1.Who processes your data
The controller of your personal data is:
- Yafi Filtertech doo, Peščarska 10, 11070 Novi Beograd, Serbia
- Company registration number: 21030317 · Tax ID (PIB): 108591119
- Email: office@yafifilteri.co.rs · Phone: +381 11 2144 940
For any question about your data, or to exercise the rights described here, write to us at office@yafifilteri.co.rs.
2.What data we collect
- Enquiries sent through the form on this site: your name and email address (required), plus your company name, phone number, filter type and message if you enter them. We also record which language you used the site in.
- When you email or call us directly: whatever you choose to tell us in the message or call.
- Technical data when you visit: your IP address, browser and device type, the time of the visit and the address of the page you opened. The server hosting the site records these automatically.
- Bot check: on pages with the form, Cloudflare Turnstile processes your IP address and technical details of your browser and connection to confirm that the form is being sent by a person, not an automated program.
We use no visitor analytics or advertising tools, do not track you across other sites, build no profiles and make no automated decisions about you.
3.Why we use your data and on what basis
- To answer your enquiry and prepare a quote. The basis is taking steps at your request before entering into a contract and, when you write on behalf of a company, our legitimate interest in answering a business enquiry (Article 12(1), points 2 and 6 of the Act).
- To protect the site and the form from spam and abuse, and to keep the site running. The basis is our legitimate interest (Article 12(1), point 6).
- To meet legal obligations, such as accounting and tax rules, if an enquiry turns into business (Article 12(1), point 3).
We never use enquiry details to send advertising or newsletters.
4.Do you have to give us your data
There is no legal or contractual obligation to send us an enquiry. We need your name and email address to reply, so the form cannot be sent without them. All other fields are optional.
5.Who else has access to your data
We do not sell or rent your data or pass it on to others for their marketing. We do not forward enquiries to manufacturers or other suppliers.
Your data is handled only by our staff who answer enquiries and by the service providers that run the site and our communication, strictly on our instructions:
- Vercel Inc. (USA): website hosting and server logs.
- Cloudflare, Inc. (USA): the bot check (Turnstile). Cloudflare also uses part of the technical data to improve its bot protection, as an independent controller; see Cloudflare's Turnstile privacy policy.
- Resend (USA): delivers enquiries from the site to our email address.
- The provider that hosts our email.
The map showing our office is loaded from the servers of the OpenStreetMap Foundation (United Kingdom). When the map appears, your browser sends the foundation your IP address and technical details, under its privacy policy.
We may disclose data to public authorities when the law requires us to.
6.Transfers outside Serbia
Vercel, Cloudflare and Resend are US companies, so your data may be processed outside Serbia. Data processing agreements require these providers to use the data only to provide their service to us and to protect it with appropriate technical and organisational measures, including standard contractual clauses for data transfers.
7.How long we keep your data
- Enquiries that do not lead to business are kept for at most two years after our last contact, then deleted.
- If an enquiry turns into business, we keep the data for as long as we work together and for as long as the law requires, for example under accounting rules.
- Server logs and bot-check data are kept briefly by the service providers, under their own rules.
9.Your rights
With regard to the data we hold about you, you have the right to:
- access your data and get a copy (Article 26);
- have inaccurate or incomplete data corrected or completed (Article 29);
- have your data erased (Article 30);
- restrict processing (Article 31);
- data portability (Article 36);
- object to processing based on legitimate interest (Article 37).
Send your request to office@yafifilteri.co.rs. We will reply without undue delay and within 30 days at the latest. If needed, we will ask for additional information to confirm your identity.
If you believe your data is processed in breach of the Act, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Beograd, www.poverenik.rs (Article 82), and the right to judicial protection (Article 84).
10.Data security
The site uses an encrypted connection (HTTPS). Only staff who need enquiries for their work can access them, and our service providers are contractually bound to protect the data. No system is completely secure, but we take reasonable measures to protect data against unauthorised access, loss and misuse.
11.Changes to this policy
We update this policy when the way we process data or the law changes. The current version is always on this page, with the date of the last change at the top.