Effective Date: December 17, 2025

Website: https://bronsunpro.com

AGREEMENT AND CONSENT FORM

I/We, the undersigned, hereby acknowledge that I/we have read, understood, and agree to the terms of this Consent to Processing of Personal Data ("Consent").

1. DATA CONTROLLER INFORMATION

LEPOTIK DOO (LLC)

Legal Address: Rakovac, Beocinski put,2, 21299, Republic of Serbia.

Physical address: Rakovac, Beocinski put,2, 21299, Republic of Serbia.

Reg number 22022300

VAT 114426263

2. PURPOSE OF THIS CONSENT

This Consent Form is provided to obtain your explicit, informed, and voluntary consent to process your personal data in accordance with:

- Personal Data Protection Law of the Republic of Serbia (Official Gazette RS No. 87/2018, as amended)

- General Data Protection Regulation (EU) 2016/679 (GDPR) where applicable

3. PERSONAL DATA TO BE PROCESSED

By providing your personal data through forms, account creation, or communication with us, you consent to the processing of the following categories of personal data:

4. LEGAL BASIS FOR PROCESSING

You consent to the processing of your personal data on the following legal bases:

4.1 Explicit Consent (Primary Basis)

- Your Voluntary Consent: By checking the consent boxes below and/or continuing to use the Website, you explicitly consent to the processing of your personal data for the purposes specified in Section 5.

4.2 Contract Performance

- Contractual Necessity: Processing is necessary to perform a contract or agreement between you and the Company (e.g., purchase orders, service agreements, account terms).

4.3 Legal Obligation

- Regulatory Compliance: Processing may be necessary to comply with applicable laws, regulations, tax requirements, and legal obligations in Serbia, and other jurisdictions.

4.4 Legitimate Interests

- Company Interests: Processing may be necessary for legitimate interests of the Company, such as improving services, fraud prevention, security, and business operations, provided such interests do not override your fundamental rights.

5. PURPOSES OF DATA PROCESSING

By providing your consent, you authorize the Company to process your personal data for the following purposes:

5.1 Service Provision and Customer Support

- Creating and managing your user account

- Processing your orders and transactions

- Delivering products and services you request

- Providing customer support and resolving issues

- Responding to your inquiries and requests

- Sending order confirmations, shipping updates, and delivery notifications

- Managing refunds, returns, and complaints

5.2 Website Optimization and Improvement

- Analyzing Website usage and user behavior

- Improving Website functionality and user experience

- Troubleshooting technical problems

- Measuring Website performance and conversion rates

- Conducting A/B testing and user research

- Personalizing content and product recommendations

5.3 Communication and Notifications

- Sending transactional emails and notifications

- Communicating about account status and security

- Providing service updates and maintenance notices

- Sending legal notices and policy updates

- Responding to support requests

5.4 Marketing and Promotional Activities (Separate Consent)

- Sending marketing emails and newsletters

- Informing you about new products and services

- Offering special promotions, discounts, and deals

- Inviting you to events, webinars, and contests

- Conducting market research and customer surveys

- Displaying targeted advertisements and retargeting

5.5 Analytics and Business Intelligence

- Collecting aggregated, de-identified analytics data

- Analyzing user trends and patterns

- Creating business reports and statistics

- Improving marketing strategies

- Measuring campaign effectiveness

5.6 Legal Compliance and Security

- Complying with legal and regulatory requirements

- Detecting and preventing fraud

- Protecting Website security and data integrity

- Investigating security incidents

- Establishing, exercising, or defending legal claims

- Enforcing Terms of Service and other agreements

- Responding to law enforcement requests

5.7 Third-Party Sharing (Where Applicable)

- Sharing data with payment processors for payment processing

- Sharing data with shipping/logistics providers for delivery

- Sharing data with email service providers for communications

- Sharing data with analytics platforms for Website improvement

- Sharing data with CRM platforms for customer management

- Sharing data with marketing partners (only with additional consent)

6. DATA RETENTION AND STORAGE

I understand that my personal data will be retained for:

- Account Data: Until account deletion or 3 years after last activity

- Transaction Data: Minimum 3-5 years for accounting and tax compliance

- Support Records: 2 years from last interaction

- Marketing Consent: Until withdrawn; minimum 3 years for documentation

- Analytics Data: 12-24 months (aggregated and anonymized)

- Cookies: As specified at placement; typically 6 months to 2 years

I understand that I can request deletion of my personal data at any time, subject to legal requirements and contractual obligations.

