Privacy Notice

Last reviewed: 22 September 2026

Who is responsible

The data controller is Milica Vlk PR Konsultantske usluge iz oblasti informacione bezbednosti VLK InfoSec Consulting Beograd (Voždovac), MB 68610079, PIB 115756387, with its registered office at Kapetana Zavišića 4, sprat: 3, broj stana: 301, 11042, Beograd (Voždovac), Srbija. For privacy enquiries, contact [email protected]. This website notice does not replace client-specific processing terms.

Information and purposes

Enquiries use your name, email address, selected topic and message. Organization, role and business-scoping details help us understand your request. The latter may include country, industry, approximate employee and system counts, IT environment, available team, evidence, goals and timing.

Email verification confirms access to the supplied mailbox before the enquiry is delivered. It does not establish legal identity. Technical security checks and rate limits protect the contact channel against abuse. Please share only high-level information and avoid sensitive personal data, credentials and confidential evidence.

Legal bases

Where you seek services as an individual contracting party, responding may involve steps taken at your request before a contract. Business communication with company representatives and proportionate abuse prevention rely on the relevant legitimate interests in handling enquiries and protecting the service, subject to the required balancing assessment. Statutory recordkeeping relies on applicable legal obligations. An enquiry does not subscribe you to marketing.

Your choices

You are not legally required to submit an enquiry. Your name, a usable email address and the required enquiry fields are needed to verify and respond through this channel. Without them, the form cannot complete submission. Optional fields can be left blank or set to “Not sure” where available.

Providers and international processing

Cloudflare supplies the hosted website infrastructure and the configured verification/security service. Google Workspace handles verification emails and business enquiries. Authorized professional advisers or authorities may receive information where required for an agreed purpose or legal obligation. External links, including LinkedIn, lead to independently operated services.

Cloudflare and Google Workspace may process information outside Serbia. Processing is subject to the applicable service agreements and data-protection terms. You may request information about the relevant recipients and transfer safeguards at [email protected]. No Serbia-only or EU-only processing commitment is made.

Retention

Verification codes expire after ten minutes and allow at most five attempts. Used verification records are removed after the delivery attempt. Expired records are removed when the contact service processes subsequent requests. Backups and provider records may have separate retention. Email messages, including verification messages in the sending mailbox, are subject to mailbox retention.

Enquiries are retained for the time needed to respond, conclude the discussion and address justified follow-up, with retention reviewed when correspondence ends. Where an enquiry becomes an engagement, relevant records follow the applicable contract and legal recordkeeping requirements. Information needed for a legal claim or statutory duty may be retained for the applicable period. Retention is reviewed when correspondence ends, taking account of the purpose and any applicable legal obligations.

Security

The contact service is designed to use encrypted transport, server-side validation, restricted credentials, abuse checks and expiring single-use verification. No method of transmission or storage removes all risk. Please arrange a suitable secure channel before sharing client evidence.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability, object to processing and withdraw consent where consent is the legal basis. Withdrawing consent does not affect lawful processing before withdrawal. Requests go to the privacy contact on the Company Information page. You may lodge a complaint with Serbia’s Commissioner for Information of Public Importance and Personal Data Protection. Applicable statutory response periods and exceptions apply.

Automated decisions and changes

The enquiry workflow does not make decisions with legal or similarly significant effects about you. The build includes no newsletter, advertising tracker, chatbot or document upload. This notice is reviewed before material changes to processing. See also Cookies & Website Technologies.