Privacy Policy

1. Data Controller

The data controller within the meaning of Article 4 GDPR and the Serbian Law on Personal Data Protection is:

Maritainer Consulting d.o.o.
Republic of Serbia

Contact details are available on this website.


2. Applicable Legal Framework

This Privacy Policy is governed by and interpreted in accordance with:

Regulation (EU) 2016/679 (GDPR)
Serbian Law on Personal Data Protection

Where terminology or interpretation differs, GDPR definitions and standards apply by analogy.


3. Categories of Personal Data

We may process the following categories of personal data:

a) Identification and contact data
‍
- Full name
- Company name
- Business email address
- Phone number
- Business role or function

b) Communication data
‍
- Information provided in forms or messages

c) Technical data
‍
- IP address
- Browser type and version
- Device type
- Date and time of access
- Basic analytics and security data

We do not intentionally collect special categories of personal data (such as health data, political opinions, biometric data, or similar sensitive information).


4. Purposes of Processing

Your personal data is processed exclusively for:

- Responding to Strategic Call requests
- Scheduling and communication
- Assessing professional and strategic alignment
- Internal documentation and compliance
- Website security and performance monitoring

We do not use your data for advertising, profiling, automated decision-making, or resale.


5. Legal Basis for Processing

Processing is carried out on one or more of the following legal bases:

- Your consent (Article 6(1)(a) GDPR)
- Legitimate interest (Article 6(1)(f) GDPR), limited to professional communication and evaluation
- Compliance with legal obligations (Article 6(1)(c) GDPR)

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.


6. Data Storage and Retention

Your personal data is:

- Stored securely
- Accessible only to authorized persons
- Retained only for as long as necessary to fulfill its intended purpose or to comply with legal requirements

When no longer required, data is deleted or anonymized.


7. Data Sharing and Recipients

Your data is never sold.

It may be shared only with:

- Hosting providers
- Email and communication service providers
- Scheduling and form service providers
- IT and security service providers
- Public authorities when required by law

All such parties act as data processors under Article 28 GDPR and operate under appropriate contractual safeguards.


8. International Data Transfers

If personal data is transferred outside the Republic of Serbia or the European Economic Area (EEA), such transfers are carried out only when:

- An adequacy decision exists, or
- Standard Contractual Clauses (SCCs) or equivalent safeguards are in place

In accordance with Articles 44–49 GDPR and corresponding Serbian legal provisions.


9. Your Rights as a Data Subject

You have the right to:

- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Request restriction of processing
- Request data portability
- Object to processing based on legitimate interest
- Withdraw consent at any time

You also have the right to lodge a complaint with:

- The Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, and
- Any competent supervisory authority in the European Union, where applicable.


10. Accuracy of Information

You confirm that all personal data you provide is accurate, complete, and truthful.
Providing false or misleading information may result in refusal of communication or services.


11. Recording of Calls

Strategic Calls may be recorded solely for documentation, quality assurance, or security purposes.
Recording will only take place with your explicit prior consent and in accordance with applicable law.


12. Cookies and Technical Tools

This website uses:

- Essential cookies necessary for proper functionality
- Basic technical and security analytics

We do not use advertising cookies, behavioral tracking, or profiling technologies.


13. Security Measures

We apply appropriate technical and organizational measures in accordance with Article 32 GDPR, including:

- Controlled access to personal data
- Secure hosting environments
- Data minimization principles
- Limited personnel authorization


14. No Client Relationship

Submitting personal data through this website does not create:

- A contractual relationship
- A consulting engagement
- A client–consultant relationship

It solely enables preliminary professional communication.


15. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time.
The version published on this website is the legally binding and current version.


16. Acceptance

By using this website and submitting your personal data, you confirm that:

- You understand how your data is processed
- You consent to the processing described in this Privacy Policy
- You accept the professional and limited scope of interaction