes.

6. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, restrict or object to processing, and request portability. To exercise these rights, write to info@winfieldtoken.com. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

7. Security

We apply appropriate technical and organisational measures (encrypted connections, access controls). Payments are processed on the PCI-DSS compliant Monri WebPay platform; your full card number is never transmitted to or stored on our servers.

8. International transfers

Where data is processed outside the Republic of Serbia, we ensure an adequate level of protection consistent with applicable data-protection law.

9. Cookies

This website uses limited cookies and similar technologies. See our Cookie Policy for details.