Legal
Privacy policy
Last updated: 5 September 2026.
This policy explains what personal data we collect through elpidasolutions.rs, why we process it, whom we entrust it to, how long we retain it and what you can ask us to do. If anything is unclear, write to us and we will respond.
Who processes your data
The data controller is ELPIDA SOLUTIONS, a real estate agency with its registered office at Gornji Ribnik 2, Trstenik, Serbia.
Company registration number 68537851, tax identification number (PIB) 115664509. The agency is entered in the Register of Brokers in the Sale and Lease of Real Estate maintained by the Ministry of Internal and Foreign Trade of the Republic of Serbia, under number 2204.
Dušan Curaković, the agency’s owner and director, is responsible for data processing. Email him at elpidasolutions.rs@gmail.com or call +381 60 663 93 93.
We have not appointed a data protection officer — we do not process data on a large scale or systematically monitor visitors’ behaviour, so the law does not require us to do so.
What data we collect
The website has no user accounts, search function or property listings. The only place where you submit data to us yourself is the contact form, which asks only for the information we need to respond:
- Full name — so we know whom we are addressing. Required.
- Email address — so we can respond. Required.
- Phone number — so we can contact you about your enquiry. Required.
- Your message — the content of your enquiry. Required.
- The language of the page from which the enquiry was sent — so we can reply in the same language.
The server hosting the website also records technical visit data — IP address, browser type and request time — in standard access logs. We do not link this data to your name or use it to identify you.
Why we process data and on what legal basis
- To respond to your enquiry and, if we work together, prepare a proposal. The legal basis is taking steps at your request before entering into a contract — Article 12, paragraph 1, point 2 of the Serbian Law on Personal Data Protection, or Article 6(1)(b) of the General Data Protection Regulation (GDPR).
- To keep the website secure — server access logs and protection against misuse of the form. The basis is our legitimate interest, under Article 12, paragraph 1, point 6 of the Law, or Article 6(1)(f) of the GDPR.
We do not use your data for newsletters or any marketing messages, and we do not make automated decisions about you. If we ever wish to contact you about something unrelated to your enquiry, we will first ask for your consent. You give that consent separately and may withdraw it at any time without affecting any work already underway.
Who else has access to your data
Enquiries submitted through the form are received only by Dušan Curaković. We do not forward them to other agencies, law firms, property owners or any third party without your express consent, and we never sell them.
Service providers needed to operate the website and email also have technical access to the data. They are processors: they act on our instructions and may not use the data for their own purposes.
We handle enquiries in email and do not enter them into third-party software — neither property advertising systems nor contact management tools. If this changes, the provider will be named in this policy before any data is shared with it.
- Netlify, Inc. (United States of America) — website hosting and receipt of contact form messages.
- Google LLC (United States of America) — the email account that receives enquiry notifications.
Both providers’ servers may be outside Serbia and the European Economic Area. Transfers rely on standard contractual clauses and other appropriate safeguards — Article 65 of the Law on Personal Data Protection, or Article 46 of the GDPR.
How long we retain data
We retain your enquiry and the resulting correspondence for 24 months after the last message — the period runs from the last message exchanged, not from the first contact. If the enquiry does not lead to us working together, we delete it no later than the end of that period. If it leads to a transaction, we retain the transaction documentation for as long as required by real estate brokerage and accounting regulations.
The hosting provider deletes server access logs according to its own retention periods; we do not archive them.
You may request deletion before this period expires — simply email elpidasolutions.rs@gmail.com.
Your rights
You have the right at any time to:
- find out whether we process your data and obtain a copy;
- correct inaccurate data or complete incomplete data;
- request deletion of your data;
- restrict processing or object to processing based on legitimate interests;
- transfer your data to another controller in a commonly used electronic format;
- withdraw consent where processing is based on it — withdrawal does not affect the lawfulness of processing before withdrawal.
Send your request to elpidasolutions.rs@gmail.com. We respond within 30 days at the latest. If you believe we are processing data contrary to the law, you may contact the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade. If you live in the European Union, you may also lodge a complaint with the supervisory authority in your country of residence.
Cookies and tracking
This website does not use cookies, does not measure visits and has no analytics or advertising scripts. There is therefore no consent banner — there is nothing to approve.
The website stores just one item in your browser — a flag indicating that you have already seen the introductory animation, so it does not repeat while you use the site. It exists within the tab’s session and disappears when you close the tab, so it does not identify you on your next visit.
Fonts are served by our own server, so your visit does not generate requests to third-party font servers either.
Security
The website operates exclusively over an encrypted connection (HTTPS), and form messages are accessible only to the agency’s director through a password-protected account.
No system is completely secure. If a data breach occurs that could put your rights at risk, we will notify you and the competent authority within the statutory time limits.
Children
The website is intended for a business audience. We do not target people under 15 or knowingly collect their data.
Changes to this policy
If our processing changes, we will update this text and the date at the top of the page. Changes do not apply retrospectively.
Questions about your data
Email elpidasolutions.rs@gmail.com or call +381 60 663 93 93. Dušan Curaković will respond.