Privacy Policy
Last updated: 17.07.2026
This Website Privacy Policy explains how ATLANTLAB SOLUTIONS d.o.o. Beograd, a company registered in Belgrade, Serbia (“Company”, “we”, “us” or “our”), processes personal data collected through our website team@atlantlabsolutions.com.
We provide services on technology strategy and business consulting, software and web development. 
This Privacy Policy applies only to personal data processed by us as a controller in connection with this website. Where we process personal data on behalf of our clients as a processor in the course of providing services, that processing is governed by the relevant client agreement and data processing agreement.
1. Controller and contact details
The controller of your personal data is:
ATLANTLAB SOLUTIONS d.o.o. Beograd
Reg. No. 22318071
Reg. Address: 1st Floor, 5 Nikola Pašić Square Old Town (Stari Grad), 11000 Belgrade, Serbia
Email: atlantlabsolutions.com 
2. Applicable legal framework and geographic scopeSerbia - ZZPL
The Company is established in Serbia. Processing falling within the territorial scope of the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti, "ZZPL"), Official Gazette of the Republic of Serbia No. 87/2018, is carried out in accordance with the ZZPL and other applicable Serbian laws.
European Union and European Economic Area - GDPR
The EU General Data Protection Regulation, Regulation (EU) 2016/679 ("GDPR"), applies where the relevant processing falls within its territorial scope. This may include processing carried out in the context of an establishment in the EU/EEA, or processing by a non-EU controller that is related to intentionally offering goods or services to individuals in the EU/EEA or monitoring their behavior there. Mere accessibility of the Website in the EU/EEA does not, by itself, determine that the GDPR applies.
We do not use Website analytics, behavioral advertising, profiling or other tools intended to monitor visitors' behavior. Where the GDPR does not legally apply to a particular Website interaction, we nevertheless aim to apply substantially equivalent transparency, security and rights-handling standards to individuals in the EU/EEA.
The operational parts of this Policy apply generally. Where a legal basis or right must be identified under a specific law, the relevant GDPR and ZZPL provisions are stated separately. 
3. What personal data we collect through the website
Inquiry Form
When you submit an inquiry through the Website, we collect:
  • full name;
  • email address;
  • company name; 
  • the text of your inquiry or message.
Candidate Form
When you submit the candidate form through the Website, we collect:
  • surname;
  • first name;
  • email address;
  • a description of your experience; 
  • a description of successful cases or projects.
We do not request or collect a CV through the Website candidate form.
Please do not include sensitive personal data or unnecessary personal information in any Form.
We do not use the website to collect personal data for marketing purposes. We do not operate newsletter subscriptions, marketing forms, analytics tools, profiling tools or advertising technologies through the website.
4. Cookies and technical data
Our website uses only strictly necessary cookies. These cookies are required for the website to operate securely and to provide the service requested by you, such as enabling the contact form or maintaining basic website functionality. They may be used, for example, to:
  • enable basic website functionality;
  • support secure website operation;
  • remember essential technical settings;
  • enable the contact form to function properly;
  • prevent abuse or maintain website security.
We do not use:
  • analytics cookies;
  • marketing cookies;
  • advertising cookies;
  • social media tracking cookies;
  • profiling cookies;
  • third-party tracking cookies.
Strictly necessary cookies are required to provide the website service requested by you and do not require consent.
If we introduce analytics, marketing or other non-essential cookies in the future, we will update this Privacy Policy and, where required, ask for your consent before using them.
5. Purposes and legal bases
We process personal data collected through the website for the following purposes:

Purpose and processing

Personal data

GDPR legal basis

ZZPL legal basis

Responding to inquiries and managing related communications, including evaluating a potential business request.

Inquiry-form data (full name, email address, company name, the text of your inquiry or message) 

Art. 6(1)(f): legitimate interests in responding to professional and business inquiries. 

Art. 12(1), item 6: legitimate interests. Art. 12(1), item 2 only where necessary to take pre-contractual steps at the individual's request.

Assessing a candidate submission, communicating with the candidate and administering the initial selection process.

Candidate-form data (surname, first name, email address, a description of your experience, a description of successful cases or projects) 

Art. 6(1)(b): steps requested by the candidate before a possible employment or service contract. 

Art. 12(1), item 2: pre-contractual steps requested by the candidate. 

Operating, troubleshooting and securing the Website; preventing spam, fraud, misuse and cyber incidents.

Strictly necessary cookie data and basic technical data required for website operation

Art. 6(1)(f): legitimate interests in a secure, reliable Website. 

Art. 12(1), item 6: legitimate interests in security and reliability. 

Compliance with legal obligations or protection of legal rights, where necessary

Relevant inquiry, candidate, technical and communication records.

Art. 6(1)(c): processing when it is necessary to comply with a legal obligation.

Art. 12(1), item 3: Compliance with a legal obligation.


