Privacy policy and cookie notice

1. Data controller

The controller is Most revizija d.o.o. Beograd-Rakovica, Stanka Paunovića-Veljka 7a, 11000 Belgrade, Serbia, registration no. 21374539, tax ID 110672484. Contact: office@mostrevizija.rs, +381 11 306 3028.

2. What data we process

• Email: your email address, name, company and the content of your message.
• Phone calls: the number you call from and information you share during the call.
• Technical data (server logs): IP address, date and time, requested page, browser and operating system, recorded automatically by the hosting server for security and troubleshooting.

The site does not collect special categories of personal data and is not intended for persons under 15.

3. Purpose and legal basis

• Responding to enquiries and preparing proposals — at your request, i.e. steps prior to entering into a contract (Art. 12(1)(2) ZZPL; Art. 6(1)(b) GDPR).
• Providing audit and advisory services — performance of a contract and compliance with statutory obligations of auditors under the Law on Audit and anti-money-laundering legislation (Art. 12(1)(2) and (3) ZZPL).
• Security and operation of the site (server logs) — our legitimate interest in keeping the site available and protected (Art. 12(1)(6) ZZPL; Art. 6(1)(f) GDPR).

We do not use your data for profiling, automated decision-making or marketing without your explicit consent.

4. Retention

• Data from enquiries that do not lead to an engagement is deleted within 12 months of the last communication.
• Client data is kept for the duration of the engagement and thereafter for the periods prescribed by the Law on Audit, Law on Accounting and tax legislation (generally 5 to 10 years).
• Server logs are deleted automatically after 30 days.

5. Recipients and transfers

Data is processed only by Most revizija staff and associates bound by professional secrecy, and by our hosting provider under a data processing agreement. We do not sell or share data for marketing. We disclose data to public authorities only where required by law. Where data of EU persons is processed in Serbia, this is done under the ZZPL, which the European Commission has not yet covered by an adequacy decision; we apply appropriate safeguards and process only what is needed to respond to you or perform the engagement.

6. Cookies

www.mostrevizija.com does not use tracking, analytics or advertising cookies. We do not use Google Analytics, Facebook Pixel or similar third-party tools.

The only item stored in your browser is a strictly necessary flag mr_cookie_notice in localStorage, recording that you have seen the cookie notice so it is not shown on every visit. It contains no personal data, is sent to no one, and can be deleted in your browser settings. As a strictly necessary item it requires no consent under the ZZPL or the ePrivacy Directive.

7. Your rights

Under the ZZPL (Articles 21–38) and the GDPR (Articles 15–22) you may request access to your data and a copy, rectification, erasure, restriction of processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time where processing is based on consent. Send requests to office@mostrevizija.rs; we respond within 30 days. You may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs) or, for EU residents, with the supervisory authority in your country.

8. Security

The site is served over HTTPS/TLS only. We apply technical and organisational measures proportionate to the risk: restricted access, password protection, regular updates and confidentiality obligations for everyone with access. In the event of a breach likely to result in high risk to your rights, we will notify you and the Commissioner within the statutory 72 hours.

9. Changes

We may update this notice when regulations or our operations change. The current version is always published on this page with its effective date.