Privacy Policy

This website, room211.studio (the "site"), is operated by the business named below.

Business name

Marko Milev PR, Studio za dizajn ROOM 211, Vranje (trading as "ROOM 211")

Legal form

Sole proprietor, registered in the Republic of Serbia

Registered address

Orce Nikolova 8, 17500 Vranje, Serbia

Registration number

68082676

Tax identification number

115083577

Registered activity

7410, Specialised design activities

E-mail address

office@room211.studio

Phone number

+381 62 9637 517

In this policy, "we", "us" and "our" mean ROOM 211. For the purposes of the Law on Personal Data Protection of the Republic of Serbia ("ZZPL") and, to the extent it applies to visitors from the European Economic Area, Regulation (EU) 2016/679 (the "GDPR"), we are the controller of the personal data described below.

This policy describes the personal data we collect through the site, the purposes and legal bases for processing it, how long we retain it, with whom we share it, and the rights you have in relation to it.

It applies to the site only. Our profiles on LinkedIn, Instagram and TikTok are operated under the privacy policies of those platforms, and any website we link to is governed by its own policy.

• We collect personal data only when you send us a message through the contact form and, if you consent to it, through the analytics tools described in section 4.3.
• We do not sell or rent personal data, and we do not share it with third parties for their own purposes.
• We do not use advertising trackers and we do not make automated decisions about you.
• You can withdraw consent to analytics at any time through Cookie Settings in the footer of the site.

4.1 Contact form

When you send a message through the contact form, we receive the information you enter, namely your name, your e-mail address, your phone number (optional) and the content of your message. We also receive technical data that is recorded automatically, namely the IP address the message was sent from, your browser type, the page it was sent from and the time of submission.

Purpose

To read and respond to your enquiry, and to detect and prevent automated abuse of the form.

Legal basis

Steps taken at your request prior to entering into a contract (ZZPL Article 12(1)(2) and GDPR Article 6(1)(b)). For the technical data, our legitimate interest in keeping the form operational and free of abuse (ZZPL Article 12(1)(6) and GDPR Article 6(1)(f)).

Recipients

The message is delivered by e-mail to office@room211.studio and a copy is stored on our web server in a location that is not accessible from the internet. The e-mail may be read by members of the ROOM 211 team on their own devices.

Retention

12 months from our last correspondence with you, after which the message and its stored copy are deleted. Where an enquiry results in an engagement, the related correspondence becomes part of the records of that engagement and is retained for the period required by the applicable accounting and commercial legislation.

Providing this data is voluntary and is not required by law or by any contract. Without a name, an e-mail address and a message we are not able to answer an enquiry. The phone number is optional and only used to call you back if you prefer that to e-mail.

To limit automated submissions, a hashed (irreversible) form of the sender's IP address is retained for 10 minutes so that no more than five messages can be sent from a single address within that period. It is deleted automatically.

4.2 Server logs

As with every web server, ours records each request it receives. The record holds the requesting IP address, the date and time, the page or file requested, the status and size of the response, the browser and operating system used and the referring page, if any.

Purpose

Operation of the site, diagnosis of faults, and the detection and prevention of attacks and misuse.

Legal basis

Our legitimate interest in the security and proper functioning of the site (ZZPL Article 12(1)(6) and GDPR Article 6(1)(f)).

Recipients

Our hosting provider (see section 5).

Retention

No longer than 60 days. The logs are archived on our hosting account and the archive is deleted automatically at the end of the following month. Our hosting provider may hold server-level logs and backup copies for its own security and continuity purposes, for the periods set out in its terms of service.

4.3 Analytics and site usage tools (only with your consent)

With your consent, given through the cookie banner, we use two tools to understand how the site is used.

Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It records the pages you visit, how you arrived at the site, the approximate country or region you are visiting from, the type of device and browser you use, and how you interact with the pages. Google uses your IP address to derive an approximate location and does not store it. Google Analytics is configured without advertising features and without data sharing with other Google services.

Microsoft Clarity, provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). It records how visitors move through pages, that is scrolling, clicks and mouse movement, and presents this as aggregated heatmaps and session recordings. Text you type into form fields is masked and is not recorded.

Both tools set cookies in your browser (listed in the Cookie Policy) and transmit the data described above to the respective provider.

Purpose

To measure how the site is used and to improve its content, structure and usability.

Legal basis

Your consent (ZZPL Article 12(1)(1) and GDPR Article 6(1)(a)). Neither tool is loaded before you give consent. Declining has no effect on your use of the site.

Recipients

Google and Microsoft, acting as processors on our behalf under their respective data processing terms.

