// who processes your data

Who processes your data

legal-information.txt
Item Details
Data controller Softver-Informacioni sistemi doo
Brand SEOfixLab
Address Radoja Dakića 10, 11080 Belgrade (Zemun), Serbia
Company registration number (Matični broj) 07469381
Tax ID (PIB) 100012822
Representative Kosovac Boško
Email seofixlab.com@gmail.com
// first website version from public information

First website version from public information

We build the first version of a website before you contact us. For this, we use only publicly available information about the business: name, line of business, address, opening hours, phone, email, description of services, reviews, and images from the business's Google profile, existing website, or social media.

We use this information on the basis of legitimate interest: to show you what your business's website could look like and to offer our services. We contact you through the business's public contact details.

The first version is hosted at our temporary address, which Google does not show. If you don't accept the offer, we delete the first version and all the data we collected for it after 7 days.

If you'd like us to delete it sooner or don't want us to contact you, email us at seofixlab.com@gmail.com. We will do so without delay. To honor your request, we keep only the business name and contact details on a list of businesses we no longer contact.

// data you send us

Data you send us

When you write to us, submit a request through the form on our website, or become a client, we process:

  • business name, name, line of business and city, email, phone number, a link to your business profile, and message content;
  • questionnaire answers, copy, logo, and photos you send for the website;
  • data needed for invoicing and the contract;
  • payment data: when you pay by card, your card details are processed by the bank or payment provider, and we don't see them.

We contact you at the email or phone number from your request only about your website: by email, call, text message, Viber, or WhatsApp.

// website visit data

Website visit data

  • technical data in server logs: IP address, browser, and time of visit;
  • your cookie choice, stored in your browser;
  • aggregate visit data from Cloudflare Web Analytics, without cookies;
  • website usage data from Google Analytics, only if you accept it.
// why we process data

Why we process data

  • Replying to your message or request, building a first version of your website, and preparing an offer: at your request, before a contract.
  • Website design, hosting, and support: performance of a contract.
  • Invoicing and bookkeeping: legal obligation.
  • First website version from public information and first contact: legitimate interest.
  • Website security and operation: legitimate interest.
  • Google Analytics: your consent.
  • Cloudflare Web Analytics: legitimate interest.
// cookies and analytics

Cookies and analytics

We store your cookie choice in your browser's local storage. This is necessary and always on.

We use Google Analytics 4 to measure traffic. It is turned on only after you accept it in the cookie banner. If you decline it, the website works the same.

We also measure basic traffic with Cloudflare Web Analytics. It doesn't use cookies and doesn't track you across other websites. It records only aggregate data, such as which pages were opened and on what kind of device.

Details are in the Cookie Policy, and you can change your choice in Cookie Settings.

// services we use

Services we use

Data is shared only with services we need to operate, and only as much as necessary:

  • hosting and servers, to run the website (Cloudflare);
  • email services, for receiving and sending email;
  • a service for storing requests from the form on our website;
  • messaging apps, when we contact you by phone;
  • services for building websites and writing copy;
  • CDN services that deliver the website's styles and icons and, in doing so, see your IP address;
  • Cloudflare Web Analytics, to measure traffic without cookies;
  • Google Analytics, only with your consent;
  • the bank and card payment provider;
  • bookkeeping service, for invoices.

Some of these services operate outside Serbia. In those cases, we choose services that apply appropriate data protection safeguards.

// our clients' websites

Our clients' websites

When we host a client's website, we process that website's visitor data, such as server logs and contact form messages, on the client's behalf and only to run the website.

The client, as the website owner, is responsible for that data. The client should have its own privacy policy.

// how long we keep data

How long we keep data

  • data for the first website version: until the 7 days expire, if you don't accept the offer;
  • your form request and the first version of your website: we delete them 7 days after sending the link if you don't accept the offer;
  • correspondence with someone who didn't become a client: up to 12 months from the last message;
  • client data: for as long as we work together;
  • invoices and accounting records: as long as the law requires;
  • website materials: for as long as hosting lasts; after it expires, we delete them together with the website;
  • server logs: briefly, for security and troubleshooting.
// your rights

Your rights

You can request access to your data, correction, deletion, restriction of processing, and data portability. You can object to processing based on legitimate interest and withdraw your consent at any time.

Send your request to seofixlab.com@gmail.com. We respond within 30 days at the latest. Before responding, we may verify that the request was actually sent by the person the data relates to.

If you believe your rights have been violated, you can contact the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

// security

Security

We protect data with HTTPS connections, restricted access, and regular backups. No system is completely secure, but we do everything reasonable to keep data protected.

// children

Children

Our services are intended for businesses. We do not knowingly collect children's data.

// changes to this policy

Changes to this policy

We update this policy when we change how we work or the services we use. The current version is always on this page, with the date of the last update.