Last updated: 5 August 2026.
This Privacy Policy explains what data the website nis2srbija.rs collects, for what purposes, how long it is kept and what rights you have regarding your data. The Policy is aligned with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, No. 87/2018).
Who Processes Your Data
The data controller is NIS2 Srbija, a provider of consulting services in the field of information security (registration as a sole proprietorship in progress). Contact: office@nis2srbija.rs.
What Data We Collect
When you complete the contact form or the NIS2 check, we collect: first and last name, company name, tax ID (PIB), company registration number, email address and, optionally, a telephone number. This data is collected only when you enter and submit it yourself.
The website also uses cookies for basic functionality and, with your consent, for visitor analytics. Details and consent settings are available in the cookie banner shown on your first visit to the website.
Purpose and Legal Basis of Processing
- Responding to your enquiry — processing based on the consent you give when submitting the form (Article 12 of the Law on Personal Data Protection)
- Preventing form abuse — your IP address and time of submission are temporarily recorded to protect against automated submissions (legitimate interest)
- Visitor analytics — only with your consent via the cookie banner
How Long We Keep Data
We keep contact form data for as long as our business communication with you continues, and no longer than 2 years from the last contact, unless longer retention is legally required (e.g. for tax or accounting records after a contract has been concluded).
Whether We Share Data with Third Parties
We do not sell your data or pass it on to third parties for marketing purposes. Data is processed with the help of the following technical service providers, solely for the operation of the website:
- Cloudflare (Turnstile) — protection of the form against automated abuse (bot protection)
- Google Analytics — anonymised visitor statistics, only with your consent to cookies
- ShockHosting — hosting provider on whose servers the website and email are located
Your Rights
Under the Law on Personal Data Protection, you have the right to request: access to your data, rectification of inaccurate data, erasure of data, restriction of processing, and to object to processing. You can send your request to office@nis2srbija.rs — we respond within the statutory time limit.
If you believe your rights have been violated, you may contact the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).
Changes to This Policy
This Policy may be updated from time to time. The date of the last change is shown at the top of the page.