7. DATA SECURITY AND PROTECTION

I acknowledge that LEPOTIK DOO (LLC) implements comprehensive security measures to protect my personal data, including:

- Encryption of data in transit (SSL/TLS) and at rest

- Access controls and authentication measures

- Regular security audits and vulnerability testing

- Staff training on data protection

- Secure backup and disaster recovery procedures

- Incident response procedures for data breaches

I understand that while the Company implements robust security measures, no system is 100% secure, and the Company cannot guarantee absolute protection against unauthorized access.

8. YOUR PRIVACY RIGHTS

I understand that I have the following rights regarding my personal data:

- Right to Access: Request and receive copies of my personal data

- Right to Rectification: Request correction of inaccurate or incomplete data

- Right to Erasure: Request deletion of my personal data (subject to legal limits)

- Right to Restrict Processing: Request limitation of data processing

- Right to Data Portability: Request my data in portable format

- Right to Object: Object to processing for marketing or legitimate interests

- Right to Withdraw Consent: Withdraw this consent at any time

- Right to Lodge a Complaint: File complaints with data protection authorities

I can exercise these rights by contacting: info@lepotik.com

9. WITHDRAWAL OF CONSENT

I understand that:

- I can withdraw this consent at any time without penalty or consequences

- Withdrawal does not affect the lawfulness of processing before withdrawal

- I can withdraw consent for specific purposes while maintaining consent for others

- To withdraw consent, I can contact info@lepotik.com or click "Unsubscribe" links in communications

- Withdrawal of consent for all processing may result in inability to use certain Website features

10. THIRD-PARTY SHARING AND RECIPIENTS

I understand that my personal data may be shared with the following categories of recipients:

- Payment Processors: For processing payments and transactions

- Shipping Providers: For delivery of products

- Email Service Providers: For sending communications

- Analytics Platforms: For Website analytics (Google Analytics)

- CRM Systems: For customer relationship management

- Marketing Partners: For marketing purposes (with separate consent where required)

- Regulatory Authorities: For legal compliance

- Professional Advisors: For legal, accounting, and consulting services

- Data Center Operators: For Website hosting and infrastructure

All recipients are contractually bound to protect my data and use it only for authorized purposes.

11. INTERNATIONAL DATA TRANSFERS

I understand that my personal data may be transferred to and processed in:

- European Union member states

- Republic of Serbia

- Other countries as necessary for service delivery

I understand that the Company will ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions, etc.) are in place for international transfers.

12. COMPLIANCE WITH APPLICABLE LAW

I understand that my personal data will be processed in compliance with:

- Personal Data Protection Law of the Republic of Serbia

- General Data Protection Regulation (EU) 2016/679 (GDPR) where applicable

- All other applicable laws and regulations

I confirm that I have the legal right to provide this consent. If I am under 18 years of age, I confirm that I have obtained parental or guardian consent.

13. CONTACT INFORMATION FOR DATA PROTECTION INQUIRIES

LEPOTIK DOO (LLC)

- Email: info@lepotik.com

- Postal Address: Rakovac, Beocinski put,2, 21299, Republic of Serbia

- Website: https://bronsunpro.com

14. ACKNOWLEDGMENTS AND CONFIRMATIONS

14.1 My Acknowledgments

I acknowledge and confirm that:

- I have read and understood this entire Consent Form

- I have read and understood the Privacy Policy at https://bronsunpro.com/policy

- I understand the purposes for which my personal data will be processed

- I understand my rights regarding my personal data

- I understand how to withdraw this consent

- I am providing this consent voluntarily and without duress

- I have not been misled or coerced into providing this consent

- I am 18 years of age or older (or have parental consent if under 18)

