Privacy Policy

Last updated:

Introduction

This privacy policy explains how Urbani Agent d.o.o. ("Urbani Agent", "we") collects and processes your personal data when you use our website urbaniagent.rs and when you contact us through the contact form, the free-valuation request, or a job application.

We process personal data in accordance with the Serbian Law on Personal Data Protection ("Official Gazette of RS", No. 87/2018 — ZZPL) and, to the extent it applies to visitors from the European Union, in accordance with the General Data Protection Regulation (GDPR).

Last updated: [DATUM].

Data controller

The controller of your personal data is:

  • Legal name: Urbani Agent d.o.o.
  • Registered address: Knez Mihailova 22, 11000 Belgrade, Serbia
  • Company registration number: [MATIČNI BROJ]
  • Tax ID (PIB): [PIB]
  • Real-estate brokers' registry number: [BROJ U REGISTRU POSREDNIKA]
  • Email: info@urbaniagent.rs
  • Phone: +381 11 123 4567

Given the scope and nature of our processing, we are not legally required to appoint a data protection officer. For any questions about data protection or to exercise your rights, contact us at info@urbaniagent.rs.

What data we collect

Data you provide to us. When you fill in a form on the site, we collect the data you enter:

  • Contact form and general inquiries: full name, email, phone number, and the content of your message.
  • Free-valuation request: your contact details and information about the property you want valued (location, type, area, and other details you provide).
  • Job application: full name, contact details, and any information you include in your application, including a CV if you attach one.

Data collected automatically. When you visit the site, for technical and security reasons we record:

  • your IP address, device and browser type (User-Agent), and basic visit data;
  • server access logs;
  • security signals from form-abuse protection (Cloudflare Turnstile);
  • strictly necessary and functional cookies and similar technology.

For more on cookies, see our Cookie Policy.

Purposes and legal bases

We process data for clearly defined purposes, each with a corresponding legal basis under Article 12 of the ZZPL:

  • Handling property inquiries and valuation requests — to respond to your inquiry and take steps at your request before any contract is concluded. Legal basis: performance of a contract, or steps taken at your request prior to entering into a contract.
  • Responding to contact messages — to communicate with you and provide the information you request. Legal basis: steps taken at your request prior to a contract, or our legitimate interest in responding to you.
  • Job applications — to run the candidate selection process. Legal basis: steps taken at your request prior to employment; for retaining your application for future openings — your consent.
  • Spam protection and site security — to prevent form abuse and protect the site (Cloudflare Turnstile). Legal basis: our legitimate interest in security and preventing abuse.
  • Compliance with legal obligations — keeping accounting records and the records required of real-estate brokers. Legal basis: compliance with a legal obligation of the controller.
  • Analytics and marketing (future) — audience measurement and marketing activities are not active. If we introduce them, processing will be based on your consent, which you can withdraw at any time. Legal basis: consent.

Recipients and processors

We do not sell your data. We share it only with trusted service providers who perform technical tasks on our behalf, strictly on our instructions and under a data processing agreement:

  • Vercel — hosting and delivery of the site, server-side form handling, and technical logs.
  • Resend — email delivery (sending the messages you submit through the forms).
  • Sanity — the content management system (CMS) for the site.
  • Mux — hosting and playback of video content.
  • Cloudflare (Turnstile) — protecting forms from automated abuse and spam.

Our employees who handle your inquiry may access the data, as may external partners (accounting, legal, and IT support), to the extent necessary to do their work. We may also disclose data to competent authorities where we are legally required to do so.

International transfers

Some of our processors (Vercel, Resend, Sanity, Mux, Cloudflare) are companies based in the United States or process data on infrastructure outside the Republic of Serbia. The United States is not on the list of countries deemed to provide an adequate level of personal data protection.

Where a transfer to such a country is necessary, we put appropriate safeguards in place in accordance with the ZZPL — primarily by concluding standard contractual clauses with the processor and, where possible, by choosing data processing in European Union regions. On request, we can provide more information about the safeguards applied.

Retention

We keep data for as long as needed for the purpose it was collected for, or as required by law:

  • inquiry and valuation-request data — until we resolve your request, and thereafter within the periods for exercising or defending legal claims;
  • contract- and brokerage-related data — for the periods prescribed by law for keeping accounting and business records;
  • job applications — for the duration of the selection process, after which they are deleted, unless you have consented to us keeping them for future openings;
  • technical logs — for the shorter technical period needed for site security and operation.

Specific retention periods: [ROKOVI ČUVANJA]. After the period expires, we permanently delete or anonymize the data.

Your rights

Under the ZZPL you have the following rights regarding your personal data:

  • right of access — to know whether we process your data and to receive a copy of it;
  • right to rectification — to correct inaccurate data or complete incomplete data;
  • right to erasure ("right to be forgotten") — to request deletion of data under the conditions provided by law;
  • right to restriction of processing — to restrict processing in certain situations;
  • right to data portability — to receive your data in a structured, commonly used format and to transfer it to another controller;
  • right to object — to object to processing based on legitimate interest;
  • right to withdraw consent — where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

You exercise these rights by sending a request to info@urbaniagent.rs. We respond without undue delay, and at the latest within 30 days; in justified cases this period may be extended in accordance with the law, and we will inform you if so.

Right to complain to the Commissioner

If you believe we process your data contrary to the regulations, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection:

  • Commissioner for Information of Public Importance and Personal Data Protection
  • Address: Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia
  • Website: poverenik.rs

Before lodging a complaint, you are welcome to contact us first so we can try to resolve the matter together.

Data security

We apply appropriate technical and organizational measures to protect data from unauthorized access, loss, alteration, or misuse. These include an encrypted connection (HTTPS/TLS), access control, form-abuse protection, and working only with processors contractually bound to protect data. No system can guarantee absolute security, but we continuously work to maintain an appropriate level of protection.

Cookies

The site uses cookies and similar technology. A detailed explanation of which cookies we use, for what purposes, and how to manage your choice is available in our Cookie Policy.

Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services or the law. The current version is always published on this page, with the date of the last update. We will notify you of material changes in an appropriate manner.

Contact

For any questions about this policy and the protection of your data, contact us:

  • Email: info@urbaniagent.rs
  • Phone: +381 11 123 4567
  • Address: Knez Mihailova 22, 11000 Belgrade, Serbia