Privacy Policy

Version dated 18 September 2026

This policy describes the general rules for processing the personal data of visitors to rics.rs and people who contact RICS Consulting through the website and the contact details provided on it.

1. Who processes the data

The personal data controller is DOO ‘RICS Consalting’, operating under the RICS Consulting brand. For questions about data processing, write to admin@rics.rs. The company’s general contact is: office@rics.rs.

Processing takes account of applicable personal data protection legislation, including the Republic of Serbia’s Personal Data Protection Law — Zakon o zaštiti podataka o ličnosti. Other mandatory requirements apply where the relevant processing falls within their scope.

2. What data relates to an enquiry

The data depends on the fields completed and the content of your request. It may include your name, telephone number, email address, preferred contact method, selected service, questionnaire answers and information you include in your message.

For matters involving family relocation, you may provide the number of applicants and general information about your family. Documents and additional information needed for a particular service are requested separately from the initial enquiry as necessary.

A brief description of your goal is sufficient in the initial form. Do not include full passport details, banking details, medical documents or other information unnecessary for an initial response in the free-text message.

3. What the data is used for

• Responding to an enquiry: contacting you, clarifying your needs, preparing a plan and cost estimate or arranging a consultation.
• Preparing and performing a contract: taking necessary steps at your request and providing the agreed support.
• Operating the website: making forms and pages available, identifying errors, protecting the website and analysing its use.
• Mandatory requirements: fulfilling legal obligations and handling data protection requests.

Depending on the purpose, the basis is taking steps at your request before entering into a contract, performing a contract, a legal obligation, a legitimate interest subject to respect for your rights, or consent where required. Consent for one purpose does not authorise the use of data for any other purpose.

Requesting a consultation does not, by itself, constitute consent to marketing messages. The appropriate lawful basis applies to mailings and other separate purposes.

4. The website, technical data and external services

The website runs on the Tilda platform. When pages are opened or forms used, technical services may receive an IP address, browser and device information, the time of the request, the page address and technical identifiers. The data involved depends on the service used and the visitor’s action.

• Tilda: hosting pages and operating contact forms.
• Clientbase: a CRM is connected to the website to record enquiries and organise work with clients.
• Yandex Metrica: statistics on visits and website actions. Webvisor is enabled: a tool for analysing how visitors interact with a page, including clicks and scrolling.
• Google Analytics and Google Ads: analysing visits and recording successful form submissions to assess website and advertising performance.

The website also contains maps and links to external communication services. When you open an embedded map or follow a link to a messenger, that service’s processing is also governed by its own terms and privacy policy.

Technical and analytics services use cookies and similar technologies. You can restrict or delete cookies in your browser settings. This may affect some website functions. Browser settings do not change processing that has already taken place and do not replace consent where it is required.

More information on third-party tools: Tilda’s policy, Yandex’s policy, Google’s policy. Google also provides a Google Analytics opt-out tool for supported browsers.

Using a third-party technical service does not release RICS Consulting from its own data protection obligations. Questions about the data involved, recipients and specific processing can be sent to the contact listed in this policy.

5. Access to data and disclosure

Enquiry data is used to work on your request. Access is granted to the extent necessary to staff and contractors involved in handling the enquiry, and to providers of technical tools for the website and communications.

If providing a service requires documents to be sent to a specialist, translator, government authority, bank or another organisation, the scope and basis of that disclosure are determined by the specific task, agreed support and legal requirements.

Personal data must be transferred outside the country only on a basis provided by applicable law and with the necessary safeguards. This requirement also applies to the use of external technical infrastructure.

6. Retention and protection

Data is kept for no longer than necessary for the purposes of processing. The retention period takes into account handling the enquiry, performing the contract, statutory document retention periods and the need to protect the parties’ rights. Once the basis for retention ends, the data must be deleted or anonymised.

The controller must take organisational and technical protection measures appropriate to the nature of the data and the processing risks, restrict access and maintain accuracy. Please tell us if your contact details or other information you have provided changes.

7. Your rights

Where provided by law, you may request information about processing and access to your data, correct or supplement it, request erasure or restriction of processing, object to processing and exercise the right to data portability.

Where processing is based on consent, you may withdraw it. Withdrawal does not affect the lawfulness of processing carried out before it, or end processing for which an independent lawful basis remains.

Write to admin@rics.rs and describe your request in your own words. Where necessary, we may ask for information to verify your identity so that we do not disclose data to another person.

You may also contact the competent data protection authority or a court. In Serbia, supervision is carried out by the Commissioner for Information of Public Importance and Personal Data Protection.

8. Policy updates

The current version is published on this page with its update date. A material change to the purposes or manner of processing must be accompanied by the necessary information and consent where required.