Privacy
How we handle your data.
This policy explains how the artatech.dev website handles personal data. It covers this website and its contact form only — not the data our clients keep in the software we build for them.
- 01
Who handles your data
artatech.dev is run by ArtaTech, a software engineering and consulting company from Niš, Serbia (registration number 68355885). For any question about your data, write to us at hello@artatech.dev.
- 02
What we collect
When you send the contact form, we receive what you entered: your name, your email address, your company (if you gave one), the type of project and your message, together with the page language and the time it was sent.
To measure how quickly pages load we use Vercel Speed Insights: it records load times, the page and the type of device — without cookies and without identifying individual visitors.
The website uses no cookies and builds no visitor profiles. To protect the form from abuse, your IP address is held in the server’s memory for at most ten minutes to limit repeated messages; it is not stored with your message. Like any website, our hosting provider processes the IP address and basic request details (browser, page and time) to deliver pages and keep the site secure.
- 03
Why we use it, and on what basis
We use the details from the form only to reply to you and to discuss the work you are asking about. The basis is taking steps at your request before entering into a contract (Article 12(1)(2) of the Serbian Law on Personal Data Protection); when you write on behalf of a company, the basis is our legitimate interest in answering that company’s enquiry (Article 12(1)(6)). We do not sell them and do not use them for marketing campaigns without your separate consent.
Protecting the form from abuse and measuring the website’s speed rest on our legitimate interest in a secure and fast website (Article 12(1)(6) of the same law).
- 04
Who else has access
Only the ArtaTech team reads your message. Our service providers process it technically, only as far as the website needs: Vercel (website hosting and speed measurement; the form runs in Frankfurt, EU), Resend (delivering the message to our team by email) and our email provider, which stores the correspondence. The website and the form work only over an encrypted connection (HTTPS).
Vercel and Resend are U.S. companies, so some data is transferred to the United States. The transfer relies on the safeguards in their data processing agreements — certification under the EU-U.S. Data Privacy Framework and standard contractual clauses. You can ask us for a description of these safeguards.
- 05
How we protect your data
The website and the form work only over an encrypted connection (HTTPS). A message from the form is handled by a function in a Frankfurt data center (EU) and sent straight to our e-mail inbox — it is not stored on the website itself.
Only the ArtaTech team reads messages, and our providers process them only on our instructions and under data processing agreements. The IP address that protects the form is held in memory only, for at most ten minutes, and is never linked to your message.
- 06
How long we keep it
We keep your message and the correspondence that follows for at most 24 months after the last exchange, and then delete them. If the conversation leads to working together, the details needed for that work are handled under our agreement. Our hosting provider keeps technical request logs for a short period under its own rules.
- 07
Do you have to give us your data
No — sending the form is voluntary. Without your name, your email address, the project type and a message we cannot reply; the company name is optional.
- 08
Children
The website is meant for businesses and adults. We do not knowingly collect children's data; if we learn that a child has sent us data, we delete it.
- 09
Your rights
You can ask to see your data, to have it corrected or deleted, to restrict its processing and to have it transferred to another controller, and you can object to processing based on our legitimate interest. Just write to us at hello@artatech.dev: we reply without undue delay and at the latest within 30 days of receiving the request (for complex requests this can be extended by another 60 days, and we tell you so within those first 30 days). We make no automated decisions about you; the only automated check limits repeated messages from the form. If you believe your data has not been handled lawfully, you can lodge a complaint with Serbia’s Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11120 Belgrade; office@poverenik.rs; www.poverenik.rs).
- 10
Changes to this policy
If we change the way we handle data, we will update this page and the date of its last update.
Last updated: 7 October 2026.