Template notice — this policy is a starting point drafted for a Serbian software company. Have it reviewed by a lawyer and complete every bracketed field before publishing.
This policy explains what personal data EMH collects through this website, why we collect it, and what rights you have. We process personal data under the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti) and, where it applies to visitors in the European Economic Area, the General Data Protection Regulation (EU) 2016/679.
Who is responsible
The data controller is [Full legal name] d.o.o., [street address], 21000 Novi Sad, Serbia, registration number [matični broj], tax ID (PIB) [PIB]. For any question about this policy or your data, write to [@emh — add the address once the domain is chosen].
What we collect
We only collect what you send us or what the site needs to function:
- Contact form data — your name, email address, company, optional phone number and the content of your message.
- Email correspondence — anything you choose to send us by email.
- Technical data — IP address, browser type and pages visited, recorded by our hosting provider in server logs for security and reliability.
- Analytics data — if analytics are enabled, aggregated and anonymised statistics about how the site is used. [Name your analytics provider or delete this line.]
Why we process it
We rely on the following legal bases:
- To answer your enquiry and prepare an offer — performance of a contract or steps taken at your request before entering into one.
- To keep the site secure and available — our legitimate interest in operating the service.
- To meet accounting and tax obligations — compliance with a legal obligation.
- For any optional analytics or marketing — your consent, which you may withdraw at any time.
Who we share it with
We do not sell personal data. We share it only with service providers who process it on our behalf under a written agreement — our hosting provider, email provider and accountant — and with public authorities where the law requires it. Where a provider is outside Serbia or the EEA, transfers are made under appropriate safeguards such as the European Commission's standard contractual clauses.
How long we keep it
Enquiries that do not become projects are deleted within [24] months. Project and accounting records are kept for as long as the law requires, which in Serbia is generally ten years for accounting documentation. Server logs are kept for [30] days.
Your rights
You may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Write to [@emh — add the address once the domain is chosen] and we will respond within 30 days. You also have the right to complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to your local supervisory authority in the EEA.
Cookies
This site uses only the cookies strictly necessary for it to work, such as remembering your language choice. [If you add analytics or embedded video, list those cookies here and add a consent banner.]
Changes
If this policy changes we will update the date at the top of the page. Material changes affecting your rights will be announced on the site.