// who processes your data

Who processes your data

legal-information.txt
Item Details
Data controller SISTIM Kosovac Boško, PR
Brand SEOfixLab
Address Pinkijeva 2a, 11080 Belgrade (Zemun), Serbia
Company registration number (Matični broj) 63036773
Tax ID (PIB) 107852977
Representative Kosovac Boško
Email [email protected]
// first website version from public information

First website version from public information

We build the first version of a website before you contact us. For this, we use only publicly available information about the business: name, line of business, address, opening hours, phone, email, description of services, reviews, and images from the business's Google profile, existing website, or social media.

We use this information on the basis of legitimate interest: to show you what your business's website could look like and to offer our services. We contact you through the business's public contact details.

The first version is hosted at our temporary address, which Google does not show. If you don't accept the offer, we delete the first version and all the data we collected for it after 7 days.

If you'd like us to delete it sooner or don't want us to contact you, email us at [email protected]. We will do so without delay. To honor your request, we keep only the business name and contact details on a list of businesses we no longer contact.

// data you send us

Data you send us

When you write to us, submit a request through the form on our website, or become a client, we process:

  • business name, name, line of business and city, email, phone number, a link to your business profile, and message content;
  • questionnaire answers, copy, logo, and photos you send for the website;
  • data needed for invoicing and the contract;
  • payment data: when you pay by card, your card details are processed by the bank or payment provider, and we don't see them.

We contact you at the email or phone number from your request only about your website: by email, call, text message, Viber, or WhatsApp.

// website visit data

Website visit data

  • technical data in server logs: IP address, browser, and time of visit;
  • your cookie choice, stored in your browser;
  • website usage data from Google Analytics, only if you accept it.
// why we process data

Why we process data

  • Replying to your message or request, building a first version of your website, and preparing an offer: at your request, before a contract.
  • Website design, hosting, and support: performance of a contract.
  • Invoicing and bookkeeping: legal obligation.
  • First website version from public information and first contact: legitimate interest.
  • Website security and operation: legitimate interest.
  • Checking that our emails arrive: legitimate interest.
  • Google Analytics: your consent.
// cookies and analytics

Cookies and analytics

We store your cookie choice in your browser's local storage. This is necessary and always on.

We use Google Analytics 4 to measure traffic. It is turned on only after you accept it in the cookie banner. If you decline it, the website works the same.

Details are in the Cookie Policy, and you can change your choice in Cookie Settings.

// emails we send you

Emails we send you

We send confirmations and replies through an email delivery service. So we know an email arrives, this service adds an invisible image to it and records whether and when the email was opened, from which IP address, and on which device.

We don't use this data for advertising and don't build profiles.

If you don't want this, turn off automatic image loading in your email app. You can still read the email as usual.

// services we use

Services we use

Data is shared only with services we need to operate, and only as much as necessary:

  • hosting and servers, to run the website;
  • email services, for receiving and sending email;
  • a service for storing requests from the form on our website;
  • messaging apps, when we contact you by phone;
  • services for building websites and writing copy;
  • CDN services that deliver the website's styles and icons and, in doing so, see your IP address;
  • Google Analytics, only with your consent;
  • the bank and card payment provider;
  • bookkeeping service, for invoices.

Some of these services operate outside Serbia. In those cases, we choose services that apply appropriate data protection safeguards.

// our clients' websites

Our clients' websites

When we host a client's website, we process that website's visitor data, such as server logs and contact form messages, on the client's behalf and only to run the website.

The client, as the website owner, is responsible for that data. The client should have its own privacy policy.

// how long we keep data

How long we keep data

  • data for the first website version: until the 7 days expire, if you don't accept the offer;
  • your form request and the first version of your website: we delete them 7 days after sending the link if you don't accept the offer;
  • correspondence with someone who didn't become a client: up to 12 months from the last message;
  • client data: for as long as we work together;
  • invoices and accounting records: as long as the law requires;
  • website materials: for as long as hosting lasts; after it expires, we delete them together with the website;
  • server logs: briefly, for security and troubleshooting.
// your rights

Your rights

You can request access to your data, correction, deletion, restriction of processing, and data portability. You can object to processing based on legitimate interest and withdraw your consent at any time.

Send your request to [email protected]. We respond within 30 days at the latest. Before responding, we may verify that the request was actually sent by the person the data relates to.

If you believe your rights have been violated, you can contact the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

// security

Security

We protect data with HTTPS connections, restricted access, and regular backups. No system is completely secure, but we do everything reasonable to keep data protected.

// children

Children

Our services are intended for businesses. We do not knowingly collect children's data.

// changes to this policy

Changes to this policy

We update this policy when we change how we work or the services we use. The current version is always on this page, with the date of the last update.