This policy explains what personal data we collect through rndsolutions.rs and when you contact us, why we use it, who we share it with and what rights you have. We keep it plain, with no small print.
In short
The site sets no cookies and uses no ad pixels or tracking analytics. We use contact form details only to reply to your request. We don't sell them and we don't send you unsolicited marketing.
1. Who the controller is
RND Solutions, Novi Sad, Serbia.
Email: office-rndsolutions@proton.me
Phone: +381 64 577 5799
For any question about your data, email us with the subject “Data protection”.
2. What we collect
- Contact form Name, email and, if you choose, company, phone, message, selected services, project stage, rough budget, timing and preferred contact channel.
- Direct contact Whatever you send us by email, phone, WhatsApp or Viber.
- Server data Like any web server, ours logs the IP address, request time, page requested and browser type. We use this only for security and troubleshooting.
We don't collect special categories of data (health, religious beliefs and similar), so please don't enter them in the form.
3. Why we use it and on what basis
| Purpose | Legal basis |
|---|---|
| Replying to your request, preparing a quote and agreeing on work | Steps before entering a contract, at your request (Art. 12(1)(2) Serbian DPA; Art. 6(1)(b) GDPR) |
| Performing contracts with clients | Performance of a contract (same article) |
| Site and server security (logs) | Legitimate interest (Art. 12(1)(6) Serbian DPA; Art. 6(1)(f) GDPR) |
| Showing YouTube videos on the page | Your consent (Art. 12(1)(1) Serbian DPA; Art. 6(1)(a) GDPR), which you can withdraw at any time |
4. Cookies and local storage
The site sets no cookies. The only thing we keep in your browser (local storage, key rnd_consent) is your choice from the cookie notice, so we don't ask on every page. That value never leaves your device.
YouTube videos. If you allow external content, a video is embedded from youtube-nocookie.com only when you click it. YouTube (Google) may then set its own cookies or storage under the Google privacy policy. If you choose “Essential only”, clicking a video opens it on YouTube in a new tab and nothing loads from Google servers on our page.
You can change your choice at any time with the button, which is also in the footer of every page.
5. Who we share data with
We don't sell data or pass it on for marketing. We only use services the site and our communication can't work without:
- Formspree, Inc. (USA) Receives contact form messages and forwards them to our email.
- Proton AG (Switzerland) Our email service, with an encrypted mailbox.
- Server provider Hosts the site and stores server logs.
- Google / YouTube Only if you allow external content and play a video.
- WhatsApp (Meta) and Viber (Rakuten) Only if you contact us through them; their privacy rules then apply too.
We disclose data to public authorities only when the law requires it.
6. Transfers outside Serbia
Switzerland is on the list of countries with an adequate level of protection. Transfers to the USA (Formspree) rely on the safeguards the processor applies, such as standard contractual clauses. If you'd rather your data didn't go through the form, email or call us directly.
7. How long we keep data
- Requests that don't become projects Up to 12 months after the last contact, then deleted.
- Client data For the duration of the work and afterwards as long as the law requires (e.g. accounting rules).
- Server logs Up to 30 days, unless needed to investigate a security incident.
8. Your rights
Under the Serbian Law on Personal Data Protection (Official Gazette RS 87/2018) and, where it applies, the GDPR, you have the right to:
- find out whether we process your data and get a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict processing;
- receive your data in a structured format (portability);
- object to processing based on legitimate interest;
- withdraw consent, without affecting processing before the withdrawal.
Send requests to office-rndsolutions@proton.me. We reply without delay and within 30 days at the latest.
If you believe the processing is unlawful, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia, www.poverenik.rs.
9. How we protect data
The site runs over HTTPS only (with HSTS) and a strict content security policy (CSP) that blocks unknown scripts. Only team members working on your request or project can access your data.
10. Minors
Our services are meant for businesses and adults. We don't knowingly collect data from anyone under 15.
11. Changes
We may update this policy when we change how we work or which services we use. The current version is always on this page, with the date of the last change at the top.