Privacy policy
In short: we only receive the data you send us yourself, we use it to reply to you and do the work, and we never sell it or share it for advertising.
Who processes the data
NIPAV INVESTMENT GROUP DOO Novi Sad (SVOJ IT brand), Nikole Tesle 14, Stari Ledinci, Novi Sad, Serbia. Company ID (Matični broj) 22113747, Tax ID (PIB) 115095335. For data questions: phone +381 62 795 275, Telegram @svojit or by post to the company address.
What data we receive
- The "Write to us" form: your name, phone number or messaging app username, your message and the service you are asking about.
- Messaging apps and calls: if you message us on Viber, Telegram or WhatsApp or call us, we see your number or username and what you wrote or said.
- Calls to Miloš, our AI receptionist (+381 21 386 00 81): speech is recognised automatically so that Miloš can answer and book your visit. We keep the name, phone number and visit time the same way as form requests.
- AI chat on the website (the bot in the bottom-left corner): the text of the conversation, or your voice if you choose to speak, and what you tell it yourself: name, contact, question. The chat loads only after you click the bot and agree. If you leave a contact, the request reaches us in Telegram.
- Technical data: the hosting provider keeps server logs (IP address, browser, time of request) to protect the website from attacks.
Cookies and browser storage
We use no advertising or analytics cookies or trackers. Fonts and images load from our own server. The demos on the website run only in your browser and send nothing to us.
The website saves only two technical markers in your browser storage (localStorage): that you closed the data notice and that you agreed to the AI chat. They stop us asking again and are never sent anywhere. When you open the chat, ElevenLabs may store its own technical data in your browser that the chat needs to work. You can delete all of this in your browser settings ("Clear site data").
Why, and on what legal basis
- To reply to your request, arrange a visit and prepare an offer: steps taken at your request before a contract, and your consent (Article 12 of the Serbian Law on Personal Data Protection).
- To do the work and issue an invoice: performance of a contract and accounting law requirements.
- AI chat: your consent, given before you start the chat for the first time. You can withdraw it at any time: stop using the chat and message us if you want the conversation deleted.
- To protect the website: our legitimate interest.
Who receives the data
We do not sell data or share it for advertising. To run the website we use processors acting on our instructions:
- FormSubmit (formsubmit.co) delivers form messages to our email;
- Google (Gmail) stores those emails;
- ElevenLabs (ElevenLabs Inc., USA) runs the AI chat: it processes text and voice and keeps conversations for up to 30 days;
- Telegram delivers requests from the AI chat to us;
- the hosting provider stores the website files and server logs.
FormSubmit, Google and ElevenLabs may store data outside Serbia, including in the USA. The transfer is based on your consent and the contractual safeguards of these services. If you would rather avoid that, message us in a messaging app or call us.
Viber, Telegram and WhatsApp process chats under their own terms; their privacy policies are published on their websites.
How long we keep it
Requests and chats that did not lead to a contract are kept for no longer than 12 months after the last contact. Client data is kept while the contract is in force, and accounting documents for as long as the law requires. The hosting provider keeps server logs according to its own schedule, usually no longer than a few weeks. AI chat conversations are kept by ElevenLabs for up to 30 days; requests from the chat are kept like form requests.
Your rights
You can ask what data we hold about you, have it corrected, deleted or its processing restricted, receive a copy, object to processing and withdraw your consent at any time. Message or call us and we will reply within 30 days, usually sooner. If you believe we are breaching your rights, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection: poverenik.rs. If you are in the European Union, the EU General Data Protection Regulation (GDPR) also applies, and you can also contact the supervisory authority in your country.
Your clients' data
When we set up booking, a loyalty program or an AI assistant for you, your clients' data belongs to you and we process it only on your instructions. We set up the data processing consent form together with the system.