Privacy Policy – Crna Reka Petrol

This policy explains what personal data the CRNA REKA mobile app (the Crna Reka Petrol Loyalty Club) collects, why we use it, and what your rights are.

Who is responsible for your data
Crna Reka Petrol
Bul. Ilinden, Kavadarci, North Macedonia
Email: info@crnarekapetrol.mk

What we collect
Account data: username and password to sign in. The app does not store your password; after sign-in only a secure session token is kept on your device (in the system’s secure storage: the iOS Keychain or the Android Keystore).
Registration data: full name, email, phone number, address and city.
Loyalty data: points balance, vouchers, purchase history and activity linked to your loyalty card.
Job applications: when you apply for a job — full name, email, phone and the message you send.
Support messages: the text you write in the support chat.
Device settings: your chosen language and similar settings are stored only on your device.
The app does not use your location, does not access your contacts, camera or photos, and does not use tracking or advertising identifiers.

Why we use it
to sign you in and run your loyalty account;
to show your points, vouchers and purchase history;
to process your job applications;
to answer your support questions;
to show notifications on your device that you have allowed.
Who we share it with
We do not sell your data. It is processed only by service providers that help us run the app:

VVIR Company — the loyalty and sign-in platform (signal.vvircompany.com, portal.vvircompany.com);
the server for job applications and password resets (signal.vvircompany.com);
Google (Gemini) — if the support assistant is enabled, chat messages are sent to Google to generate a reply;
OpenStreetMap / Google Maps — to display the map of fuel stations (the map provider sees your device’s IP address).
How long we keep it
We keep account data while your account is active. Job applications are kept for the duration of the hiring process unless the law requires longer retention.

Deleting your account
You can request deletion of your account at any time by emailing info@crnarekapetrol.mk. The steps are described at https://signal.vvircompany.com/delete-account. Deletion removes your personal data, except records we are legally required to keep (for example accounting records,documents).

Your rights
Under the Law on Personal Data Protection you have the right to access, correct and delete your data, to restrict or object to processing, and to complain to the Personal Data Protection Agency (www.azlp.mk). Send any request to info@crnarekapetrol.mk.

Children
The app is not intended for children under 16 and we do not knowingly collect their data.

Changes
This policy may be updated. The date of the latest change is shown at the top.