This Privacy Policy explains how Fort IT Solutions DOO ("Fort IT Solutions", "we", "us") processes personal data when you visit https://fortit.rs or contact us through this website.
We process personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia (ZZPL) and, where applicable, the EU GDPR (for visitors or contacts in the EEA/UK).
1. Data controller
Fort IT Solutions DOO
Futoški put 5, Novi Sad, Republic of Serbia
PIB: 113326078 · MB: 21845981
Email: office@fortit.rs
For privacy requests, write to the same email address with the subject line "Privacy request".
2. What data we collect
2.1 Contact form
When you submit the contact form, we receive:
- Name
- Email address
- Company name (optional)
- Contact reason (optional)
- Message content
- Technical anti-bot data via Cloudflare Turnstile (verification token; Cloudflare may process technical identifiers such as IP address)
Messages are delivered by email to our inbox (office@fortit.rs). We do not currently store form submissions in a separate CRM, database, or spreadsheet.
2.2 Careers / CV
If you apply via email (including from the Careers page), we process the personal data you choose to send (typically name, email, CV/resume, and any information in your message), solely to evaluate potential collaboration or employment.
2.3 Technical and usage data
Like most websites, our hosting and security providers may automatically process technical data such as IP address, browser type, device information, approximate location derived from IP, pages visited, and timestamps (server logs).
We also use Vercel Web Analytics and Vercel Speed Insights to understand aggregate traffic and performance. These tools are designed to be privacy-friendly and do not rely on advertising cookies or cross-site tracking profiles. See our Cookie Policy for details.
2.4 What we do not collect on this site
- User accounts or passwords
- Payment card data
- Newsletter subscriptions (we do not run a mailing list on this site)
- Advertising pixels or third-party marketing tags (e.g. Meta Pixel, Google Ads, LinkedIn Insight Tag)
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and business discussions | Legitimate interest (ZZPL) / steps prior to a contract; or consent where you voluntarily submit the form |
| Recruitment / careers | Legitimate interest and/or consent; pre-contractual steps where applicable |
| Site security, spam and bot prevention (Turnstile) | Legitimate interest |
| Hosting, logs, analytics and performance measurement | Legitimate interest |
| Legal compliance | Legal obligation (where applicable) |
4. Who we share data with (processors / service providers)
We do not sell personal data. We use service providers who process data on our behalf or as independent controllers for their infrastructure:
- Unlimited.rs: website hosting
- Email infrastructure for office@fortit.rs (mail.fortit.rs): delivery and storage of messages in our inbox
- Cloudflare, Inc.: Turnstile bot protection
- Vercel Inc.: Web Analytics and Speed Insights
Some providers may process data outside Serbia / the EEA (for example in the United States). Where required, we rely on appropriate safeguards such as the provider's standard contractual clauses or equivalent mechanisms.
5. How long we keep data
- Contact emails: typically up to 24 months in our inbox, or until we delete them earlier after the enquiry is closed, unless a longer period is needed for an ongoing project, claim, or legal obligation.
- Careers / CV emails: typically up to 12 months, unless you ask us to delete sooner or we keep them longer with your agreement for a specific hiring process.
- Server / security logs: according to our hosting provider's retention practices, usually for a short operational period.
6. Portfolio and case studies
Our portfolio describes business projects and product interfaces. We aim to use anonymised, demo, or non-personal content in screenshots and case studies. We do not intentionally publish personal data of website visitors in the portfolio.
If you believe a screenshot or case study on this site shows your personal data without a valid basis, contact office@fortit.rs. We will review the material promptly and, where appropriate, blur, replace, or remove it.
7. Your rights
Subject to applicable law, you may request to:
- Access your personal data
- Correct inaccurate data
- Delete data
- Restrict or object to certain processing
- Receive data portability (where applicable)
- Withdraw consent where processing is based on consent
To exercise these rights, email office@fortit.rs. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs). EEA/UK residents may also contact their local supervisory authority.
8. Children
This website is intended for business and professional use by persons aged 16 or older. We do not knowingly collect personal data from children under 16. If you believe we have received such data, contact us and we will delete it.
9. Security
We use reasonable technical and organisational measures appropriate to a marketing website and email inbox (including TLS for form submission and mail transport where supported). No method of transmission or storage is completely secure.
10. Changes
We may update this Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after changes means you acknowledge the updated Policy.