Data Controller

The controller of your personal data is 365 Lab (365 Lab DOO), Šabačka 12, Beograd, Serbia. For all questions regarding data protection and the exercise of your rights, please write to us at kontakt@365lab.tech.

This Policy describes what personal data we collect, why, on what legal basis, who we share it with, and what your rights are. We apply the principles of the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of Serbia.

What Data We Collect

Data you provide to us yourself (through the contact form): first and last name, e-mail address, company name / type of inquiry, and message content.

Data collected automatically when you use the website: IP address, browser type and language, device type, pages you visit, time of visit, and the website you came from. This data is collected by analytics tools and our hosting provider, to the extent described below.

Purposes and Legal Basis for Processing

Responding to inquiries and communication (form data) — legal basis: taking steps at your request and our legitimate interest in responding to you.
Analytics and marketing (cookies, Google Analytics, Meta Pixel) — legal basis: your consent, which you provide via the cookie banner and can withdraw at any time.
Security and prevention of misuse (e.g., protecting the form from bots) — legal basis: legitimate interest.

Cookies and Tracking

Cookies are small files stored in your browser. We use three types:

Necessary — enable basic website functionality and remember your cookie preferences. They are set without consent.
Analytical (Google Analytics 4) — measure traffic and how the website is used.
Marketing (Meta Pixel) — measure ad effectiveness and enable remarketing.

Analytical and marketing cookies are set only after you accept them via the cookie banner (we use Google Consent Mode v2 and Meta consent — they are disabled until you consent). You can change your choice at any time via the “Cookie Settings” link in the website footer, or by deleting cookies in your browser settings.

Specific cookies and similar technologies we use:

cookie-consent (necessary, ours) — remembers your cookie preferences; lasts up to 12 months.
_ga, ga* (analytical, Google Analytics) — distinguish visitors and sessions; last up to 2 years.
_fbp (marketing, Meta Pixel) — measures ad effectiveness and enables remarketing; lasts up to 3 months.

To provide our services, we use reliable data processors:

Google (Google Analytics, Firebase Hosting and Firestore) — analytics, website hosting, and storage of messages sent via the form.
Meta Platforms (Meta Pixel) — marketing analytics.
MXroute — e-mail service for our business communication.
Cloudflare — DNS and form protection against bots (Turnstile).

We do not sell, rent, or trade your personal data. Data is shared exclusively with the listed processors, to the extent necessary to provide their services.

Data Transfer Outside Serbia and the EU

Certain processors (Google, Meta, Cloudflare) may process data on servers outside Serbia and the EU, including the United States of America. In such cases, the transfer is carried out with appropriate safeguards (standard contractual clauses and other prescribed guarantees).

How Long We Keep Data

Contact form messages — for the duration of the communication and legitimate need, and at the latest until you request deletion.
Analytical data — in accordance with the retention settings of the service provider (e.g., Google Analytics).
Cookie consent records — up to 12 months, after which we request consent again.

Your Rights

In accordance with the GDPR and domestic regulations, you have the right to: access your data, rectification, erasure, restriction of processing, data portability, objection to processing, as well as the withdrawal of consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).

You can exercise your rights at kontakt@365lab.tech. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs).

Security

The website uses HTTPS/SSL, and we apply technical and organizational measures to protect against the loss, alteration, unauthorized access, and misuse of data. Links to other websites are not under our control, and we are not responsible for their privacy policies.

Changes to This Policy

We may occasionally update this Policy to align it with changes in our services or regulations. We publish all changes on this page, so we recommend checking it periodically.

Last updated: July 2026.