// Legal

Privacy Policy

Last updated: 2026-06-24

This Privacy Policy explains what personal data INTO d.o.o. collects through the intomsp.com website, for what purpose, on what legal basis, and what rights you have. We process data in accordance with the Serbian Personal Data Protection Act (Official Gazette of RS no. 87/2018) and, where applicable, the EU GDPR. In case of differences between language versions of this policy, the Serbian version prevails.

Data controller

The data controller is INTO DOO BEOGRAD-PALILULA (INTO d.o.o.), registered seat at Slanački put 51A, 11060 Belgrade, Republic of Serbia; office at Kralja Petra 45, 11000 Belgrade. Company ID: 20986328. VAT ID (PIB): 108373194.

For any data-protection question, email office@intomsp.rs or call +381 11 404 5204.

What we collect

Contact form: your name, email address and the message you send us (plus any other details you choose to provide). We also record the IP address the form was sent from, to protect against abuse.

Technical data: our server records your IP address and basic logs for security and operation.

Analytics and advertising: if you consent, Google Analytics 4 sets cookies to measure traffic and Google Ads measures the performance of our advertising campaigns. Without consent these cookies are not set (see the Cookie Policy).

Purpose and legal basis

Responding to your enquiry and communicating with you. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR; Art. 12(1)(2) of the Serbian Personal Data Protection Act).
Security and technical operation of the site. Legal basis: legitimate interest.
Traffic analytics. Legal basis: your consent alone, which you may withdraw at any time.

If you subscribe to our newsletter, we process your email address, language and sign-up metadata (IP address and timestamp), solely as proof of the consent you gave. The legal basis is your consent.

Sending is handled by Brevo (Sendinblue), a processor based in the EU. You can withdraw consent at any time, via the unsubscribe link in every email or by writing to office@intomsp.rs. After unsubscribing we remove the address from the sending list.

Data retention

We keep enquiry data only as long as needed to handle your request and any follow-up communication, and at most 24 months from the last contact, unless law requires longer retention. Technical server logs (including IP addresses) are kept for at most 12 months.

Who we share data with

We do not sell your data and do not pass it to third parties for marketing purposes.

Enquiries from the contact form arrive in our business mailbox and our internal CRM system, where they are handled only by authorised INTO d.o.o. staff.

We may make data available to our hosting and email providers, to Brevo for newsletter delivery, and to Google for analytics and advertising if you have consented. All of them process data solely on our instructions. Google may process data on servers outside Serbia and the EU; such transfers take place only if you have consented to analytics and are protected by appropriate safeguards (EU standard contractual clauses). We also disclose data to authorities where required by law.

Your rights

You have the right to access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent.

Send requests to office@intomsp.rs. You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection.