Legal

Privacy
policy.

Short, and without small print: we collect only what you send us in an enquiry, and we use it to reply to you. Nothing more.

Last updated: 23 July 2026. Translated from Serbian; in case of any discrepancy, the Serbian version prevails. · Data controller: BIRO 404

01Who processes your data

The data controller is BIRO 404, a digital studio based in Belgrade. For any question about data, contact: studio@biro404.rs, telephone +381 60 041 11 00.

Behind that name stands a registered entity, whose identifying details are:

ItemValue
Legal entityLegal entity
ValueNENAD JOKIĆ PR USLUGE PRIPREME ZA ŠTAMPU I KONSALTING SANCOM NOVI PAZAR
Legal entityLegal form
ValueSole trader (preduzetnik)
Legal entityRegistered seat
ValueKruševo 12, Novi Pazar, Serbia
Legal entityCorrespondence address
ValueBrankova 23, Savski venac, Belgrade, Serbia
Legal entityCompany registration number
Value65403340
Legal entityPIB
Value111428891
Legal entityRegister
ValueSerbian Business Registers Agency — Register of Business Entities (sole traders)
Legal entityEmail
Legal entityTelephone
We have not appointed a data protection officer — for any question about data, write to the address above.

02What data we collect

Only what you send us yourself through the contact form or by email: your name, your company name or trade, a phone number or email address, a link to an existing website, the service selected, the language of the page the enquiry was sent from, and the content of your message.

We do not seek out or collect data you have not given us yourself. We do not use profiling or automated decision-making.

Providing this data is neither a statutory nor a contractual obligation, and you are not required to give it. Without a phone number or an email address we simply have no way of replying to you; the remaining fields are optional.

03Legal basis

We process the data in an enquiry on the basis of your consent (given by ticking the box in the form) and in order to take steps prior to entering into a contract at your request.

You may withdraw your consent at any time — a single email is enough. Withdrawal does not affect the lawfulness of processing carried out before it.

04Why we collect it

So that we can reply to your enquiry and agree the work. We use the data solely for that correspondence — we do not send newsletters or advertising without your consent.

05Who the data is passed to

We do not sell data and we do not pass it to third parties for marketing. The following processors are involved in running the site technically, and that is the complete list:

ProcessorProcessor
RoleRole
ProcessorCloudflare
RoleWebsite hosting. Like any web server, it records technical access logs (IP address, time, browser type) for the security and operation of the site.
ProcessorWeb3Forms
RoleForwarding the contact form to our inbox. It sees the content of an enquiry only at the moment of forwarding. The form submits automatically through this service. If submission fails, the form offers to let you send the message yourself via WhatsApp or email — in which case this processor is not involved.
ProcessorGoogle Workspace
RoleThe mailbox studio@biro404.rs in which we receive and keep correspondence.
ProcessorCloudflare Web Analytics
RoleAggregate visit statistics offered by our hosting provider. It is switched on. It works without cookies and without tracking an individual visitor over time or across other sites; because of it, your browser loads a script from static.cloudflareinsights.com and sends an aggregate measurement to biro404.rs/cdn-cgi/rum. It does not set an identifier that would recognise you on a subsequent visit.

If you choose to write to us via WhatsApp or Viber, that message is governed by those services’ own terms — we are not an intermediary there.

06Processing outside Serbia

All the processors listed above are foreign companies, so the data we pass to them is also processed outside the Republic of Serbia. That processing is governed by those providers’ own data processing terms. If you would like the details for a particular processor, write to us and we will send them.

07How long we keep it

We keep correspondence and enquiry data for as long as is needed to reply and, if work follows, to see that work through. Enquiries that do not lead to work are deleted no later than one year after the last message. When data no longer serves its purpose, we delete it. If you would like it deleted sooner, tell us.

08Cookies, analytics and local storage

The site is static and sets no cookies at all — neither our own nor anyone else’s. We do not use pixels, ad networks or tools that track you over time or across other sites. Aggregate visit statistics (Cloudflare Web Analytics, described above) are switched on and work without cookies — they measure visits, not people. Fonts are loaded from our own server, not from Google’s.

Your browser stores a few small things locally that never leave your device: the language you chose, the summary from the price calculator if you use it, and anything you type into the demo applications. You can clear all of it by clearing the site’s data in your browser.

09Digital assistant (AI)

The digital assistant pilot is currently not active on any page of this site. There is no chat, no input field, and therefore no processing of data on this basis. This section is here because we are preparing the pilot, and because the rule in section 11 binds us in both directions.

When we launch the pilot, it will run entirely in your browser: it will not be connected to any external AI service — no calls to OpenAI, Google or any other provider. What you type will not be sent to us or to any third party. The assistant will load only the public knowledge base from this site, in the same way a browser loads an image or a piece of text. A summary of the conversation, if you choose to pass it into the contact form yourself, is held temporarily in the browser and disappears when you close the tab. We will update this section before the pilot launches, not after.

10Your rights

In relation to your data you have the right to: access and a copy, rectification of inaccurate data, erasure, restriction of processing, data portability, object to processing, and withdraw consent.

It is enough to write to studio@biro404.rs — we reply within 30 days.

If you believe we are not processing your data lawfully, you have the right to contact the supervisory authority: the Commissioner for Information of Public Importance and Personal Data Protection (Serbia’s data protection authority), Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, poverenik.rs.

11Changes to this policy

If we change the way we handle data — for instance if we add analytics — we update this policy before that change, not after it.

In short
  • We take only what you send us in an enquiry
  • We use it solely to reply to you
  • No cookies, no pixels, no ad networks
  • The AI assistant is currently not active on the site — when it is, it will run in your browser
  • We delete on request, and in any case within a year of the last message

12Common questions

Does the site use cookies?

No. The site is static and sets no cookies at all — neither our own nor anyone else’s. We do not use pixels, ad networks or tools that track you over time or across other sites. Fonts are loaded from our own server, not from Google’s.

What happens to what I type into the digital assistant?

The digital assistant pilot is currently not active on any page of this site, so there is no field to type into. When we launch it, nothing will leave your device: it will run entirely in your browser, with no calls to OpenAI, Google or any other provider. We will update this section before the pilot launches, not after.

How long do you keep my enquiry?

For as long as is needed to reply and, if work follows, to see that work through. Enquiries that do not lead to work are deleted no later than one year after the last message. If you would like it deleted sooner, tell us.

Who can I complain to?

The Commissioner for Information of Public Importance and Personal Data Protection (Serbia’s data protection authority), Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, poverenik.rs.

Last updated: 23 August 2026.

A question about data

Something not clear?

Write to us and we’ll answer specifically — what data we hold, where it sits and how to have it deleted.