Privacy Policy

Effective Date: June 10, 2025

1. General Provisions 1.1. This Privacy Policy (“Policy”) governs the collection, use, processing, and protection of personal data of individuals (“Users”) who access and use the website https://vekas-automation.com/ (“Site”) operated by VEKAS d.o.o., a company established under the laws of the Republic of Serbia.

1.2. This Policy is drafted in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette No. 97/2008, as amended) (“Serbian PDPA”) and Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).

1.3. By accessing or using the Site, Users acknowledge they have read, understood, and consent to the terms of this Policy. If a User does not agree with this Policy, they must cease use of the Site immediately.

2. Definitions 2.1. “Personal Data” means any information relating to an identified or identifiable natural person. 2.2. “Processing” means any operation performed on Personal Data, including collection, storage, use, alteration, disclosure, or destruction. 2.3. “Controller” means the entity that determines the purposes and means of Processing Personal Data. 2.4. “Processor” means the entity that processes Personal Data on behalf of the Controller.

3. Data Controller and Data Protection Officer 3.1. Controller:

• Company name: VEKAS d.o.o. Beograd
• Registration number (Matični broj): 21847615
• VAT number (PIB): 113335152
• Registered address: Lomina 20, 11000 Belgrade – Savski venac, Serbia
• Email: info@vekas-automation.com
• Phone: +381 65 682 28 97

3.2. Data Protection Officer (DPO):

• Name: Dmitry Lityagin
• Contact: info@vekas-automation.com

4. Categories of Personal Data Collected 4.1. Data provided directly by Users:

• Identification and contact data: name, email address, phone number.
• Inquiry details submitted via contact forms.

4.2. Data collected automatically:

• Technical data: IP address, browser type, operating system, device identifiers.
• Usage data: pages visited, clickstream data, referral URLs, timestamps.
• Cookies and similar tracking technologies as described in Section 9.

5. Purposes and Legal Bases for Processing 5.1. We process Personal Data for the following purposes:

• To provide and maintain Site functionality and respond to User inquiries.
• To send administrative communications and marketing materials (where consent is given).
• To analyze Site usage and improve content, design, and services.
• To comply with legal obligations (e.g., accounting, tax reporting).

5.2. Legal bases under GDPR (Article 6):

• Consent (Art. 6(1)(a)): for subscription to newsletters and promotional emails.
• Performance of a contract or pre-contractual measures (Art. 6(1)(b)): for inquiries and service requests.
• Legal obligation (Art. 6(1)(c)): for record-keeping and statutory reporting.
• Legitimate interests (Art. 6(1)(f)): for preventing fraud, ensuring network security, and improving Site performance.

6. Data Recipients and International Transfers 6.1. We may share Personal Data with:

• Service providers (hosting, email delivery, analytics) under appropriate confidentiality agreements.
• Legal and regulatory authorities when required by applicable law.

6.2. International transfers:

• Personal Data may be transferred outside the European Economic Area (EEA) only with guaranteed safeguards, such as Standard Contractual Clauses adopted by the European Commission.

7. Data Retention 7.1. We retain Personal Data only as long as necessary to fulfill the purposes outlined in Section 5, or as required by law.

7.2. Retention periods:

• Inquiry and correspondence records: 3 years from last contact.
• Cookie consent records: 2 years or until withdrawal of consent.
• Accounting and tax-related records: 10 years in compliance with Serbian law.

8. User Rights Under GDPR and Serbian PDPA, Users have the right to:

• Access their Personal Data (Art. 15 GDPR).
• Rectify inaccurate or incomplete data (Art. 16 GDPR).
• Erase data (“right to be forgotten”) (Art. 17 GDPR).
• Restrict Processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Object to Processing (Art. 21 GDPR).
• Withdraw consent at any time without affecting the lawfulness of prior Processing (Art. 7(3) GDPR).

To exercise these rights, Users may submit a request to info@vekas-automation.com. Requests will be acknowledged within one month.

9. Cookies and Tracking Technologies We use cookies and similar technologies to enhance Site functionality, analyze usage, and deliver personalized content. Categories include:

• Necessary Cookies: required for Site operation.
• Functional Cookies: remember user preferences.
• Performance Cookies: collect analytics (e.g., Google Analytics).
• Advertising Cookies: track usage for marketing purposes. Users can manage or disable cookies via the Cookie Consent Banner on first visit or through their browser settings.

10. Security Measures We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption (SSL/TLS) for data in transit.
• Access controls and authentication procedures.
• Regular security audits and vulnerability assessments.
• Data backup and disaster recovery plans.

11. Third-Party Links Our Site may contain links to external websites not controlled by VEKAS d.o.o. We are not responsible for their content or privacy practices. Users should review their respective policies.

12. Policy Updates We may update this Policy. The current version, with its Effective Date, will be posted on the Site. Significant changes will be communicated via email or prominent notice on the Site.

13. Contact Information If you have questions, complaints, or requests regarding this Policy or our data practices, contact us at:

Controller: VEKAS d.o.o. Matični broj: 21847615 | PIB: 113335152 Address: Lomina 20, 11000 Belgrade – Savski venac, Serbia Email: info@vekas-automation.com Phone: +381 65 682 28 97

Data Protection Officer: Dmitry Lityagin | info@vekas-automation.com

Users have the right to lodge a complaint with the Personal Data Protection Authority of the Republic of Serbia: Address: Bulevar despota Stefana 12, 11000 Belgrade, Serbia Website: https://www.pdp.gov.rs

This Policy applies to all Users of https://vekas-automation.com/ and is effective as of the Effective Date.