Privacy notice

Data we expect to process

When secure enquiry delivery is enabled, this may include your name, work email, company, website, telephone or WhatsApp number if you choose to provide it, project requirements, correspondence, meeting details, source page, referral and campaign parameters, consent records, and limited security logs.

Why and on what basis

• To receive, assess and answer a project enquiry, based on BITAN’s legitimate interest in responding or necessary steps requested before a contract, as applicable.
• To prepare proposals, deliver agreed work and manage a client relationship, based on contract or requested pre-contract steps.
• To prevent abuse, secure systems and preserve necessary audit evidence, based on legitimate interests and legal obligations.
• To send optional marketing or use non-essential analytics only after separate affirmative consent.

Who may receive data

Access will be limited to BITAN’s authorised operators and service providers needed for hosting, security, Google Workspace email and meetings, the isolated BITAN CRM when launched, and analytics only after consent. Provider agreements, subprocessors and transfer safeguards will be reviewed before those systems process live data.

International transfers

Some providers may process information outside Serbia or the EEA. Before live processing, BITAN will document the actual data flow and use an applicable adequacy decision, contractual safeguards or other lawful transfer mechanism under Serbian law and, where applicable, the GDPR.

Retention

The planned default is to remove or anonymise unqualified enquiries and resolved sales opportunities after 12 months from the last meaningful contact, unless a contract, legal obligation or legal claim requires longer retention. Security logs will use a shorter documented period. Marketing consent lasts until withdrawal, with only minimal suppression evidence retained where necessary.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. BITAN does not use solely automated decisions with legal or similarly significant effects.

You can contact hello@bitan.studio. You also have the right to complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection at poverenik.rs. If the GDPR applies, an appropriate EU supervisory authority may also be available.

Required information

Fields marked as required are needed to assess and answer an enquiry. Without them, BITAN may not be able to respond. Optional contact methods and marketing consent are not required to request a project.

Changes

This notice will be updated before live form, CRM or analytics processing begins and whenever purposes, providers or legal facts materially change. The effective date above will change with it.