6. No marketing through the website
We do not process website form data for marketing purposes. We do not use Website form data for newsletters, direct marketing, advertising, profiling or analytics. If we later offer an optional candidate talent pool, it will require a separate, specific choice and a separate retention period; candidate data is not placed in a talent pool under this Policy.
Submitting either form is voluntary. The forms identify which fields are mandatory. If you do not provide the information needed to understand and respond to an inquiry, we may be unable to reply. If you do not provide the information needed to assess a candidate submission, we may be unable to consider it. There is no general statutory obligation to submit either form.
7. Strictly necessary cookies and similar technologies
The Website uses only cookies or similar technical storage that are strictly necessary to provide a function requested by the user, maintain security, manage a session, submit a form, prevent abuse or keep the Website reliably available. We do not use analytics, marketing, advertising, social-media tracking, profiling or other non-essential cookies.
Under EU rules on terminal-equipment storage, strictly necessary technologies do not require prior consent when they are essential to provide the service expressly requested by the user. This exception concerns the act of storing or accessing information on a device; any processing of personal data generated by those technologies must still have a legal basis under the GDPR or ZZPL, as described in Section 5.
The precise cookie names, provider and duration depend on the Website's current security and hosting configuration. The Company maintains a technical inventory of the strictly necessary technologies in use. If any non-essential technology is introduced, it will not be activated for users who require consent until valid consent has been obtained, and this Policy and the Website notice will be updated.
8. Children’s data
Our website and services are intended for business and professional users.
We do not knowingly collect or process personal data of children through the website. If you believe that a child has provided personal data to us through the website, please contact us and we will take appropriate steps to delete the information.
9. Who we share personal data with
Access is limited to people who need the data for the purposes described in this Policy. We may disclose Website personal data to:
  • authorized Company personnel responsible for inquiries, recruitment, legal, security or administration;
  • Website hosting, cloud infrastructure, maintenance, cybersecurity, email and communication service providers;
  • form-processing or recruitment-system providers, if used;
  • professional advisers, such as lawyers, accountants and auditors, where necessary; and
  • courts, regulators, law-enforcement bodies or other authorities where disclosure is required by law or necessary to protect rights and security.
We do not sell personal data. We do not share website form data with advertisers, analytics providers or marketing platforms.
Service providers that process personal data on our behalf are required to process it only under our instructions and to apply appropriate technical and organizational security measures.
10. International transfers
The Company is established in Serbia. Data submitted through the Website may therefore be received, stored or accessed in Serbia. Serbia is outside the EEA and, as of the last update of this Policy, is not listed by the European Commission as a country covered by an EU adequacy decision.
Where the GDPR's international-transfer rules apply to a transfer from the EEA to Serbia or another country outside the EEA, we use an available lawful mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses with appropriate supplementary measures, or another mechanism permitted by Chapter V GDPR. Limited derogations are used only where the legal conditions are met.
Where the ZZPL's transfer rules apply to a transfer from Serbia, we rely on a permitted basis, such as a recognized adequate level of protection, appropriate safeguards or an applicable statutory derogation. You may contact us for information about the safeguard relevant to your data, subject to lawful confidentiality limits.
11. Retention
We retain personal data only for as long as necessary for the relevant purpose, taking into account applicable legal obligations, statutory limitation periods, security needs and the principle of data minimization.
Inquiry-form submissions and related correspondence are retained for up to six months after the inquiry is closed or after the last substantive communication. If an inquiry leads to pre-contractual negotiations or a contractual relationship, the relevant records may be transferred to separate business or client files and retained in accordance with the applicable contract, a separate privacy notice, applicable legal retention requirements and statutory limitation periods.
Candidate-form submissions and related initial recruitment correspondence are retained for up to six months after the selection decision or the closure of the relevant recruitment process. If a candidate is engaged, the relevant data may be transferred to separate personnel or contractor records governed by a separate privacy notice. Candidate data will not be retained for a future talent pool unless there is a separate and specific legal basis for such retention and the candidate has been provided with an appropriate privacy notice.
Routine server, security and error logs are normally retained for up to 90 days. Such logs may be retained for a longer period where necessary to investigate a security incident, prevent or address abuse, comply with applicable law, or establish, exercise or defend legal claims.
Data contained in strictly necessary technical cookies are retained only for the duration of the relevant session or for the limited technical period required for the relevant Website function. Such data may be retained for a longer period only where this is necessary for security, troubleshooting or the establishment, exercise or defense of legal claims.
12. Security
We apply appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
These measures may include access controls, secure hosting, encryption where appropriate, backups, confidentiality obligations and limited access to personal data.
13. Your rights
Subject to the conditions and limitations under applicable data protection law, you may have the right to:
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability, where applicable;
  • withdraw consent, where processing is based on consent;
  • lodge a complaint with a supervisory authority.
To exercise your rights, please contact us at team@atlantlabsolutions.com. We may need to verify your identity before responding to your request.
Serbia - rights and complaint under the ZZPL
Individuals may exercise the rights available under the ZZPL and may lodge a complaint with the Serbian supervisory authority: Commissioner for Information of Public Importance and Personal Data Protection.

EU/EEA - rights and complaint under the GDPR
Where the GDPR applies, you may lodge a complaint with a supervisory authority in the EU/EEA Member State of your habitual residence, place of work or the place of the alleged infringement. A list of EU/EEA supervisory authorities is available from the European Data Protection Board.
14. Automated decision-making
We do not use personal data collected through the website for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
15. Links to third-party websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy notices before providing personal data to them.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be published on this page with the “Last updated” date.
17. Contact us
For privacy questions, requests or complaints, please contact:
ATLANTLAB SOLUTIONS d.o.o. Beograd
Reg. No. 22318071
Reg. Address: 1st Floor, 5 Nikola Pašić Square Old Town (Stari Grad), 11000 Belgrade, Serbia
Email: team@atlantlabsolutions.com