1. General Provisions. 

This Privacy Policy (the "Policy") outlines how personal data of users of the website www.umbravision.online (the "Website") is processed and protected by Umbra Vision (the "Controller" or "We"). The Controller is registered at: [your registration address in Serbia]. Registration number: [your business registration number]. Contact: umbravision.online@gmail.com. This Policy is developed in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette No. 87/2018) (the "PDPA") and, where applicable (e.g., for EU residents), the General Data Protection Regulation (EU) 2016/679 ("GDPR"). By using the Website, you consent to the terms of this Policy. If you do not agree, please refrain from using the Website.

2. Collection and Use of Personal Data.

We collect the following personal data: 

- Name;

- Email address;

- Phone number;

- IP address, browser data, and cookies (for analytics);

- Other information provided in forms for web development, design, or programming services. 

Purposes of processing:

- Processing service requests and orders;

- Concluding and performing contracts;

- Improving services and the Website;

- Sending informational materials (with your consent);

- Complying with legal obligations. Legal basis: Your consent, contract performance, legitimate interests (e.g., Website improvement), or legal requirements. Data is not shared with third parties except as required by law (e.g., authorities) or for service delivery (e.g., hosting providers under confidentiality agreements). For international transfers (e.g., to non-adequate countries), we use appropriate safeguards like standard contractual clauses.

3. Rights of Data Subjects.

You have the right to: 

- Access your data and information about its processing;

- Rectify inaccurate data;

- Request erasure (right to be forgotten);

- Restrict processing;

- Data portability (receive and transfer data);

- Object to processing;

- Withdraw consent at any time (without affecting prior processing);

- Not be subject to automated decision-making (with exceptions);

- Lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection in Serbia (www.poverenik.rs) or, if applicable, an EU supervisory authority. Send requests to team@umbravision.com; we respond within 30 days (or 15 days under PDPA for access).

4. Data Protection Measures.

We ensure data security through: 

- Encryption (e.g., HTTPS);

- Restricted access (only authorized personnel);

- Regular security audits;

- Storage on servers compliant with PDPA/GDPR standards. Retention period: No longer than necessary (typically up to 5 years after service completion or consent withdrawal). In case of a breach, we notify you and the Commissioner if risks are involved.

5. Cookies and Analytics.

The Website uses cookies for traffic analysis (e.g., Google Analytics). You can disable cookies in your browser settings, but this may affect functionality. We obtain consent for non-essential cookies.

6. Changes to the Policy.

We may update this Policy. The new version will be posted on the Website with the effective date. Continued use constitutes acceptance.

7. Responsibility.

We are not liable for third-party actions obtaining data outside the Website. In case of a breach, we will notify affected parties and authorities as required by law.

For questions, contact: teamumbravision@proton.me