Privacy Notice

1. Data controller for this website

For data collected via identigy.com (contact forms, cookies, analytics) the controller is Identigy LLC (the "Controller"), a Serbian limited liability company. Identity and registration details:

Processing is carried out under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") to the extent Identigy offers goods or services to data subjects in the European Economic Area or monitors their behaviour within the EEA (Art. 3(2) GDPR), and under the Serbian Personal Data Protection Law (Zakon o zaštiti podataka o ličnosti, "Official Gazette of RS", No. 87/2018), which is materially harmonised with the GDPR. No Data Protection Officer is currently appointed — please address enquiries to the Controller directly.

2. Personal data we process

• Identification: full name, organisation name, role.
• Contact: business email, phone, country / region.
• Communication: free-form messages submitted via our forms.
• Technical: IP address (for anti-abuse), browser metadata.

3. Purposes and legal bases

• Replying to enquiries — consent (Art. 6(1)(a) GDPR) and pre-contractual measures (Art. 6(1)(b)).
• Performing services and contracts — Art. 6(1)(b) GDPR.
• Marketing communications — consent (Art. 6(1)(a)), withdrawable at any time.
• Legal compliance — Art. 6(1)(c) GDPR.

4. Recipients and processors

Form submissions are stored in our CRM operated by HubSpot, Inc. (USA). Transfers to the United States rely on the EU-US Data Privacy Framework and supplementary safeguards. Email delivery is operated by Resend (Resend, Inc.). Hosting is provided by Vercel Inc. with EU edge regions. A list of processors is available on request.

5. International transfers

Where personal data is transferred outside the European Economic Area (United States), we rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.

6. Retention

Contact submissions are retained for up to 3 years from the last interaction or until consent is withdrawn. Candidate CVs are retained for 6 months from submission.

7. Your rights (GDPR Articles 15–22)

You have the right to access, rectify, erase, restrict processing, object to processing, data portability, and to withdraw consent at any time without affecting the lawfulness of prior processing. Submit a request to info@identigy.com with the subject line "GDPR request". We respond within one month from receipt of the request (extendable by two further months in complex cases — Art. 12(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority:

• In the Republic of Serbia — Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti): www.poverenik.rs
• In the European Economic Area — the data protection authority in your country of residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

8. Security measures

Technical and organisational measures appropriate to the risk (GDPR Art. 32) are described separately in our Security Statement. It covers TLS, secrets management, access controls, secure development lifecycle, subprocessors with their certifications, incident response (Art. 33–34) and our responsible-disclosure contact.

9. Contact

Identigy LLC
Djure Jaksica 1, 11000 Belgrade-Stari Grad, Republic of Serbia
Company registration number: 21952524 · Tax identification number: 113977803
Email: info@identigy.com

This notice is provided for general information and is not a substitute for legal advice. The Controller may update this notice from time to time; the "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted in the change log available on request.