Privacy Policy

This Privacy Policy explains what personal data Digital Force collects when you visit digitalforce-agency.com (the "Website"), contact us or work with us, why we collect it, and what rights you have. We process personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia ("Official Gazette of RS", No. 87/2018) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Data controller

2. What data we collect

When you contact us

If you use our contact form or email us, we receive the information you choose to send, such as your name, email address, company name, website address and the content of your message.

When we work together

To prepare proposals, deliver services and issue invoices, we process business contact details and billing information of you or your company's representatives, together with our correspondence.

When you use the speed test

The website address you enter in our free speed test is sent to Google PageSpeed Insights, which loads that page to measure it. We do not ask for or store any personal data for the test; results are cached for up to one hour so that repeated tests of the same address are fast.

When you visit the Website

Our hosting and security provider automatically processes technical data needed to deliver the Website and protect it from abuse, such as IP address, browser type, requested pages and time of access. We do not use advertising or cross-site tracking cookies.

3. Why we use it, and on what legal basis

• Answering enquiries and preparing proposals: taking steps at your request before entering into a contract, or our legitimate interest in responding to business enquiries.
• Delivering services and managing the client relationship: performance of a contract.
• Invoicing and bookkeeping: compliance with our legal obligations under Serbian accounting and tax regulations.
• Website security and operation: our legitimate interest in keeping the Website available and secure.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

4. Client website data

When we work on your website, we may have access to personal data of your own users, for example in your content management system or analytics. We access such data only as far as the work requires, act on your instructions, and do not use it for any purpose of our own. Where required, we will sign a data processing agreement with you.

5. Who we share data with

We share personal data only with service providers that help us run our business, and only as far as needed:

• website hosting, content delivery and security (Cloudflare);
• Google, for running speed tests of addresses you submit;
• email providers, including the service that delivers contact form messages to our inbox;
• our accountant, for invoicing and bookkeeping;
• public authorities, where we are legally required to do so.

Some of these providers process data outside Serbia, including in the European Union and the United States. Where this happens, we rely on transfers permitted by law, such as countries with an adequate level of protection or standard contractual clauses.

6. How long we keep it

• Enquiries that do not lead to a project: up to 12 months after our last correspondence.
• Client and project correspondence: for the duration of the engagement and up to 3 years after it ends.
• Invoices and accounting records: for the period required by Serbian accounting and tax regulations.
• Technical access logs: for the short period set by our hosting and security provider.

7. Your rights

Subject to the conditions set by law, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased, or its processing restricted;
• object to processing based on our legitimate interests;
• receive your data in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email us at digitalforce99@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs) or, if you are in the EU, with the data protection authority in your country.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls and secure handling of any credentials you share with us.

9. Children

The Website and our services are intended for businesses and adults. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page with its date.