Privacy Policy

Who we are

BeSol Tech d.o.o., based in Belgrade, Serbia, is the controller responsible for the personal data described in this policy. We process it under the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS No. 87/2018).

We have not appointed a data protection officer. For questions about this policy or to exercise your privacy rights, contact us at:

Information we handle

When you use our contact form, we receive your name, email address, project outline and, if provided, your company name. Your name, email address and project outline are required to submit the form. Your company name is optional. You can also email us directly.

We also receive the information you choose to include in your message and in later correspondence. Please do not send sensitive personal data, credentials or confidential project materials through the form. We can arrange an NDA and a suitable way to share project details when needed.

Our hosting provider processes technical request information: your IP address, browser and device information, the address requested, the time of the request, and diagnostic and security logs. Our form protection uses hashed IP addresses, request identifiers, message fingerprints and delivery-status records to limit abuse and prevent duplicate submissions. Hashing does not make these records anonymous.

Purposes and legal bases

We use enquiry details to respond to you, understand your requirements, prepare a proposal and discuss working together. For enquiries made on behalf of a company, our legal basis is our legitimate interest in responding to business requests and managing business relationships. If you ask us to take steps towards a contract with you personally, the legal basis is taking those steps at your request.

We process technical request data and form-protection records for our legitimate interest in operating a reliable website, securing our services and preventing spam, repeated submissions and other abuse. Where we must retain business records to meet a legal obligation, that obligation is the basis for the relevant retention. You can ask us for our assessment of these legitimate interests.

Sending an enquiry does not subscribe you to a newsletter or marketing list. We do not sell your personal data or use your enquiry for advertising profiles. Automated anti-abuse controls limit repeated sends and reject automated submissions. We do not use enquiry data for automated decisions that produce legal or similarly significant effects.

Service providers and where data is processed

Your enquiry is handled by the people at BeSol Tech who need it to respond and discuss the requested work. We use Vercel for hosting and Microsoft 365 for email, as described below.

Vercel hosts the website and the contact service. The contact service runs in Vercel's Frankfurt region in Germany and keeps its short-lived abuse-prevention records in the memory of the server that handles your request. These records contain hashed identifiers, message fingerprints, counters and delivery statuses, not the text of your enquiry, your name or your email address. Website pages are delivered through Vercel's global network from the location nearest to you.

Microsoft Ireland Operations Limited provides our Microsoft 365 email. The contact service sends your enquiry to our mailbox through Microsoft's email service. The Microsoft Customer Agreement incorporates the Microsoft Products and Services Data Protection Addendum, which sets out Microsoft's data protection obligations.

Our Microsoft 365 mailbox data is currently stored in Europe. Microsoft has not committed to keeping it in that region, so the storage location may change.

Information may also be processed outside Serbia through the providers' international infrastructure and support operations, including in the United States. For transfers from the European Economic Area to Microsoft Corporation in the United States, Microsoft's DPA provides for EU standard contractual clauses.

We disclose information to public authorities only when the law requires it, or when necessary to establish, exercise or defend legal claims.

• Vercel Privacy Notice
• Microsoft Privacy Statement
• Microsoft Products and Services Data Protection Addendum

How long we keep information

If we do not start working together, we delete your enquiry and related emails 12 months after our last exchange. If we do, they become part of our business records: we keep them for the duration of the relationship and afterwards for as long as Serbian law requires us to keep business records, or as long as we need them to resolve a dispute.

Deleted emails may remain recoverable for a limited period under Microsoft's retention settings. A legal hold or other retention requirement may delay permanent deletion.

The form's abuse-prevention counters expire after 10 minutes. Request-status records used to prevent duplicate submissions expire within 24 hours of their most recent update. Records of rejected or failed submissions expire sooner or are deleted immediately. Restarting the contact service clears all of these records.

Request logs are subject to Vercel's retention periods for the active hosting plan. Vercel's own security and operational records follow the Vercel Privacy Notice.

How we protect information

The website and the contact service are served only over HTTPS. Enquiries are not stored in a website database: the contact service passes them to our mailbox and keeps only the short-lived hashed records described above. Access to the mailbox is limited to the people at BeSol Tech who handle enquiries.

Your privacy rights

Subject to applicable law, you can request access to your personal data, correction of inaccurate data, deletion or restriction of processing, and data portability where its legal conditions are met. You can also object, as described in the next section. These rights are not absolute; for example, we may need to keep certain information to meet a legal obligation or deal with a legal claim.

To make a request, email us using the address below. We may ask for information reasonably needed to verify your identity. We respond within 30 days of receiving your request. If a request is complex, Serbian law allows us to extend this by up to 60 days, and we tell you why within the first 30 days.

You can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, office@poverenik.rs. If the data protection law of another country applies to your data, you can also complain to the supervisory authority there.

• Serbian Commissioner for Personal Data Protection

Your right to object

You can object at any time, on grounds relating to your particular situation, to our use of your personal data based on legitimate interests. This covers our handling of your enquiry and of technical and form-protection records. When you object, we stop that processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. To object, email us:

Cookies and site data

This website sets no cookies and does not use analytics, advertising or tracking tools. The contact form does not save your entries in cookies or browser storage: they stay in the open page, and reloading or leaving the contact page clears them.

Preparing or copying an email draft happens in your browser and does not itself send an email. To send that draft, you must send it through your email app. If a direct submission has an uncertain outcome, it may already have reached us; follow the form's status information before sending a draft. Your chosen email provider processes email under its own terms.

Links to external websites, including LinkedIn and our providers, lead to services with their own privacy policies.

Client project data

This policy covers our website and business enquiries. When our work for a client involves personal data held in the client's systems or materials, we process that data on the client's behalf and only on the client's instructions. That processing follows our contract with the client, including a data processing agreement where one is required, and the client's own privacy notice applies to it.

Changes to this policy

We update this policy when our website or data-handling practices change, and the date at the top identifies the latest version. If we want to use data you have already sent us for a new purpose, we tell you before we do. For questions about how this policy applies to your enquiry, contact us: