Privacy policy

Data controller

The controller of personal data is GRID SYSTEMS DOO, Vojvode Stepe 13, 22320 Inđija, Republic of Serbia (tax no. 114458223, reg. no. 22026518). For any data protection questions, write to office@gridsystems.rs.

What data we collect

Contact form: name, e-mail address, company name (optional), subject and message content.

AI assistant (chat): the content of the conversation, plus the details you choose to leave for a quote or a demo — full name, e-mail address and company name (optional).

Technical logs: standard server logs required for site operation and security (e.g. IP address, access time).

Purpose and legal basis

We process data solely to answer your inquiry, schedule a demo and prepare a quote — i.e. to take steps at your request prior to entering into a contract, or based on our legitimate interest in responding to business communication (Art. 12 of the Serbian Personal Data Protection Act).

We do not use the data for automated decision-making and we do not sell it to third parties.

Cookies

Without your consent the site sets no measurement or marketing cookies at all.

Without consent we use only what the site cannot work properly without: the cookie remembering your language choice (NEXT_LOCALE) and a record of your cookie decision. Neither contains personal data.

With your consent the following are switched on: Vercel Web Analytics and Speed Insights (visits and loading speed — cookieless), Google Analytics 4 (the _ga and _ga_* cookies, measuring page visits) and the Meta Pixel (the _fbp cookie, measuring ad performance; visit data is shared with Meta). If you decline, none of it is loaded. You can change your decision at any time via “Cookies” in the site footer — withdrawing consent also deletes these cookies.

The Google map on the Contact page does not load on its own — it appears only after you open it with a click. Until that click Google receives none of your data and sets no cookies. If you do open it, Google may set its own cookies and see your IP address; Google's own privacy policy applies from that point.

Processors and data transfers

We rely on trusted service providers: hosting infrastructure (Vercel), the Anthropic API for the AI assistant, and Resend to deliver contact-form messages to our e-mail address. These providers process data only to the extent necessary to deliver the service.

Beyond hosting, Vercel can also measure page traffic and loading speed (Web Analytics and Speed Insights). Those measurements load only with your consent, use no cookies and write nothing to your device, and they do not track you across sites — they tell us which pages are used and where the site is slow.

With your consent, Google (Google Analytics 4 — visit measurement) and Meta Platforms (Meta Pixel — ad performance measurement) also take part in processing; without consent those services are never loaded and receive no data. Google also appears via the map on the Contact page, which does not load without your click (see the Cookies section).

Some providers may process data outside the Republic of Serbia; such transfers are made with appropriate safeguards in line with the Serbian Personal Data Protection Act.

Retention

We keep inquiries and related communication for as long as needed to handle the inquiry and any resulting business relationship, and no longer than statutory limits.

Your rights

Under the Serbian Personal Data Protection Act you have the right to access, rectification, completion, erasure, restriction of processing and objection, as well as the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

To exercise your rights, write to office@gridsystems.rs — we will respond without delay.

Changes to this policy

We may update this privacy policy from time to time; the current version is always published on this page with the date of the last change.