Privacy and cookie policy

1. Data controller

TIPO KOTLOGRADNJA d.o.o.
Grge Andrijanovića 27, 11210 Belgrade, Serbia
VAT no. (PIB) 102675420   company no. (MB) 08779619
Email: office@tipokotlogradnja.com
Phone: +381 11 2712 663, +381 11 2711 096

For any question about the processing of your data, write to us at the address above.

2. What data we collect

Data you enter in the contact or inquiry form: name, email address, phone number (optional), company name (optional) and the content of your message, including the model, capacity, pressure and location if you provide them.

Data you send by email or give over the phone: whatever you choose to share when contacting us.

Technical server data: the site is hosted on Cloudflare Pages, which keeps technical access logs (IP address, request time, browser type) for security and reliability. We do not use these logs for profiling and do not link them to your identity.

If enabled in the site settings, the site uses Google Analytics 4 (Google) to measure traffic: pages viewed, approximate location, device and source of the visit. This happens only after you accept in the cookie banner; without your consent no analytics script is loaded. We use no advertising networks and no profiling.

3. Purpose and legal basis

Answering your inquiry and preparing an offer. Legal basis: steps taken at your request prior to entering into a contract (Art. 12(1)(2) ZZPL, Art. 6(1)(b) GDPR).

Business correspondence and record of inquiries. Legal basis: our legitimate interest in conducting and documenting business communication (Art. 12(1)(6) ZZPL, Art. 6(1)(f) GDPR).

Website security. Legal basis: legitimate interest in protecting our systems from misuse.

Visit statistics (Google Analytics). Legal basis: your consent (Art. 12(1)(1) ZZPL, Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link in the page footer.

We do not use your data for marketing messages without your consent.

4. How long we keep data

Inquiries that do not lead to cooperation are kept for a maximum of two years from the last communication and are then deleted. Data related to concluded contracts is kept for the periods required by tax and accounting rules, as a rule ten years from the end of the business year.

5. Who receives the data

We do not sell your data and do not share it for marketing purposes. Data may be accessible to the following processors, solely so the service can work:

Cloudflare, Inc. (hosting and site protection). Inquiries are received by our own server and forwarded to our email system. If spam protection is enabled, the form submission is checked by Cloudflare Turnstile or Google reCAPTCHA (the provider then receives your IP address and technical browser data). If you accept analytics, Google receives the data described in section 8. These providers are based in the USA or transfer data there, so this involves a transfer outside Serbia and the EU, carried out under standard contractual clauses and other safeguards.

Data may also be disclosed to competent authorities where required by law.

6. Your rights

At any time you have the right to access your data, to rectification, erasure, restriction of processing, to object to processing based on legitimate interest, and to data portability.

Send your request to office@tipokotlogradnja.com and we will reply within 30 days.

If you believe the processing is unlawful, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade (www.poverenik.rs), or with the supervisory authority in your country of residence if you are in the EU.

7. Data security

The site uses an encrypted HTTPS connection. Received inquiries are stored in the site administration system and sent to our email; access is limited to employees who need it for their work. The forms are protected by a simple anti-spam check and, if enabled, by Cloudflare Turnstile / Google reCAPTCHA. To limit repeated submissions we keep only a short-lived, irreversible hash of the IP address.

8. Cookies and local storage

Without your consent the site sets no analytics or advertising cookies. If analytics is enabled, a banner asks for your consent; you can accept or decline and change your choice at any time via the “Cookie settings” link in the footer.

The site uses browser local storage (localStorage) to remember the language you selected and, when the banner is active, your cookie choice (an entry and a cookie named tipo_consent, valid for one year). Neither contains personal data. You can delete them in your browser settings.

If you accept analytics, Google Analytics 4 sets cookies (e.g. _ga, _ga_*, up to 2 years) and sends data about your visit (pages, approximate location, device, browser, shortened IP address) to Google servers, which may be in the USA. We use the data only in aggregate form to improve the site.

Cloudflare, as the hosting provider, may set a strictly necessary cookie for security and attack protection. Such cookies are essential and are not used for tracking.

Apart from the spam-protection widget (when enabled), the site embeds no third-party content (YouTube, Google Maps, social networks), so those services cannot track you through our pages. Links to Google Maps and LinkedIn open only when you click them, and their own rules apply from that point.

9. Children

The site is intended for business communication and is not directed at persons under 15. We do not knowingly collect children's data.

10. Changes to this policy

We may update this policy, for example if we introduce new tools. The current version is always published on this page, with the date of the last change.

Note: this text is prepared as a basis and covers the usual obligations. It should be reviewed by the company's lawyer before publication, in particular the retention periods and company details.