- I am the authorized owner of the personal data I am providing

- All information I provide is accurate, complete, and truthful

14.2 Voluntary Provision of Data

I understand that:

- Providing personal data is voluntary

- Refusal to provide certain data may limit my ability to use certain Website features

- I can refuse to provide optional personal data without consequences

- Providing consent is separate from using the Website (I can use the Website without agreeing to all processing)

14.3 Changes to This Consent

I understand that:

- The Company may update this Consent Form to comply with changes in law

- Material changes will be communicated to me with advance notice

- Continued use of the Website constitutes acceptance of updated Consent

- I can withdraw consent if I disagree with changes

15. CONSENT STATEMENT

By checking the box below, I provide my explicit, informed, and voluntary consent to the processing of my personal data as described in this Consent Form and the Privacy Policy, for the purposes specified, on the legal bases outlined, and subject to the terms and conditions herein.

16. SIGNATURE AND CONSENT CONFIRMATION

16.1 Electronic Consent

By clicking "I ACCEPT" or "AGREE" button on the Website or checking the consent box below, I provide my electronic signature and confirm that:

- I have read and understood this entire Consent Form

- I agree to the terms and conditions stated herein

- I provide my explicit consent to data processing as described

- I understand my rights and the Company's obligations

- I am at least 18 years of age or have parental consent

17. REVOCATION OF CONSENT

I understand that I can revoke this consent at any time by:

1. Email: Sending a revocation request to info@lepotik.com

2. Unsubscribe: Clicking the "Unsubscribe" link in any marketing email

3. Written Mail: Sending a written revocation to the registered address

4. Phone: Calling the Company's customer service

Upon revocation:

- Processing based on this consent will stop

- Data already processed remains lawful

- Withdrawal does not affect other legal bases for processing

- The Company will confirm receipt of revocation within 31 business days

18. PROOF OF CONSENT

The Company will maintain records of:

- This Consent Form

- Date and time of consent provision

- Email address confirming consent

- Any communications regarding consent

- Changes to consent status

- Withdrawal or modification of consent

These records serve as proof of your consent for compliance and audit purposes.

19. SPECIAL PROVISIONS

19.1 Parental or Guardian Consent (For Minors)

If you are under 18 years of age, this consent must be signed by your parent or legal guardian:

Parent/Guardian Name:

Relationship to Minor:

Parent/Guardian Signature:

Date:

Parent/Guardian Email:

19.2 Authorized Representative

If you are providing consent on behalf of another person, you must have legal authority to do so. Provide proof of authorization:

Authorized Representative Name:

Relationship/Authorization:

Proof of Authority:

20. GOVERNING LAW AND DISPUTE RESOLUTION

This Consent Form is governed by:

- Primary Law: Personal Data Protection Law of the Republic of Serbia

- Applicable Law: GDPR where applicable to EU/EEA residents

Any disputes arising from this Consent shall be resolved through:

1. Negotiation and good faith discussion

2. Complaint to applicable data protection authorities

3. Legal proceedings in courts of competent jurisdiction

21. FINAL ACKNOWLEDGMENTS

21.1 Entire Agreement

This Consent Form, together with the Privacy Policy and Terms of Service, constitutes the entire agreement between you and the Company regarding personal data processing.

21.2 Severability

If any provision of this Consent is found to be invalid, the remaining provisions shall remain in effect.

21.3 Language

This document is provided in English. If translated into other languages, the English version shall prevail in case of discrepancies.

21.4 Validity

This Consent remains valid for a period of one (1) year from the date of signature, after which you may be requested to provide renewed consent.

22. DOCUMENT INFORMATION

22.1 Questions or Concerns

If you have any questions about this Consent Form or our data processing practices:

- Email: info@lepotik.com

- Website: https://bronsunpro.com

- Data Protection Authorities: As listed in Section 14

END OF CONSENT TO PROCESSING OF PERSONAL DATA

This document is legally binding and effective as of the date of signature.

By providing your consent, you enter into a legally binding agreement with LEPOTIK DOO (LLC) regarding the processing of your personal data.