1. INTRODUCTION
This Cookie Policy explains how Mycotopia DOO Divoš (“Company”) uses cookies and similar technologies in accordance with:
- The Law on Personal Data Protection (Republic of Serbia)
- The Law on Electronic Communications (Republic of Serbia)
- The EU ePrivacy Directive
- Regulation (EU) 2016/679 (GDPR)
This Policy should be read together with the Privacy Policy and Terms and Conditions.
2. WHAT ARE COOKIES?
Cookies are small text files stored on a user’s device when visiting a website. They enable functionality, improve security, enhance user experience, and provide analytical insights. Cookies may be session or persistent, first-party or third-party.
3. LEGAL BASIS FOR PROCESSING
- Strictly Necessary Cookies – Legitimate interest (Art. 6(1)(f) GDPR)
- Analytics and Marketing Cookies – Consent (Art. 6(1)(a) GDPR)
Users may withdraw consent at any time via the “Cookie Settings” link.
4. CATEGORIES OF COOKIES
- Strictly Necessary Cookies
- Analytics Cookies
- Marketing / Affiliate Cookies
5. STRICTLY NECESSARY COOKIES
These cookies are essential for core website functionality and cannot be disabled. They include:
- Security cookies
- Session management cookies
- Language preference cookies
- Paddle checkout session cookies
- Fraud prevention mechanisms
Retention: Session-based or up to 12 months.
6. ANALYTICS COOKIES (GOOGLE ANALYTICS GA4)
The website uses Google Analytics 4 with:
- IP anonymization enabled
- Consent-based activation
- Aggregated reporting
Collected data may include device type, browser type, pages visited, and interaction patterns.
Retention period: up to 14 months unless otherwise configured.
7. MARKETING / AFFILIATE COOKIES
Affiliate cookies may be used for partner attribution (e.g., PlantWave, Shrooly). These cookies:
- Track referral sources
- Attribute commissions
- Do not store sensitive financial data
Activated only upon explicit consent. Retention: typically 30–90 days.
8. PADDLE CHECKOUT COOKIES
When purchasing Digital Products, Paddle (Merchant of Record) may place cookies necessary for:
- Secure payment processing
- Fraud detection
- Order verification
These are considered strictly necessary for transaction execution.
9. INTERNATIONAL DATA TRANSFERS
Certain providers (e.g., Google, Paddle) may process data outside Serbia or the EU. Transfers are conducted with appropriate safeguards, including Standard Contractual Clauses where applicable.
10. CONSENT MANAGEMENT AND USER RIGHTS
The website uses a Consent Management Platform (CMP) that:
- Blocks non-essential cookies before consent
- Allows granular selection
- Logs consent records
- Enables consent withdrawal
Users may also configure browser settings to manage cookies.
11. POLICY UPDATES
The Company reserves the right to amend this Cookie Policy to reflect legal or technical developments.
12. CONTACT INFORMATION
Mycotopia DOO Divoš
Lekina 37, 22232 Divoš, Republic of Serbia
Email: info@themycotopia.com