Privacy Policy

Data Controller

The controller of your data is NOTA GROUP d.o.o., with headquarters in Belgrade, Serbia. For any data protection inquiries, contact us at office@notagroup.rs.

What data we collect

We only collect data you voluntarily provide through our forms (contact, consultation booking, newsletter signup), and technical data your browser sends automatically when visiting the site.

• Identification: full name, company name.
• Contact details: email address, phone number.
• Content of messages you send us.
• Technical visit data (anonymized, raw IP address is not stored).

Purpose of processing

We process your data exclusively for:

• Responding to your inquiries and delivering requested services.
• Scheduling consultations.
• Sending the newsletter (only with your consent).
• Site visit statistics (anonymous, no tracking cookies).

Legal basis

Processing is based on your consent (Art. 12 of the Act) and legitimate interest in answering your inquiries. You can withdraw consent at any time.

Site analytics

We use our own anonymous analytics system that does not store IP addresses, does not use tracking cookies, and does not share data with third parties. A daily anonymous hash is generated from IP and browser data which cannot be linked to a specific person.

You can disable analytics from your browser at any time (Do Not Track signal is respected).

Retention period

Form data is kept as long as necessary to deliver the service or as required by law (accounting records: at least 5 years).

Anonymous analytics data is kept up to 90 days (raw events), 180 days (sessions), 365 days (anonymous visitors).

Your rights

Under the law, you have the right to:

• Access your personal data.
• Rectification or completion.
• Erasure ("right to be forgotten").
• Restriction of processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time.
• File a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Third parties

We do not share your data with third parties except where necessary to deliver the service (e.g., email service provider) or as required by law. In such cases, third parties are contractually bound to data protection.

Security

We apply technical and organizational measures to protect your data: HTTPS encryption, secure storage, restricted access to employees processing data as part of their duties.

Policy changes

We reserve the right to amend this privacy policy. The latest version is always available on this page.

Contact

For all data protection inquiries: office@notagroup.rs.