1. Who is responsible
Data controller: Blaženka Lukić PR Konsultantske aktivnosti u vezi s poslovanjem i ostalim upravljanjem DESKALATE Beograd (dEskalate brand), registration number 68841089. Privacy requests: info@deskalate.it.com. The business details are also in the legal notice.
2. Information and purposes
- Inquiries: name, email, company and the service, website or message details you choose to provide. Used to respond, prepare a proposal and manage the discussion. Required fields are marked in the form, including the contact and company details and selected service; additional questions depend on the service. Without a valid contact address we may not be able to reply.
- Service work: contact and project information needed for an agreed engagement. Access to helpdesk conversations, customer data or private systems is outside a general website inquiry and requires separately defined roles and safeguards.
- Technical delivery: hosting and form infrastructure may process request metadata such as IP address, browser details, timestamps and security logs to deliver and protect the site.
- Optional tracking: only after your category-specific permission: Google Analytics statistics; Microsoft Clarity heatmaps/session recordings; Google Ads campaign measurement and personalisation. See the cookie policy.
- Reality Check preview: entering a URL currently displays a local explanatory message. This form does not send it to an audit backend or produce a report.
- External applications: Google Calendar bookings and the separate careers/network service have their own data collection flows. Review the notice at the destination before supplying information.
3. Legal bases
Responding to a request made by a prospective individual client and taking steps towards a contract can rely on pre-contractual necessity. Business contact correspondence, routine site security and handling disputes may rely on legitimate interests in operating and protecting the business, balanced against the individual’s rights. Legal obligations apply where records must be kept by law.
Optional analytics, session insights and advertising rely on consent, which can be refused or withdrawn without affecting contact or booking. Sending an inquiry is not consent to tracking or a mailing list. Where consent is the basis, withdrawal does not invalidate earlier lawful processing.
4. Who may receive information
The website uses Netlify hosting for the production site and a Supabase endpoint to process contact-form submissions. Business correspondence is handled through the business email service (Zoho for the published contact mailbox). Google handles bookings you open through Google Calendar.
Google Analytics / Google Ads and Microsoft Clarity receive information only when their respective optional categories are enabled. Session insights can include clicks, scrolls, device details and masked page recordings; form subtrees are explicitly masked.
Providers can act as processors or independent controllers depending on their function and terms. Access within the team is limited by the work being performed. Professional advisers or public authorities may receive information where necessary for a legal obligation or a claim.
Reality Check is intended to use a one-off EUR 29.99 PayPal payment. PayPal processes payment details under its own privacy notice. Checkout is not connected in this version of the site, so no payment details are sent to PayPal. Do not email card details or PayPal passwords.
5. International processing
Some providers may process information outside Serbia, including outside the EEA/UK. Their privacy notices and information about transfers are linked below. For a specific question about processing, contact info@deskalate.it.com.
Provider notices: Netlify, Supabase, Zoho, Google, Microsoft.
6. How long information is kept
Retention is based on the purpose and category: inquiry correspondence while the discussion is active and for a justified follow-up/dispute period; project and contract records for delivery, agreed support and applicable statutory obligations; security logs for the provider’s operational/security period. Data should then be deleted or anonymised unless a lawful reason requires longer retention.
The cookie-choice record expires after 180 days; language preference remains until changed or cleared. Analytics and recording data are also subject to the relevant service settings.
7. Your rights
Depending on applicable law, you can request access, correction, deletion, restriction, portability and information about recipients or transfers; object to processing based on legitimate interests; and withdraw consent. Contact info@deskalate.it.com with enough detail to locate the data. We may ask for proportionate identity verification.
We respond within the period required by applicable law, generally one month under the GDPR, with permitted extensions and explanations where applicable. Some data may have to be retained for a legal obligation or a legal claim.
You can complain to the supervisory authority competent for your location or the controller. For Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection. In the EEA, contact the relevant national data protection authority.
8. Security, sensitive data and children
Do not send passwords, API keys, identity documents, payment information or sensitive personal data through the general contact or URL field. No internet service can promise absolute security. For private project data, agree an appropriate channel and access scope first.
This website is directed at professional/business users and is not designed to collect information from children. Let us know if information from a child has been submitted unintentionally.
9. Automation and updates
The contact form does not make automated decisions with legal or similarly significant effects. The Reality Check URL form here only demonstrates the process and does not send the URL to the audit system.
We update this notice when our data-processing practices change.