Privacy notice.

The controller is FILIP VOLF PR DEUS INŽINJERING, Leskovac, Serbia — the company behind the public brand DEUS Engineering (registration number 68649820, tax ID 115805820). For anything concerning your data, write to contact@deusengineering.com.

This notice covers the contact form on www.deusengineering.com, email you send to contact@deusengineering.com, and the aggregate measurements that keep this site fast. Pametni Advokat is a separate service with its own information on data protection at pametniadvokat.rs.

Only what you send us, and the minimum needed to deliver it safely:

• Contact form — the details you enter (such as your name, email address and message). They are validated on the server and delivered to our mailbox by email; we do not store form submissions in a database.
• Email to contact@deusengineering.com — the message, sender and recipient addresses, subject, technical headers and any attachments.
• Abuse protection — a SHA-256 hash of your IP address, used to rate-limit form submissions and kept for at most one hour. If a shared rate-limit store is enabled, the hash is held there (Upstash) under the same limit; otherwise it stays in the memory of the server function.
• Application logs — the outcome of a request and a request identifier only, never the content of your message. Like any web host, Vercel processes your IP address to serve the site.
• Analytics — Vercel Web Analytics and Speed Insights count page views and measure performance in aggregate, without cookies. This site sets no cookies and uses no advertising or cross-site tracking.

Mail sent to contact@deusengineering.com is received and stored by Resend. We then receive a sanitised notification of the message in our mailbox. Attachments are not forwarded: the notification lists their details (such as file name and size), and the files stay in our Resend account, which requires sign-in.

We do not use your data for advertising, profiling or automated decisions, and we do not sell it. We use it only:

• to read and answer your inquiry, and to prepare or perform a contract you ask about;
• to keep the form and mailbox working and protected from abuse and spam;
• to understand, in aggregate, how the site performs and which pages are used.

We process personal data under the Serbian Law on Personal Data Protection (ZZPL, “Službeni glasnik RS” No. 87/2018) and, where it applies to you, the EU General Data Protection Regulation (GDPR):

• Inquiries about a project or engagement, and any contract that follows — Article 12(1)(2) ZZPL and Article 6(1)(b) GDPR: steps taken at your request before entering into a contract, and its performance.
• Other questions, abuse protection, request logs and aggregate analytics — Article 12(1)(6) ZZPL and Article 6(1)(f) GDPR: our legitimate interest in answering messages and running a secure, working website. You can object to this processing at any time.

We use a small number of providers that process data on our behalf:

• Vercel — hosting of this website and its server functions (including the contact form), plus Vercel Web Analytics and Speed Insights.
• Resend — delivery of contact-form messages to our mailbox, and receipt and storage of mail sent to contact@deusengineering.com; our email is processed in its EU region (AWS eu-west-1, Ireland).
• Google — the mailbox (Gmail) in which we read and answer inquiries.

You can ask us to delete your messages at any time.

• Inquiries and correspondence — only as long as needed to handle the inquiry and any business relationship that follows, unless a legal obligation requires longer. This applies both to our mailbox and to the copies of received mail held in our Resend account.
• Rate-limit hashes — at most one hour.
• Analytics — aggregate figures only, which do not identify you.

Vercel, Resend and Google are companies based in the United States. Our email at Resend is processed in the EU (Ireland), but using these providers can involve access to data from the United States.

You have the following rights. To exercise any of them, write to contact@deusengineering.com; we may ask you to confirm your identity.

• access to your data and a copy of it (Art. 26 ZZPL / Art. 15 GDPR);
• correction of inaccurate data (Art. 29 / Art. 16);
• erasure (Art. 30 / Art. 17);
• restriction of processing (Art. 31 / Art. 18);
• data portability (Art. 36 / Art. 20);
• objection to processing based on legitimate interest (Art. 37 / Art. 21);
• not to be subject to decisions based solely on automated processing (Art. 38 / Art. 22) — we make no such decisions.

You can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia — www.poverenik.rs (Art. 82 ZZPL).

If you live or work in the EU/EEA, you can also complain to the data protection authority in your country (Art. 77 GDPR) — in Croatia, the Personal Data Protection Agency (AZOP, azop.hr). The European Data Protection Board lists all national authorities at edpb.europa.eu.

When our data handling changes, we update this notice and the date at the top of the page. Questions: contact@deusengineering.com.