Privacy Policy
Last Updated: 18.03.2026.
FlexSurplus (“we”, “our”, “us”) operates an online B2B marketplace for flexible packaging materials (the “Platform”). This Privacy Policy explains how we collect, use, and protect personal data when you use the Platform.
This Policy is designed to align with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant laws of the Republic of Serbia.
1. Data Controller
The data controller responsible for your personal data is:
FlexSurplus
office@flexsurplus.com
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide
Name and surname
Company name
Email address
Phone number
Account login details
Listing-related information (e.g. contact details included in listings)
Messages sent via contact forms
2.2 Automatically Collected Data
IP address
Browser type and version
Device information
Pages visited and interactions on the Platform
2.3 Communication Data
Email correspondence
- Inquiry messages between users
3. How We Use Your Data
We process personal data for the following purposes:
To operate and maintain the Platform
To enable communication between buyers and sellers
To manage user accounts
To respond to inquiries and provide support
To improve the Platform and user experience
To comply with legal obligations
4. Legal Basis for Processing
We process your personal data based on:
Contractual necessity – to provide Platform services
Legitimate interests – to improve services and prevent misuse
Legal obligations – where required by law
Consent – where explicitly obtained (e.g. contact forms)
5. Sharing of Data
We do not sell personal data.
We may share data with:
Other users (e.g. when you submit a listing or inquiry)
Service providers (e.g. hosting providers, email services)
Authorities, when required by law
All third-party service providers are required to handle data securely.
6. International Data Transfers
Your data may be processed on servers located outside your country.
Where applicable, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
7. Data Retention
We retain personal data only as long as necessary to:
Provide services
Fulfill legal obligations
Resolve disputes
You may request deletion of your data at any time (see Section 9).
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against:
Unauthorized access
Loss or misuse
Alteration or disclosure
However, no system can be guaranteed 100% secure.
9. Your Rights
Under applicable data protection laws, you have the right to:
Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time
To exercise your rights, contact us at:
office@officesurplus.com
You also have the right to lodge a complaint with a supervisory authority.
10. Cookies
The Platform may use cookies and similar technologies to:
Ensure proper functionality
Analyze traffic and usage
Improve user experience
You can control cookies through your browser settings.
(You may implement a dedicated Cookie Policy if needed.)
11. Third-Party Links
The Platform may contain links to third-party websites.
We are not responsible for their privacy practices or content.
12. Data Relating to Business Users
As the Platform is intended for business users (B2B), most data processed relates to professional contact details.
However, such data may still qualify as personal data under applicable laws and is treated accordingly.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated date.
14. Contact
For any questions regarding this Privacy Policy or data protection matters, please contact:
FlexSurplus
office@flexsurplus.com