Red Black Tree Privacy and Cookies Policy
Last updated: 21.09.2026. Version: 2026-09-21.
We are Red Black Tree d.o.o. Čačak, reg.no. 20857706, a software development company registered at and operating under the laws and legislation of the Republic of Serbia.
This Privacy Policy explains how our organization uses the personal data we collect when you actively communicate with us or use specific interactive features of our website (Site), such as application forms or website forms.
1. Scope and Applicable Law
As a legal entity established in the Republic of Serbia, Red Black Tree d.o.o. Čačak complies with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, No. 87/2018). Where our business activities interact with data subjects located in the European Union / European Economic Area or the United Kingdom, we also ensure compliance with the EU GDPR and UK GDPR regarding those active data processing activities.
Crucially, our core business is software development and we do not engage in mass data collection, behavioral tracking, or profiling of website visitors. Casual browsing of our Site involves no tracking of personal data.
2. What data do we collect?
Our Company collects personal data only when you actively provide it:
- Personal Identification Information: Provided when you communicate with us via email or social networks (such as job candidates, internship candidates, or potential clients), including name, email address, phone number, company details, and signature data.
- Website Forms Data: Through interactive forms on our website, visitors can request to download the operational model in PDF format or schedule a consultation. When filling out these forms, we process necessary data such as contact details, IP address, browser data, and request identifier, based on user consent given upon submitting each individual form. These data are stored only as long as necessary to fulfill the purpose of the request.
- Network Security Logs: Full IP addresses and request timestamps recorded by our web delivery network solely for infrastructure protection and security monitoring (retained for 30 days).
3. How do we collect your data?
We collect data directly from you when you:
- Communicate with us via email as a visitor, client, or business partner;
- Register via our website for job or internship applications;
- Submit contact details and requests through website forms on our Site or social media;
- Confirm your email address via our double opt-in verification process.
4. How will we use your data and Lawful Bases for Processing?
We use your actively provided data for the following purposes:
- To establish and maintain business communication with job applicants, internship applicants, clients, or business partners (Legal Basis: Legitimate interest / Performance of a contract);
- To process requests submitted via website forms, such as delivering the operational model in PDF format or scheduling a consultation (Legal Basis: Taking steps at the request of the data subject prior to entering into a contract / Consent);
- To contact you regarding our commercial services, products, sales proposals, and professional insights, provided you have given consent (Legal Basis: Explicit consent).
5. How and where do we store your data?
We store data using secure cloud infrastructure:
- Website delivery and security logs: Hosted on Amazon Web Services (AWS) in Frankfurt, Germany;
- Analytics and form processing: Hosted on AWS in Frankfurt, Germany;
- Customer relationship records: Reside on HubSpot infrastructure within the EEA;
- Corporate email communication: Managed through Google Workspace services.
Cross-border transfers outside the EEA or Serbia are conducted under valid legal mechanisms, including Standard Contractual Clauses (SCCs) and adequacy decisions. We apply robust technical and organizational security measures in line with ISO 27001 standards.
6. Data retention
- Unconfirmed Form Submissions: Temporary records expire 7 days after submission if unconfirmed;
- Sales, Marketing, and Form Interaction Data: Retained for up to 3 years from the last active interaction or until consent withdrawal;
- Consent Audit Records: Retained for 3 years following withdrawal to demonstrate compliance;
- Website Forms Consent Logs: Technical records including IP addresses, browser data, and request identifiers collected alongside consent for each website form are stored for a period of 12 months, after which they are automatically deleted or anonymized;
- Network Security Logs: Automatically deleted after 30 days;
- Cookieless Analytics Logs: Aggregated statistical logs are purged after 6 months.
7. Marketing communications
If you have provided explicit consent, we may send you information regarding our services and industry insights. You can opt out at any time by clicking the Unsubscribe link in any email or by contacting privacy@rbt.rs.
8. What are your data protection rights?
You are entitled to the following rights regarding your personal data:
- The right to withdraw consent at any time;
- The right to access copies of your personal data;
- The right to rectification of inaccurate data;
- The right to erasure under certain conditions;
- The right to restrict processing under certain conditions;
- The right to object to processing;
- The right to data portability.
To exercise these rights, contact us at privacy@rbt.rs or support@rbt.rs. We respond within 30 days.
10. Form Notice Text
By submitting this form, you acknowledge that you are familiar with the processing of your personal data in accordance with the Privacy Policy.
11. Changes to this privacy policy
We keep this privacy policy under regular review and place any updates on this web page. Last updated on 21.09.2026.
12. How to contact us
Email us at: privacy@rbt.rs or support@rbt.rs.
Write to us at: Red Black Tree d.o.o. Čačak, Zlatiborska 18, 32000 Čačak, Republic of Serbia.