Privacy Policy

Last updated: 22/10/2026

This Privacy Policy explains how Dodo Web DOO (“DodoWeb”, “we”, “us”) collects and uses personal data when you visit dodoweb.net, contact us, or receive communications from us.

Who we are

The data controller is Dodo Web DOO, Hercegovačka 21, Belgrade, Serbia.
Company registration number (MB): 21915670 · Tax ID (PIB): 113699431
Privacy contact: Show email address

We process personal data in line with the Law on Personal Data Protection of the Republic of Serbia and, where it applies, the EU General Data Protection Regulation (GDPR).

What data we collect

  • Contact and inquiry data: when you fill in our form or book a call: your name, email address and, if you choose to provide them, phone number, website, country, budget range and goals.
  • Attribution data: how you found us (for example, an ad click identifier or campaign parameters), only if you accept marketing cookies.
  • Usage data: pages visited, device and browser type and approximate location, collected through analytics tools, only if you accept analytics cookies.
  • Business contact data from public sources: for business-to-business outreach, we may collect publicly available business contact details (for example, from company websites and business directories).
  • Communication data: the content of emails and calls you have with us.

Why we use it, and on what legal basis

  • To reply to your inquiry, prepare your free audit and discuss working together: steps taken at your request before entering into a contract.
  • To deliver services to our clients: performance of a contract.
  • To send you marketing emails: only with your consent, which you give by ticking the opt-in box. You can withdraw it at any time.
  • To contact businesses whose details are publicly available, about services that may be relevant to them: our legitimate interest in developing our business. You can object at any time and we will stop.
  • To measure and improve our website and advertising: your consent (via the cookie banner).
  • To meet legal obligations, such as accounting and tax rules: legal obligation.

We may prioritise incoming inquiries internally based on the information you provide (for example, budget range). This does not produce legal or similarly significant effects for you.

Who we share it with

We use trusted service providers who process data on our behalf, under contracts that protect it:

  • Hostinger: website hosting
  • Brevo: emails (confirmation emails, newsletters) and call booking
  • Supabase: the database behind our internal customer management system
  • Google (Analytics, Tag Manager, Ads): website measurement and advertising, only with your consent
  • Meta (Facebook/Instagram): advertising measurement, only with your consent
  • Complianz: storing your cookie choices (installed on our own site, no data is sent to a third party)

We never sell your personal data.

International transfers

Some providers may process data outside Serbia and the European Economic Area, for example in the United States. Where this happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

  • Inquiries that don’t lead to a contract: up to 24 months after our last contact.
  • Client data: for the duration of the contract and as long as required by accounting and tax law afterwards.
  • Marketing consent: until you withdraw it.
  • Analytics data: up to 14 months.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time (this does not affect processing done before withdrawal). To exercise any of these rights, contact us at Show email address. We reply within 30 days.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs), or with the data protection authority in your EU country of residence.

Marketing emails

We only send marketing emails if you have opted in. Every email contains an unsubscribe link, and you can also withdraw consent by contacting us.

Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and reputable providers.

Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version.