Privacy Policy

Last updated: 8 September 2026

Who we are

Residence and Work Permits Serbia is a consulting company based in Novi Sad. We help foreign nationals, their families and their employers with residence permits, work permits, company formation, property purchase and related administrative procedures in the Republic of Serbia.

For the purposes of data protection law, we are the controller of the personal data described in this policy. You can reach us at:

• Address: Tekelijina 26, 21000 Novi Sad, Serbia
• Email: respermitserbia@gmail.com
• Phone: +381 63 164 4932

We process personal data in line with the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, no. 87/2018). Where the General Data Protection Regulation (EU) 2016/679 applies to a particular client or visitor, we apply that standard as well.

What data we collect

Data you send us through the website

When you fill in the contact form or write to us by email, we receive the information you choose to give us. Usually that is your name, your email address, your phone number and a description of your situation. We do not ask for documents at that stage and we would rather you did not attach them to a first message.

Data you give us when you become a client

Once we start working on a case, we need the documents that the procedure itself requires. Depending on the service, that can include passport data, birth and marriage certificates, criminal record certificates, diplomas, employment contracts, proof of accommodation, proof of funds, health insurance and company documents. Some of this is data that the law treats as sensitive, for example health insurance details. We collect it only because the authority handling your case requires it, and only for as long as that case needs it.

Data your browser sends

Our hosting provider records standard server log data such as the IP address, the date and time of the request, the page requested and the browser type. This happens automatically for every website and we use it only to keep the site running and secure.

Cookies

The website uses a small number of cookies. They are described in our Cookie Policy.

Why we process your data and on what legal basis

• To answer your enquiry. When you contact us we use your details to reply and to work out whether we can help. The basis is your request and our legitimate interest in responding to it.
• To provide the service you engaged us for. Preparing an application, communicating with your employer, submitting documents to the authorities. The basis is the performance of our agreement with you.
• To comply with our own legal obligations. Accounting and tax records, and any obligation that Serbian law places on us as a company. The basis is legal obligation.
• To keep the website secure. Server logs and spam filtering. The basis is our legitimate interest.

Where we rely on consent, for example if you ask us to keep your file open for a future application, you can withdraw that consent at any time.

Who we share your data with

We do not sell personal data and we do not share it for advertising. We disclose it only where the work requires it:

• The authorities that decide your case, in particular the Ministry of Interior of the Republic of Serbia and, in employment cases, the National Employment Service.
• Certified court interpreters and translators, where a document has to be translated.
• Notaries public, where a document has to be certified.
• Independent lawyers, where a case needs legal representation. We are a consulting company and not a law firm, so in those situations we bring in a lawyer with your knowledge.
• Your employer or a company representative, where the employer is a party to the procedure and you have asked us to communicate with them.
• Our hosting provider and our email provider, who process data on our behalf as part of running the website and our correspondence.
• Our accountant, for invoicing and bookkeeping.

Transfers outside Serbia

Our email is provided by Google. That means correspondence may be stored on servers outside the Republic of Serbia, including in the European Union and the United States, under the safeguards that provider applies. If you would rather send sensitive documents another way, tell us and we will agree on a different channel.

How long we keep it

• Enquiries that do not turn into a case: up to twelve months, then deleted.
• Client files: for the duration of the engagement and afterwards for as long as we may need to prove what was done, or for as long as accounting and tax law requires us to keep the related records.
• Server logs: for the short retention period applied by our hosting provider.

Your rights

Under Serbian data protection law you have the right to:

• ask what data we hold about you and get a copy of it,
• have inaccurate data corrected,
• have data erased where there is no longer a basis for keeping it,
• ask us to restrict processing, or object to it,
• receive data you gave us in a portable form,
• withdraw consent where processing is based on consent.

Write to respermitserbia@gmail.com and we will respond within the deadline the law sets. If you are not satisfied with how we handled your request, you can complain to the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, office@poverenik.rs.

Security

We keep documents only where we need them, we do not leave client files on shared devices, and access is limited to the people working on your case. No system is perfect, so if you believe your data has been exposed, tell us immediately and we will act on it.

Children

The website is aimed at adults. We process data about children only inside family reunification cases, where the parent or legal guardian provides it.

Changes to this policy

If we change how we handle data we will update this page and change the date at the top. Material changes will be pointed out on the page itself.

Questions

Any question about this policy can go to respermitserbia@gmail.com or to +381 63 164 4932.