Legal
Privacy Policy
We collect little, we use it only to answer your enquiry and do the work, and we sell it to no one. Below is exactly what that means in practice.
Last updated: 31 July 2026
1. Who processes your data
The data controller is BeeLogs d.o.o. Beograd, Nehruova 208, 11070 Novi Beograd, Republic of Serbia (company No. 22165283, VAT No. 115489380) — referred to below as "BeeLogs" or "we".
We process personal data under the Serbian Personal Data Protection Act (Official Gazette of RS No. 87/2018 — the "Act") and, where EU law applies to the processing, under the General Data Protection Regulation (EU 2016/679 — "GDPR").
Given the scale and nature of our processing we are not required to appoint a data protection officer under Article 56 of the Act. For anything concerning your data, write to [email protected] — the colleague responsible for data protection will answer.
2. What we collect
2.1. What you give us through the contact form
The contact form on this site collects only the following:
- first and last name — required;
- email address — required, so we can reply;
- phone number — optional;
- the service you are interested in — optional;
- your message — required;
- your consent and the time it was given.
The form asks for nothing beyond this and transmits nothing beyond this. Please do not send us national ID numbers, passport or ID document numbers, health information or other sensitive categories of data through the form. If such data reaches us and we do not need it, we delete it.
2.2. Data arising from a business relationship
Once we work together, we process the contact details of the people handling the account (name, job title, work email and phone), together with data contained in transport, customs and warehousing documentation — to the extent needed to deliver the service and meet our legal obligations.
2.3. Technical data about your visit
Like any website, this one runs on a server that keeps standard access records: IP address, request time, browser type and the page requested. We use these solely to maintain and secure the site, and we do not link them to your identity.
3. Why we process it, and on what basis
Every processing operation needs a legal basis. Ours are:
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to an enquiry sent through the contact form | Name, surname, email, phone, service, message | Your consent — Art. 12(1)(1) of the Act / Art. 6(1)(a) GDPR |
| Preparing and sending a quotation at your request | Contact details and the shipment details you provide | Steps taken at your request prior to entering a contract — Art. 12(1)(2) / Art. 6(1)(b) |
| Performing a freight forwarding, transport, customs or warehousing contract | Contact details of the people handling the account, data in transport and customs documentation | Performance of a contract — Art. 12(1)(2) / Art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Data required for invoicing | Compliance with a legal obligation — Art. 12(1)(3) / Art. 6(1)(c) |
| Protecting the site against spam and abuse | Technical access data | Our legitimate interest — Art. 12(1)(6) / Art. 6(1)(f) |
Providing your data is voluntary, but without a name, an email address and a message we cannot answer an enquiry. Where our basis is consent, you may withdraw it at any time — see section 8. Withdrawal does not affect the lawfulness of processing carried out beforehand.
4. Cookies and tracking
This site uses Google Tag Manager, a Google product through which we manage our audience measurement. Analytics tools may be loaded through it; these place cookies on your device and record how you use the site: which pages you open, how long you stay on them, which source you arrived from, together with basic device information and an approximate location derived from your IP address.
We use that data only in aggregate, to understand what visitors are looking for and improve the site. We do not use it to identify you personally, we do not sell it, and we do not use it for advertising.
Analytics cookies are not required for the site to work, and you can refuse them:
- in your browser settings, by blocking third-party cookies;
- by installing the Google Analytics Opt-out add-on;
- by using a private window, which clears cookies when you close it.
The site remains fully usable without them.
Separately, the typeface is loaded from Google's servers (Google Fonts), so Google receives your IP address that way too. A browser or extension that blocks external fonts avoids it.
5. Who we share it with
We do not sell personal data and we do not pass it to third parties for their own marketing. Data is available only to those employees who need it for their work, and to the following recipients:
| Recipient | Why | Where the data sits |
|---|---|---|
| Web3Forms — form delivery service | Forwarding messages sent through the contact form to our inbox | United States |
| Hosting and email provider | Hosting the site, access logs, receiving mail | European Union |
| Google (Google Tag Manager and analytics tools) | Measuring site traffic and reporting on usage | European Union / United States |
| Google (Google Fonts) | Delivering the typeface; receives the visitor's IP address | European Union / United States |
| Carriers, customs brokers, warehouse operators | Performing the specific service you ordered | Serbia and the countries along the shipment route |
| Accountants, lawyers, auditors | Meeting legal and contractual obligations | Serbia |
We also disclose data to public authorities where a regulation requires it — for example to customs authorities during clearance.
6. Transfers outside Serbia
The Government of the Republic of Serbia maintains a list of countries deemed to provide an adequate level of data protection (Official Gazette of RS No. 55/2019). The United States is not on that list.
A message sent through the contact form passes through Web3Forms, whose servers are in the United States, where it is held for at most 30 days and then automatically deleted. We make this transfer on the basis of your explicit consent, given by ticking the box before you submit — having been informed by this policy where the data travels and that the country is not on the list (Art. 69(1)(1) of the Act; Art. 49(1)(a) GDPR).
If you would rather your data did not leave Serbia and the European Union, do not use the form — email us directly at [email protected]. A message sent that way reaches us with no intermediary.
7. How long we keep it
| Data | Retention |
|---|---|
| An enquiry that does not lead to a business relationship | 2 years from the last contact, or until consent is withdrawn |
| Copy of the message held by Web3Forms | Up to 30 days, then automatically deleted |
| Data within a contractual relationship | Until the limitation period for claims under the contract expires |
| Invoices and accounting records | 10 years, as required by accounting legislation |
| Technical site access records | Up to 12 months |
Once the period expires we delete the data or anonymise it irreversibly.
8. Your rights
In relation to the data we hold about you, you have the right:
- of access — to learn whether we process your data and to receive a copy;
- to rectification of inaccurate or incomplete data;
- to erasure, where there is no longer a basis for processing;
- to restriction of processing in the cases set out in Article 31 of the Act;
- to portability — to receive your data in a common electronic format;
- to object to processing based on legitimate interest;
- to withdraw consent at any time, without giving a reason;
- not to be subject to a decision based solely on automated processing. For the avoidance of doubt: we make no automated decisions about you and carry out no profiling.
To exercise a right, write to [email protected]. We respond without delay and in any event within 30 days of receiving the request. Exercising your rights is free of charge.
If you believe we are processing your data unlawfully, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, Serbia, tel. +381 11 3408 900, www.poverenik.rs. We would be grateful if you came to us first — most misunderstandings are settled with a single email.
9. Security
The site is served over an encrypted HTTPS connection, so form contents travel protected. The form carries a hidden field that defends against automated spam. Only employees who need it for their work have access to the messages we receive.
No system is perfectly secure. Should a breach occur that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, and the Commissioner within 72 hours of becoming aware, as the Act requires.
10. Children's data
Our services are aimed at businesses. This site is not intended for anyone under 18 and we do not knowingly collect their data. If we learn that we have received such data without a parent's or guardian's consent, we delete it.
11. Links to other sites
The site may contain links to other organisations' websites. We are not responsible for how they handle data — once you leave beelogs.com, the privacy policy of the site you are on applies.
12. Changes to this policy
We may amend this policy when the way we work changes or when the law does. The version in force is always published at this address, and the date of the last change appears at the top of the page. We will flag any material change prominently on the site.
Questions?
For anything concerning your data, write to [email protected] or to BeeLogs d.o.o., Nehruova 208, 11070 Novi Beograd, Serbia.