Privacy Policy
This policy explains what personal data we collect, why we collect it, and what your rights are. We keep it straightforward.
Effective date: 30 June 2026
1. Who We Are
ASSERTQA doo Beograd (Reg. No. 21385824, PIB 110780103, 12a Vidikovački Venac, 11090 Belgrade – Rakovica, Serbia) is the data controller for personal data processed through our website and services. Questions about this policy can be directed to office@assertqa.com.
2. What Data We Collect and Why
Contact and inquiry data
When you submit our contact form, we collect your name, email address, company name, and the message content. We use this to respond to your inquiry and, if a project follows, to deliver our services.
Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business inquiries (Art. 6(1)(f) GDPR).
Client and project data
During an engagement we may process contact details of your team members and any personal data contained in systems, documents, or test environments you provide. We process this data solely to deliver the contracted services.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Website analytics
We use Google Analytics (via Google Tag Manager) to understand how visitors use our website. This involves collecting data such as pages visited, time on site, and approximate location at the city level. IP addresses are anonymized. No data is used for advertising targeting.
Legal basis: our legitimate interest in understanding website performance (Art. 6(1)(f) GDPR). You may opt out via your browser's cookie settings or the Google Analytics Opt-out Browser Add-on.
3. Cookies
We use the following types of cookies:
- Strictly necessary — required for the website to function (e.g. your cookie-consent choice). No personal data is collected.
- Analytics — Google Analytics cookies that help us measure traffic and usage patterns. Data is anonymized and aggregated.
You can control or delete cookies through your browser settings at any time.
4. Who We Share Data With
We do not sell or rent personal data. We share data only where necessary:
- Service providers — email delivery (Resend), website hosting (Vercel), and analytics (Google Analytics). All are engaged under data processing agreements.
- Legal obligations — where required by Serbian law or a valid order from a competent authority.
5. International Transfers
Some of our service providers (Vercel, Google) process data outside Serbia and the EU/EEA. Where this occurs, transfers are governed by Standard Contractual Clauses approved by the European Commission, which provide an equivalent level of data protection.
6. How Long We Keep Your Data
- Inquiry data — retained for 2 years from last contact, or until you ask us to delete it
- Client and contract data — retained for 7 years from the end of the engagement to meet legal and accounting obligations
- Analytics data — retained for 26 months (Google Analytics default)
7. Your Rights
Under GDPR and Serbian data protection law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (where no legal obligation requires us to keep it)
- Object to processing based on legitimate interest
- Request restriction of processing
- Receive your data in a portable, machine-readable format
- Lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection
To exercise any of these rights, email us at office@assertqa.com. We will respond within 30 days.
8. Security
We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include access controls, encryption in transit (HTTPS), and confidentiality obligations for all team members. In the event of a personal data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law.
9. Changes to This Policy
We may update this policy when our practices change or when required by law. Material changes will be published on this page with a revised effective date. We encourage you to review this page periodically. The current version is always available at assertqa.com/privacy.
Contact
For privacy-related questions or to exercise your rights, contact us at office@assertqa.com or +381 62 926 5082.