Privacy policy

Who is responsible

MALI Labs — legal name Viktor Čuvik PR MALI Labs, a sole proprietorship registered in Serbia and based in Ada, Vojvodina — is the data controller for the personal data described on this page. Our full registration details are on the company details page.

You can reach us about anything in this policy at [email protected].

What we collect, and why

We only collect personal data that you deliberately hand us. There is no analytics, no advertising and no profiling on this site.

• The contact form — your name and email address, and — if you choose to fill them in — your company, phone number, project type, budget range, and the description you write. We use it to answer you and to prepare a proposal.
• The booking link — booking a call takes you to Google Calendar's appointment scheduling, where you give your name, email address and anything you add to the booking. That appointment is created in Google's system and appears in our calendar.
• Email — if you write to [email protected] directly, we hold your message and your address in our mailbox.

We do not buy contact data, and we do not enrich what you give us from other sources.

Our legal basis

• Steps taken at your request before entering into a contract — GDPR Article 6(1)(b), and Article 12(1)(2) of the Serbian Law on Personal Data Protection — when you ask us for a proposal, a proof of concept or a call.
• Our legitimate interest — GDPR Article 6(1)(f) — in replying to enquiries that are not yet about a contract, and in keeping a record of what was discussed and agreed.

We do not rely on consent for anything on this site, because we run no tracking that would need it.

How long we keep it

We keep enquiries, messages and booking records for 24 months after our last contact with you, so that a conversation can be picked up where it stopped.

When that period ends we delete them. If you have become a client, records tied to the contract and to invoices are kept for as long as the contract requires and Serbian accounting and tax law obliges us to, and then deleted.

Who else handles your data

To run this site and to reply to you we use a small number of service providers. They process your data on our instructions.

Transfers outside Serbia and the EU

Some of the providers above are based in the United States or store data there.

Where one of these providers processes data outside the EU and Serbia, the transfer relies on the European Commission's Standard Contractual Clauses — and, for providers certified under it, the EU–U.S. Data Privacy Framework — and, under Serbian law, on the standard contractual clauses provided for in Article 65 of the Law on Personal Data Protection. You can ask us for a copy of the safeguards that apply.

Cookies, analytics and tracking

This site sets no cookies. It loads no analytics, no advertising pixels, no social plugins, and no third-party fonts or scripts of any kind. Nothing here follows you to another site.

The one thing stored in your browser is a single entry named malilabs-lang, which remembers the language you chose from the language switcher. It is written only when you click that switcher, it never leaves your browser, and clearing your site data removes it.

Because none of this is tracking, there is no consent banner to click through.

Your rights

Under the GDPR and the Serbian Law on Personal Data Protection you can ask us to:

• Access — tell you what personal data of yours we hold, and give you a copy.
• Rectification — correct anything that is wrong or incomplete.
• Erasure — delete your data, where we have no obligation to keep it.
• Restriction — stop using your data while a dispute about it is resolved.
• Objection — stop processing that rests on our legitimate interest.
• Portability — hand over the data you gave us in a machine-readable form.

Write to [email protected]. We will answer within 30 days, and we will not charge you for it.

Complaints

If you think we have handled your data badly, please tell us first — most of these turn out to be a misunderstanding we can fix quickly. You also have the right to complain to a supervisory authority:

• Serbia — Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), Bulevar kralja Aleksandra 15, 11000 Belgrade — poverenik.rs
• European Union — the data protection authority of the country where you live or work.

Changes to this policy

If we change what this site does with personal data, we will update this page and change the date at the top. Material changes to an ongoing engagement we will tell you about directly.