Privacy Policy

Last updated: 10 September 2026.

1. About this policy

This policy explains how JTM Software processes personal data of visitors to jtm.rs and of persons who contact us regarding our services. It applies to both the Serbian and English versions of the website. Additional notices and contractual provisions may apply to processing performed as part of a specific business project.

2. Who is responsible for your data

Data controller: GORAN MALIĆ PR IZDAVANJE OSTALIH SOFTVERA JTM.SOFTWARE ŽABALJ, trading as JTM Software.

Address: Svetog Nikole 132, 21230 Žabalj, Serbia.
Tax ID (PIB): 114503963; Registration number: 67629132.
Email for privacy matters: info@jtm.rs
Telephone: 062-506-078.

3. What data we process

When you use the contact form, you provide your name, email address, whether you are contacting us as an individual or a business, the selected type of service and the content of your message. If you contact us directly by email or telephone, we process the contact details and information you provide during that communication.

Please do not send passwords, payment card details, national identification numbers, health data or other sensitive information through the contact form unless it is necessary for your request.

When you visit the website, the hosting provider and related services may process technical data such as your IP address, access time, requested page, browser type and operating system. The hosting provider keeps access, error, security and mail logs for operation, diagnostics and system protection.

4. Why we use data and our legal basis

• Responding to enquiries and preparing an offer: data is used for communication and assessment of the requested solution. Where you contact us with a view to entering into a contract for yourself, processing is necessary to take steps at your request before entering into a contract. For general business enquiries and communication with company representatives, we rely on our legitimate interest in responding to requests and conducting business communication.
• Contractual and legal obligations: if cooperation is established, necessary data is processed to perform the contract and comply with applicable legal obligations.
• Website security: limited technical logs may be used to detect misuse, troubleshoot errors and protect systems, based on our legitimate interest.
• Website statistics and optional services: Google Analytics and other optional services are used only after the visitor makes a choice through the consent management mechanism. Consent can later be changed or withdrawn.

Providing data through the contact form is voluntary. Without a name, email address and description of your request, we may not be able to process or answer it. Data submitted through the contact form is used only to respond to your enquiry and discuss possible cooperation. We do not use it to send advertising or other marketing messages.

5. Cookies, analytics and Google services

The website uses WordPress and TranslatePress to provide content in two languages. Depending on configuration, cookies may be used for essential website functionality and to remember language preferences.

Google Analytics is implemented through the Site Kit plugin, and Google Fonts may also be loaded from an external service. These services may involve transmitting technical data to their provider. Google Analytics is used to analyse website usage, while Google Fonts is used for typography. On the contact page, an embedded Google Maps map has been replaced with an external link to Google Maps; when you open that link, you leave jtm.rs and Google’s privacy rules apply.

On your first visit, the website displays a consent notice. Functional cookies are used for essential website functions, while statistics and other optional categories require the visitor’s choice. You can later change your choice using the consent management option on the website. More detailed information about cookies is available in our Cookie Policy.

You can also manage cookies through your browser settings. Blocking certain cookies may affect some website functions. Information about Google’s processing is available in the Google Privacy Policy.

6. Who may access the data

Messages submitted through the contact form and business email are accessed only by the owner, Goran Malić, within the business. Technical service providers may process data only to the extent required to provide hosting, email and other services described in this policy.

The website hosting and business email service info@jtm.rs use Unlimited.rs. The primary hosting account is located in Belgrade, Serbia, while backups are redundantly stored in European Union countries. Technical service providers may access data only to the extent necessary to provide and maintain their services. Data may also be disclosed to competent authorities where required by law.

7. Processing outside Serbia

Use of international services, including Google, may involve processing of data outside the Republic of Serbia. Hosting backups are redundantly stored in European Union countries. Where data is processed by international service providers, appropriate safeguards are applied in accordance with applicable law and the providers’ rules. For information about recipients and safeguards, contact us at info@jtm.rs.

8. How long we keep data

We retain data only for as long as necessary for the relevant purpose and to comply with legal obligations. The following retention periods and criteria apply:

• Enquiries that do not result in cooperation: 12 months from the last communication, after which they are deleted. If specific correspondence must be retained because of a legal obligation or for the establishment, exercise or defence of a legal claim, it is kept only to the extent and for as long as that reason exists.
• Business and contractual documentation: retained for the periods required by applicable law and for as long as necessary to perform contracts, comply with legal obligations and protect legal interests.
• Server and security logs: mail and error logs are retained for at least 30 days; access and security logs at cPanel level are retained for a longer period in accordance with the hosting provider’s policy and technical requirements.
• Analytics data: Google Analytics is configured with a 2-month data retention period.
• Backups: created daily and retained for 50 days, including data deleted from the active system until it expires from the backup cycle.

9. Your rights

Subject to applicable law and the conditions for exercising each right, you may request access to your personal data, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent without affecting the lawfulness of processing carried out before withdrawal.

Send requests to info@jtm.rs. An appropriate identity check may be required to protect your data. We respond without undue delay and no later than 30 days; where permitted by law, this period may be extended by a further 60 days, with notice provided within the first 30 days.

If you believe your rights have been infringed, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection. Contacting us first is not a condition for lodging a complaint.

10. Security and automated decisions

We apply appropriate technical and organisational measures, including access controls and system protection. No internet transmission or storage system can provide absolute security.

Data submitted through the contact form is not used for solely automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to this policy

We will update this policy when the operation of the website, our processing activities or relevant obligations change. The date of the latest update will be shown on this page. For privacy questions, contact info@jtm.rs.