Privacy Policy

Our website is intended to inform clients and other interested parties about the Baklaja Igrić Joint Law Office, as well as about our legal services.

This Privacy Policy is intended to provide you, in a clear and understandable manner, with information about the data we collect when you visit our website, the legal basis and purpose of processing, the applicable retention period, security measures and your rights before the Commissioner for Information of Public Importance and Personal Data Protection (hereinafter: the “Commissioner”).

The owner of the website www.bit-law.com is the Baklaja Igrić Joint Law Office, with its business address at 47 Gospodar Jevremova Street, 11000 Belgrade, Republic of Serbia (hereinafter: “BIT Law Office”, the “Office”, the “Controller”, “we”, “us” or “our”).

All personal data collected through the use of and actions taken on this website are processed by BIT Law Office in its capacity as personal data controller, in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of the Republic of Serbia, No. 87/2018) (hereinafter: the “Law”) and the data processing principles set out therein.

This Privacy Policy has been prepared in accordance with the rules set out in the Law. Any matters not regulated by this Privacy Policy shall be governed by the Law and, in the event of any inconsistency, the provisions of the Law shall prevail.

Data We Collect

When you visit our website, certain data relating to you may be collected in order to ensure the website’s functionality and to communicate with you. Data are collected in two ways – directly from you and automatically through the website’s technical systems.

Contact Form

When you contact us through the contact form, we process the following data:

• first and last name,
• email address,
• subject of the message,
• content of your message.

The contact form does not allow document uploads. The data are stored in the Supabase database and/or forwarded by email to the BIT Law Office’s official email address.

Newsletter Subscription

When you subscribe to the newsletter, we process only your email address, which is stored in the Supabase database.

Data Collected Automatically

When you visit the website, the following data are recorded automatically:

• the IP address of the device used to access the website,
• date and time of access,
• browser and operating system information,
• the URL of the previous page,
• pages visited and basic information about requests sent to the website,
• data concerning technical errors and security events, including a description of the error and other technical data contained in the error report,
• selected language, display theme, font size and choices concerning cookies,
• when an authorised administrator accesses the admin panel, data relating to the administrator’s account and session, including the account identifier and data required for authentication.

Job Applications

When a candidate submits an application through the Careers section, we process the following data and documents:

• first and last name,
• email address,
• content of the message,
• CV in PDF format.

In addition to the data entered in the form, the CV and accompanying message may contain contact details, a photograph, date of birth, place of residence, information concerning education, professional qualifications, previous employment and work experience, skills, language proficiency, licences, certificates, professional interests and achievements, and other personal and professional data voluntarily provided by the candidate.

The textual data included in a job application are stored in the Supabase database, while the CV is stored in Supabase Storage; the database contains only a link or reference to the file. Access to applications is restricted to authorised persons within the BIT Law Office involved in recruitment and selection and to engaged technical service providers to the extent necessary for the operation of the system. Applications and CVs are not published on the website.

Providing the above data and the CV is necessary for the BIT Law Office to consider the candidate's application. If the candidate does not provide these data, the application cannot be processed.

Legal Basis for Data Processing

The legal basis for the processing of personal data is the Law.

We process your personal data for different purposes, depending on the nature of your interaction with our website, on the basis of:

Your consent

We process personal data on the basis of your consent where you provide them voluntarily, for example by email, through a contact form, newsletter subscription or event registration, where such functionalities are available on the website.

On the basis of consent, we process data for the following purposes:

• responding to your enquiries and providing the requested information,
• using cookies and similar technologies to tailor content to your needs and interests,
• optimising our online activities (remedying technical errors and improving website functionality),
• sending newsletters, informational and marketing communications, where such functionality is available and you have given your consent,
• providing information about BIT Law Office events and services, where you have given your consent.

You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.

The processing of your personal data based on consent is carried out in accordance with Article 12, paragraph 1, item 1) of the Law.

Legitimate interest

We may also process personal data on the basis of a legitimate interest where this is necessary for the secure and stable operation of the website, improvement of the user experience, or protection of our rights and interests.

In this context, processing is carried out with due consideration for your rights and interests and, wherever possible, we use anonymised or pseudonymised data. This includes, for example, analysing technical errors and website operation in order to improve it.

The processing of your personal data based on a legitimate interest is carried out in accordance with Article 12, paragraph 1, item 6) of the Law.

Provision of Legal Services and Related Communications

We process personal data where this is necessary to respond to requests for legal assistance, assess whether and on what terms the BIT Law Office may provide legal services, take steps prior to establishing an attorney-client relationship and provide the legal services agreed with our clients.

This may include communicating with prospective and existing clients, identifying the persons and legal matters concerned, conducting preliminary conflict-of-interest checks, reviewing the information and documents submitted to us, preparing engagement terms, providing legal advice and representation and handling administrative communications relating to our services.

Where such processing is necessary for the performance of an agreement for the provision of legal services or in order to take steps at your request prior to entering into such an agreement, it is carried out in accordance with Article 12, paragraph 1, item 2) of the Law.

Cookies

The website uses cookies and data stored in the browser’s local storage to ensure its proper and secure operation, maintain the administrator panel and remember user preferences. The website does not use advertising cookies or standalone analytics and visitor-tracking tools.

