1. Who controls your personal data
FRAMEBOX DOO Beograd, registration number 22015028, PIB 114380671, with its registered office at Jurija Gagarina 231, lokal 329, 11197 Beograd–Novi Beograd, Republic of Serbia, is the controller of personal data submitted through the nordbox.digital website and its related subdomains.
Questions about privacy or requests concerning personal data can be sent to info@nordbox.one.
2. Data we process
When you use a contact or request form, we process the information you provide: your email address, the subject of the request and the message itself. Our hosting and security systems may also record limited technical information such as the IP address, browser information, time of access and the requested page.
Please do not include passwords, payment card details, identification documents, health information or other sensitive personal data in a message unless we specifically request it through an appropriate secure channel.
3. Why we process data
Depending on the context, processing is based on your request, performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the service, or consent where consent is specifically required.
4. Recipients and international transfers
Access is limited to authorised FRAMEBOX personnel and service providers that operate the website, communications and supporting infrastructure where access is necessary for their work. We do not sell personal data. If data is transferred outside the Republic of Serbia, we use the safeguards required by applicable data protection law.
5. Retention
We retain enquiries and related correspondence only for as long as reasonably necessary to answer the request, provide the relevant service, protect our legitimate interests and meet legal or contractual obligations. Technical logs are retained according to operational and security needs.
6. Cookies
The website may use technical cookies that are necessary for functionality, session handling and security. We do not intentionally use advertising or behavioural-profiling cookies on the public website. If non-essential analytics or marketing technologies are introduced, the relevant notice and consent controls must be provided before they are activated.
7. Your rights
Subject to the conditions of applicable law, you may request access to your personal data, correction, deletion, restriction of processing or data portability, and you may object to processing. Where processing is based on consent, consent may be withdrawn without affecting processing carried out before withdrawal.
You may send a request to info@nordbox.one. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.
8. Security and updates
We apply organisational and technical measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. This Privacy Policy may be updated when our services, processing activities or legal obligations change.