Privacy Policy.

Protecting your privacy matters to us. This privacy policy explains what personal data Postulat IT collects when you visit postulat.rs or contact us, what we use it for, how long we keep it and what rights you have.

We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, No. 87/2018) and, where applicable, the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

The controller of your personal data is Postulat IT, registered at Vojvode Mišića 21, lokal 5, 35250 Paraćin, Republic of Serbia.

For any questions about data processing, contact us at info@postulat.rs or by phone at +381 69 260 5686.

We only collect the data we actually need:

• Contact form data: full name, email address, phone number (optional), selected service and the content of your message.
• Communication data: the content of emails and notes from meetings and calls we have with you.
• Client business data: company name, address, tax ID and the details needed to prepare quotes, contracts and invoices.
• Technical data: IP address, browser and device type, and access time, automatically logged by the server for security and to keep the site running properly.

We process data only on the legal bases set out in Article 12 of the Law on Personal Data Protection (and Article 6 GDPR):

• Responding to your enquiry and preparing a quote — steps taken at your request before entering into a contract.
• Performance of a contract — building and maintaining your website, communicating during the project and providing support.
• Compliance with legal obligations — bookkeeping, invoicing and retaining accounting records.
• Legitimate interest — protecting the security of the site, preventing abuse and improving our services.
• Consent — where you explicitly give it, for example for analytics cookies or newsletters. You can withdraw consent at any time.

The site currently uses only technically necessary mechanisms required for it to work and does not use tracking or advertising cookies.

We use Vercel Web Analytics for anonymous visit statistics. It does not use cookies and does not collect data that can identify you — it records only aggregated data such as the number of visits, pages viewed, country, device type and browser.

If we introduce analytics or marketing cookies in the future, we will only enable them after you give consent, and we will update this policy. You can always delete or block cookies in your browser settings.

We do not sell your data or share it with third parties for marketing purposes. Data may only be processed by trusted service providers who help us run our business, strictly on our instructions and under a duty of confidentiality:

• website hosting and infrastructure providers;
• email service providers;
• our accountants, to the extent needed to meet legal obligations;
• public authorities, only where required by law.

Some service providers (for example hosting or email services) may process data on servers outside the Republic of Serbia, usually in the European Union. In such cases, data is only transferred to countries with an adequate level of protection or with appropriate safeguards provided by law, such as standard contractual clauses.

We keep data only for as long as necessary for the purpose it was collected for:

• enquiries that did not lead to a project — up to 12 months from the last communication;
• contract-related data — for the duration of our cooperation and the applicable limitation periods;
• accounting records — for the periods required by law;
• server logs — up to 30 days, unless needed to investigate a security incident.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse: encrypted connections (HTTPS), access restricted to authorised persons only, regular backups and system updates.

Under the law, you have the right to:

• access your data and obtain a copy of the data we process (Article 26);
• have inaccurate data corrected or incomplete data completed (Article 29);
• have your data erased (Article 30);
• restrict processing (Article 31);
• receive your data in a structured, machine-readable format and transfer it to another controller (Article 36);
• object to processing based on legitimate interest (Article 37);
• not be subject to a decision based solely on automated processing (Article 38) — we do not carry out such processing;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to info@postulat.rs. We will respond without undue delay and at the latest within 30 days of receipt. In complex cases this period may be extended by a further 60 days, and we will let you know if that happens.

If you believe your data is not processed lawfully, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade (www.poverenik.rs). If you are in the EU, you may also contact the supervisory authority in your country.

Our services are intended for businesses and adults. We do not knowingly collect data from persons under 15. If we learn that we have received such data, we will delete it without delay.

We may update this policy from time to time to reflect changes in our business or in regulations. The current version is always published on this page, together with the date of the last update.

For any questions about this privacy policy, email us at info@postulat.rs, call us at +381 69 260 5686 or visit us at Vojvode Mišića 21, lokal 5, 35250 Paraćin.