Retention

Google Analytics retains data associated with individual visitors for 14 months. Microsoft Clarity retains session recordings for 30 days and aggregated data for 13 months.

You may withdraw your consent at any time through Cookie Settings in the footer of the site. Withdrawal takes effect from that moment and does not affect the lawfulness of processing carried out before it.

4.4 Direct correspondence

If you contact us by e-mail or phone rather than through the form, we process the information you provide for the same purposes, on the same legal bases and for the same periods as set out in section 4.1.

4.5 What we do not do

We do not use advertising networks, remarketing, social media pixels or any form of cross-site tracking. We do not operate a newsletter. We do not combine data from the site with data from other sources to build profiles of visitors, and we do not make decisions producing legal or similarly significant effects on you by automated means. Fonts, scripts and media used on the site are served from our own servers, not from third-party content delivery networks.

Hosting provider. The site, the stored copies of contact form messages and the office@room211.studio mailbox are hosted by United Internet d.o.o. Beograd (unlimited.rs), Bulevar Milutina Milankovića 1c, 11070 Novi Beograd, Serbia, registration number 21133710, on servers located in the Republic of Serbia. The provider acts as our processor and processes personal data only on our documented instructions, under a contract that imposes obligations of confidentiality and security.

Analytics providers. Google Ireland Limited and Microsoft Ireland Operations Limited, as described in section 4.3, act as our processors for the data collected by their respective tools.

Public authorities. We may disclose personal data where required by law, or in response to a lawful request from a court or a competent public authority.

We do not otherwise disclose personal data to third parties.

Links to other websites. The site contains links to Google Maps, LinkedIn, Instagram and TikTok. No content from those services is loaded until you follow a link. Once you do, you are subject to the privacy policy of the service concerned.

Data processed by our hosting provider, that is the site, the stored copies of contact form messages and the office@room211.studio mailbox, is stored on servers located in the Republic of Serbia and is not transferred outside it.

Data collected by Google Analytics 4 and Microsoft Clarity may be transferred to and processed in the United States of America. Both Google LLC and Microsoft Corporation are certified under the EU-U.S. Data Privacy Framework, and both providers additionally rely on the standard contractual clauses adopted by the European Commission. Under ZZPL, transfers to countries that ensure an adequate level of protection, or that are made subject to appropriate safeguards such as standard contractual clauses, are permitted.

Visitors from the European Economic Area should note that the Republic of Serbia is not a member state of the European Union. Its Law on Personal Data Protection is closely modelled on the GDPR, and we apply the standards described in this policy to all visitors regardless of location.

The site is served exclusively over an encrypted connection (HTTPS). Stored copies of contact form messages are kept outside the publicly accessible web directory and cannot be retrieved by URL. Access to the mailbox and to the server is restricted to members of the ROOM 211 team and to our hosting provider, each using individual credentials. We collect only the data described in this policy and delete it when the retention period expires.

Subject to the conditions set out in ZZPL and, where applicable, the GDPR, you have the following rights.

• To access the personal data we hold about you and obtain a copy of it.
• To have inaccurate or incomplete data rectified.
• To have your personal data erased, where there is no longer a lawful reason for us to retain it.
• To obtain restriction of processing in the circumstances provided by law.
• To object to processing based on our legitimate interests.
• To receive the data you have provided to us in a structured, commonly used and machine-readable format (data portability).
• To withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• To lodge a complaint with a supervisory authority.

To exercise any of these rights, write to office@room211.studio. We will respond without undue delay and in any event within 30 days of receipt of your request. Where a request is complex, we may extend this period as permitted by law, and we will inform you of the extension and its reasons within the initial 30 days. We may ask you to verify your identity before acting on a request, so that personal data is not disclosed to or altered at the request of someone other than the person concerned.

The supervisory authority in the Republic of Serbia is the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia, www.poverenik.rs. If you are located in the European Economic Area, you may also lodge a complaint with the supervisory authority of the member state of your habitual residence, place of work or place of the alleged infringement.

The site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under the age of 15. If you believe that a child has provided us with personal data, please contact us and we will delete it.

If you believe that the site displays a photograph of you, or information relating to you, without an appropriate basis, please write to office@room211.studio describing the content and where it appears. We will review the request promptly and, where appropriate, remove the content.

We may update this policy from time to time, in particular where the site changes in a way that affects how personal data is processed. The version published on the site is the current version, and the dates at the top indicate when it took effect and when it was last revised. Where a change materially affects you, we will draw attention to it on the site.

Controller

Marko Milev PR, Studio za dizajn ROOM 211, Vranje

Address

Orce Nikolova 8, 17500 Vranje, Serbia

E-mail address

office@room211.studio

Phone number

+381 62 9637 517