What we do with your data

Who collects the data

Potpis Studio, Serbia. For any question about your data, email kontakt@potpisstudio.rs or call us on +381 65 317 86 40.

Potpis Studio is a registered sole proprietorship in Serbia: Gandijeva 192, 11197 Beograd (Novi Beograd), tax ID (PIB) 116007696, company number (MB) 68821304. The full business name is at the foot of the page.

What data we collect

Through the request form: your business name, phone, email and town. If you go on to the second step, also whatever you send there yourself: the address of your current site, photos, a logo, text and a short description of what you want.

We do not ask for and do not want personal data about your customers, card numbers or anything from the special categories of data. If you send any of it as an attachment anyway, we delete it.

The site uses no analytics cookies. We count only taps on the call, Viber and WhatsApp buttons: which channel and which day, with nothing about who tapped, and we store nothing in your browser for it.

The only thing we store in your browser ourselves is the pk_consent cookie, which remembers your answer to the question about the Meta pixel. The Meta pixel exists only if you accept it; how it works is described below.

The Meta pixel and the Conversions API

We advertise on Facebook and Instagram and want to know how many requests come from our ads. For that we use the Meta pixel, but only once you choose "I accept" in the bar at the bottom of the page. Until you do, the pixel does not load and we send Meta nothing. We remember your choice for 6 months in the pk_consent cookie, and you can change it at any time through the "Privacy settings" link at the foot of the page.

If you accept, the pixel records that you opened the page, a tap on call, WhatsApp or Viber, and that you sent a request. Our server confirms the same request event through the Meta Conversions API, with the same identifier, so that it is counted once. In doing so the server sends the email and phone from the request as a hash (SHA-256, irreversible), your IP address, your browser's user agent and Meta's _fbp and _fbc cookies if they exist. Meta uses this data to match the request to its accounts; more on that in Meta's data policy.

If you choose "Essential only", none of this happens and the site works the same.

Why we use it

To contact you about your request, to build and deliver the site, and to send you an invoice. Nothing else.

We send no newsletter, and we do not sell your data or pass it to anyone for advertising.

On what basis

For building and delivering the site: performing a contract, or taking steps at your request before entering into one.

For anything you send us through the optional fields (photos, logo, text): your consent, which you can withdraw at any time.

For the Meta pixel: your consent, given in the bar at the bottom of the page and withdrawn through "Privacy settings".

For invoices and tax records: a legal obligation.

How long we keep it

We keep the request and its attachments while the work lasts and for at most 12 months after delivery, so we can help if you need anything. If you do not become a client, we delete the request at the latest 6 months after our last contact.

We delete it sooner as soon as you ask. The exception is invoices, which the law requires us to keep for longer.

Who else has access

Cloudflare, Inc.: hosting for the site, the database that holds requests and button tap counts (D1) and the storage for attachments (R2). The data is processed on Cloudflare's network, including servers outside Serbia and the EU, under their contractual data protection clauses.

Resend: the service that delivers the confirmation of your request to you and the notification to us.

Meta Platforms Ireland Ltd.: only if you accepted the Meta pixel, and only what is described in the section on the pixel.

No one else. We do not sell or pass on your data.

Your rights

You have the right to see the data we hold about you, to have it corrected or completed, deleted, its processing restricted or carried over to someone else, and to object to its processing.

Just email kontakt@potpisstudio.rs. We reply within 30 days at the latest.

If you think we have done something wrong, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to the data protection authority where you live.

Security

All traffic goes over HTTPS. Attachments can only be reached at an address with an unpredictable key, which is not indexed and which only we receive.

Changes

If any of this changes, we will update this page and the date at the top. If the change is significant, we will tell you by email.