We use the following categories:

• Essential cookies and local storage data – these are necessary for the secure operation of the website, administrator authentication and storage of the user’s cookie choices. They include bit-admin, sb-<project>-auth-token and cookie-consent-v2. These technologies are always active and cannot be disabled through the cookie banner.
• Functional cookies and optional content – these are activated only with the user’s consent. They include theme, font-scale and lang, which remember the selected display theme, font size and website language.

Users may accept or reject functional cookies and optional content through the cookie banner. Rejecting them does not affect the essential operation of the website, but certain preferences or external content may not be available.

The administrator session and authentication data are retained for seven days. The user’s local preferences, including the display theme, font size, language and record of choices concerning cookies, remain stored in the user’s browser until deleted.

Purpose of Data Processing

We process the personal data we collect for the purposes of:

• responding to your enquiries and establishing further contact,
• ensuring the stable and secure operation of the website,
• remedying technical errors and improving the user experience,
• conducting marketing activities, such as sending newsletters and providing information about events, where these functionalities are available and you have given your consent,
• considering job applications, communicating with candidates and conducting recruitment and selection processes,

Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purpose of processing, unless applicable statutory retention periods require longer storage.

Data submitted through the contact form are retained for 12 to 24 months, depending on the nature of the communication and the need for further action.

Data collected for newsletter subscriptions are retained until the user unsubscribes or withdraws consent.

Data and documents included in a job application, including the data entered in the form, the message and the CV, are retained for the duration of the selection process and only for a short period after its completion, but in no event for longer than 12 months from the date of submission.

Once a specific job advertisement is removed from the website, the data relating to applications submitted in response to that advertisement are deleted within 72 hours. This rule does not apply to permanently open vacancies; however, each individual application submitted in response to such a vacancy is retained for no longer than 12 months.

The administrator session and authentication data are retained for seven days, while the user's local preferences remain stored in the user's browser until deleted.

When the need for processing ceases, the data are deleted or anonymised as soon as possible, and any accompanying documentation is permanently destroyed.

Data processed in connection with disputes or legal proceedings may be retained for the duration of the proceedings or the applicable limitation period, whichever is longer.

Where we process data on behalf of our clients, retention periods are determined by the relevant agreement and the client's instructions.

Sharing Data with Third Parties

We do not share your personal data with third parties without your prior consent or another lawful basis.

Data may be made available exclusively to:

• our technical support, hosting and infrastructure providers, in particular Lovable, Cloudflare and Supabase, as well as persons engaged to maintain the website, to the extent necessary for its operation,
• Google, when Google Maps content is loaded on the Contact page, in which case Google may receive the technical data required to display the map,
• the email service provider, when data from the contact form are forwarded to the BIT Law Office’s official email address,
• state authorities or other competent bodies, where required by law or by a final and binding decision,

In all cases, we take appropriate measures to ensure that third parties act in accordance with personal data protection regulations.

Place of Processing and Data Transfers

Data submitted through the contact form, newsletter subscription and job application are processed and stored on the Supabase platform. Textual data are stored in the database, while CV files are stored in Supabase Storage. The server region of the Supabase project currently used by the website is located in London, United Kingdom.

To the extent that processing involves a transfer of data outside the Republic of Serbia, the BIT Law Office ensures that such transfer is carried out in accordance with the Law and subject to appropriate safeguards.

User Rights

In accordance with the Law, you have the following rights in relation to the processing of your data:

• Right to be informed – to be informed about the data we collect, the purposes for which we collect them and the manner in which we process them.
• Right of access – to request confirmation as to whether we process your data and to obtain a copy of such data.
• Right to rectification – to request that your data be corrected or completed if they are inaccurate or incomplete.
• Right to erasure – to request the deletion of your data where there is no longer a legal basis for their processing.
• Right to restriction of processing – in certain circumstances, to request that the processing of your data be temporarily suspended.
• Right to data portability – to request a copy of your data in a structured format and transmit them to another controller.
• Right to object – to object to the processing of your data where such processing is based on a legitimate interest.

You also have the right to lodge a complaint with the Commissioner if you believe that your rights have been infringed.

Commissioner for Personal Data Protection

The Commissioner is the supervisory authority for personal data protection in Serbia. The Commissioner may be contacted at 15 Bulevar kralja Aleksandra, 11000 Belgrade, Serbia, at office@poverenik.rs or +381 11 3408 900.

Notification of a Personal Data Breach to the Commissioner

The Controller is required to notify the Commissioner of a personal data breach that may result in a risk to the rights and freedoms of natural persons without undue delay and, where feasible, no later than 72 hours after becoming aware of the breach. The minimum content of the Controller’s notification is prescribed by Article 52 of the Law on Personal Data Protection.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the way we process data or changes in legal and regulatory requirements. Any changes will be published on this page together with the date of the latest version. We recommend that you review this Policy periodically so that you remain informed about the data we process concerning you and the way in which we protect the data collected.

Contact

If you have any questions, requests or comments concerning the processing of your personal data, you may contact us by telephone or submit a written request to the BIT Law Office’s business address or email address:

Belgrade, 20 August 2026
BIT Law Office