Privacy Policy

1. Who we are

The data controller is Biznis Planet, Putinačka 176, 22308 Golubinci, Serbia.

• Tax ID (PIB): 105986994
• Company No. (MB): 61788441
• Privacy contact: [email protected]

This policy covers the biznisplan.net website. The site is a presentation site — there are no user accounts or logins. We only process personal data when you send it to us through the forms on the site.

2. What we collect and why

2.1 Contact form / business request

When you message us through the contact form, we collect:

• your name,
• email address,
• company name (optional),
• phone number (optional),
• the content of your message.

Purpose: to respond to your inquiry and prepare a proposal.
Legal basis: steps taken at your request prior to entering an agreement (Art. 12(1)(2) ZZPL) and our legitimate interest in answering business inquiries.
Retention: up to 24 months from the last contact; if the contact leads to a working relationship, in line with statutory retention periods for business and accounting records.

2.2 Content download form

When you download a free resource (guide, PDF), we collect your email address (required) and, optionally, your name and company — so we can send you the resource.

Purpose: to deliver the requested resource and, if you agree, occasionally send relevant content.
Legal basis: your consent (Art. 12(1)(1) ZZPL), which you may withdraw at any time.
Retention: until you withdraw consent or request deletion.

2.3 Automatic technical data

Like any website, our server and protection layer (Cloudflare) log technical data such as IP address, browser type and access time — for security and stability.

Legal basis: legitimate interest in security (Art. 12(1)(6) ZZPL).
Retention: up to 12 months, then deleted.

3. What we never do

• We never sell your data to third parties.
• We never rent or trade your data for commercial purposes.
• We do not disclose your data to public authorities except where the law expressly requires it, based on a reasoned written request from a competent authority.
• We do not use your data to train third-party AI models.

4. Your rights

Under Arts. 21–37 ZZPL, you have the right to:

• access — learn what data we hold about you;
• rectification — if data is inaccurate or incomplete;
• erasure (“right to be forgotten”) — except data we are legally required to keep;
• portability — receive your data in a machine-readable format;
• objection — to processing based on legitimate interest;
• restriction — while an objection is resolved;
• withdraw consent — at any time, without affecting prior processing.

Send requests to [email protected]. We respond within 30 days at the latest.

5. How we protect data

• SSL/TLS encryption of all traffic (HTTPS).
• Protection layer (firewall, DDoS protection, filtering) via Cloudflare.
• Access limited strictly to those who need it.
• Regular server security updates and access monitoring.

In the event of a data breach that may affect your rights, we will notify you without undue delay and the Commissioner within 72 hours of becoming aware (Art. 53 ZZPL).

6. Processors we rely on

To run the site and handle communication we use trusted providers that process data on our behalf and on our instructions:

• Hetzner — server hosting (Germany / Finland, EU).
• Cloudflare — network protection and content delivery.
• Our own mail system — form messages reach our business inbox for handling.

7. Transfers outside Serbia

Data is stored on servers in the EU (Germany and Finland), recognized as destinations with an adequate level of protection. For any transfer outside the EEA, we apply appropriate safeguards under Arts. 64–67 ZZPL.

8. Cookies

The site uses only essential, technical cookies for security and proper operation (including Cloudflare protection). We do not use marketing tracking cookies without your consent.

9. Minors

The site and our services are intended for business users and are not directed at persons under 18. We do not knowingly collect data from minors.

10. Changes

We will announce material changes on this page with a new effective date. We recommend reviewing it periodically.

11. Contact and complaints

For any questions or requests about your data: [email protected].

If you believe your rights have not been respected, you may file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade — poverenik.rs.