Privacy policy.

The data controller is Atrigen, a digital agency based in Belgrade, Serbia ("Atrigen", "we", "us"). For any question about how we handle your data, email us at info@atrigen.rs or call +381 65 374 1300.

• Contact form: name, email address, phone number (if you enter it), the topic of your inquiry, your message and how you found us (if you choose an answer).
• Newsletter sign-up: email address, time of sign-up, IP address and browser details (user agent). We keep the IP and browser details to prove that the sign-up really came from you and to prevent abuse.
• AI assistant (chat): the messages you type in the chat window and any details you choose to share there, such as your name, email or phone.
• Website usage: pages you visit, time spent on the site, where the visit came from, device and browser type, approximate location at city level and how you move through a page (clicks, scrolling). This is collected by the analytics tools described in the cookies section, and only with your consent.
• Technical data: IP address and basic request details that our hosting provider logs for security and to keep the site running. We also use the IP address to limit how many messages can be sent from one address (spam protection).
• Clients: if we work together, we also process the data needed for the quote, contract and invoicing (name, company name, contact and payment details).

We do not collect special categories of personal data (health, religious beliefs and similar). Please do not send them through the form or the chat.

• Replying to your inquiry and preparing a quote: steps taken at your request before entering into a contract, and our legitimate interest in answering your message.
• How people find us: we use the answer to the form question only to see which channels (search, AI, social media, referrals) bring inquiries, based on our legitimate interest.
• Delivering services to clients: performance of a contract.
• Sending the newsletter: your consent, which you can withdraw at any time.
• Analytics and ad measurement: your consent, which you can withdraw at any time.
• Security and abuse prevention: our legitimate interest in protecting the site and its visitors.
• Legal obligations: when regulations require us to keep certain records, for example accounting and tax records.

We do not sell your data or share it with third parties for their marketing. We use trusted service providers who process data on our instructions:

• Cloudflare, Inc. for website hosting, the newsletter database and protection against attacks.
• Resend for delivering contact form messages to our inbox.
• Google for Google Tag Manager and Google Analytics 4.
• Meta Platforms for measuring visits and ads on Facebook and Instagram (Meta Pixel). Meta also uses this data for its own purposes, in line with its own privacy policy.
• AtriBot for the AI assistant on the site. Replies are generated with the help of third-party language models.

We disclose data to public authorities only when the law requires it.

Some of the providers listed above store data on servers in the European Union and the United States. These transfers are made with appropriate safeguards, such as standard contractual clauses or the provider's participation in the EU-U.S. Data Privacy Framework.

Cookies are small files a website stores in your browser. We use a few of them, together with the browser's local storage:

Analytics and advertising cookies are set only with your consent, when you click "I accept". We remember your choice for 12 months, and you can change it at any time through "Cookie settings" at the bottom of the page. When you withdraw consent, we delete the Google Analytics and Meta Pixel cookies. The site works without them.

• Contact form and chat inquiries: for as long as the conversation lasts, and no longer than 24 months after our last contact, unless you become a client.
• Newsletter: until you unsubscribe.
• Client data: for the duration of our work together and afterwards for as long as accounting and tax regulations require.
• IP addresses used for spam protection: deleted automatically after 1 hour (contact form) or 24 hours (newsletter).
• Analytics data: according to each tool's settings, no longer than 14 months.

Under the law you have the right to:

• access the data we hold about you and receive a copy of it;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data when there is no longer a reason to keep it;
• ask us to restrict processing;
• receive your data in a structured, machine-readable format (data portability);
• object to processing based on our legitimate interest, and to direct marketing at any time;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal;
• lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade, www.poverenik.rs.

Send your request to info@atrigen.rs. We will reply without undue delay and within 30 days at the latest.

The site runs over an encrypted HTTPS connection, access to data is limited to people who need it for their work, and forms are protected against spam and automated abuse. No transfer over the internet is completely secure, but we take reasonable technical and organisational measures to protect your data.

The site and our services are intended for businesses and adults. We do not knowingly collect data from persons under 15. If you believe a minor has sent us their data, let us know and we will delete it.

We may update this policy when our tools or regulations change. The current version is always on this page, and the date at the top shows when it was last updated.

For any question about this policy or your data, write to info@atrigen.rs or call +381 65 374 1300.