Privacy policy

This policy explains how we process the personal data of visitors to advokatx.rs, including the legal portal under /pravo and the contact form. It follows the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti, "Official Gazette of RS" No. 87/2018, "ZZPL"), in particular Article 23. The Serbian version of this page is the governing one.

This policy does not cover the data that law firms enter into the AdvokatX application (data about their clients and cases). For that data the law firm is the controller and we are the processor - see Data processing for law firms.

Who the controller is

The controller of the data described on this page is:

Business name: Nikola Arsić PR Grafičko dizajniranje NA DOTCOM Smoljinac
Short business name: Nikola Arsić PR NA DOTCOM
Legal form: sole proprietorship (preduzetnik) registered in Serbia
Registered address: Moravska 7, 12312 Smoljinac, Malo Crniće municipality, Serbia
Company registration number (MB): 67173953
Tax ID (PIB): 113904435
Email: office@advokatx.rs

Referred to below as "we". AdvokatX is a software company, not a law firm, and does not give legal advice. For any question about personal data, write to office@advokatx.rs.

What data we process and why

Visiting the site

When you open any page, the server records technical data about the request: IP address, date and time, the address requested, the server response and browser data (user agent). This is needed for the site to work, to find errors and to protect the site against abuse.

Legal basis: legitimate interest in keeping the site available and secure (Article 12(1)(6) ZZPL).
Retention: at most 30 days, unless a record is needed to investigate a specific security incident.

We do not use visitor analytics, advertising or behavioural tracking tools on the site, and we do not load scripts or fonts from third-party services.

Contact form

The contact form has two uses, which you choose in the form itself: a question about the software (demo, pricing, data migration) or a request to be put in touch with a lawyer. The form collects:

first and last name,
email address,
phone number, if you enter one (optional),
the type of enquiry and the topic you choose,
the text of the message,
confirmation of consent.

We do not store the message in a database. The system sends it by email to the relevant address, and from then on it exists only in the recipient's mailbox.

Question about the software. We use the data to reply and, if you ask, to arrange a demo or an offer.

Legal basis: steps taken at your request before entering into a contract (Article 12(1)(2) ZZPL) and the consent you give in the form (Article 12(1)(1) ZZPL).
Retention: for as long as the correspondence lasts, and at most 24 months after the last contact, unless it leads to a contract, in which case the retention periods for business records apply.

Request to be put in touch with a lawyer. We forward your message to an independent lawyer with an active licence with whom we cooperate, so that the lawyer can contact you. We do not read the message to give advice, we do not assess your case and we take no part in the further communication.

Legal basis: your consent (Article 12(1)(1) ZZPL), which you give by ticking the consent box before sending.
Retention on our side: we delete our copy of the message no later than 30 days after it has been forwarded.

Only include in the message what the lawyer needs to understand what it is about. If you mention health data, criminal proceedings or other particularly sensitive data, they are processed only because you sent them yourself, on the basis of your explicit consent (Article 17 ZZPL). We suggest keeping such details for the conversation with the lawyer.

Calculators

The calculators on the site (procedural deadlines, attorney fee tariff, limitation periods) compute a result from what you enter and do not store it. The dates and amounts you type are not written to a database or to logs.

Protecting the form against abuse

To stop automated submissions, the number of form submissions is limited per IP address. That record is kept in the server's temporary memory for 10 minutes and then deleted automatically. The legal basis is legitimate interest (Article 12(1)(6) ZZPL).

Error tracking

If the Sentry error-tracking service is enabled, a technical description of a server error is sent when one occurs. The service is configured not to send the visitor's IP address, email address or cookies. The legal basis is legitimate interest in the site working correctly (Article 12(1)(6) ZZPL).

Who receives the data

The lawyer we cooperate with - only for requests to be put in touch with a lawyer. The lawyer is independent of us and, from the moment the message is received, is a separate controller of your data. The Serbian Advocacy Act and the rules of the legal profession, including the duty of professional secrecy, apply to the lawyer's relationship with you. An attorney-client relationship, if one arises, exists only between you and the lawyer.
Hosting provider - Hetzner Online GmbH, Germany. The site runs on its servers. It acts as our processor.
Email provider - Unlimited (unlimited.rs), Serbia. Messages from the contact form are sent and received through our mailbox with this provider. It acts as our processor.
Sentry - only if error tracking is enabled, as our processor, without data that directly identifies a visitor.
Public authorities - only where the law requires it.

We do not sell data and do not pass it on to anyone for marketing.

Transfers out of Serbia

The servers the site runs on are in Germany, in the European Union. EU member states are on the list of countries considered to provide an adequate level of personal data protection (Article 64 ZZPL and the Government Decision on the list of countries, "Official Gazette of RS" No. 55/2019), so no separate authorisation is needed for that transfer. If any data were ever kept in a country not on that list, we would base the transfer on standard contractual clauses or another ground under Article 65 ZZPL and say so on this page.

Your rights

Under the ZZPL you have the right:

to know whether we process your data and to receive a copy (Article 26),
to have inaccurate data corrected (Article 29),
to have data erased (Article 30),
to have processing restricted (Article 31),
to data portability for data you gave us (Article 36),
to object to processing based on legitimate interest (Article 37),
to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 15).

We do not use automated decision-making or profiling.

Send your request to office@advokatx.rs or by post to the address above. We reply without delay and at the latest within 30 days of receiving the request. In complex cases this may be extended by a further 60 days, and we will tell you if it is (Article 21 ZZPL). We may ask for additional information only where it is needed to confirm that the request comes from the person the data relates to.

If the lawyer has already received your message, send any request about the data the lawyer holds directly to the lawyer. If you ask, we will also forward it.

Right to lodge a complaint with the Commissioner

If you believe that your data is processed unlawfully, you can lodge a complaint with the supervisory authority (Article 82 ZZPL):

Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), Bulevar kralja Aleksandra 15, 11120 Belgrade, office@poverenik.rs, www.poverenik.rs.

A complaint does not affect your right to go to court.

Cookies

Content pages on the site set no cookies. Only pages with a form (contact and calculators) set two strictly necessary cookies, needed to submit the form securely. We do not use analytics or advertising cookies. Details are on the Cookie policy page.

Security

The site is available only over an encrypted connection (HTTPS). Only people who need it for their work have access to the servers and the mailbox. No measure excludes every risk, but we take technical and organisational measures proportionate to the data we process (Article 50 ZZPL).

Users of the AdvokatX application

For lawyers and law firm staff who use the application, we are the controller of their user account data (name, email address, role in the firm, and the sign-in and activity data needed for security), to perform the contract with the law firm and to protect the system. This data is kept while the account exists and in line with the contract with the law firm.

Changes to this policy

We update this policy when the way we process data or the law changes. The date of the last change is shown at the bottom of the page. We also inform application users of material changes that concern them by email.