Effective date: 29 September 2026

1. Who we are

This Privacy Policy explains how MYFORM DOO BEOGRAD-VOŽDOVAC (“MyForm”, “we”, “us”) processes personal data when you visit myform-design.com and contact us through the website.

The controller responsible for your personal data is:

MYFORM DOO BEOGRAD-VOŽDOVAC Jakova Galusa 11, Belgrade, Serbia Company registration number (MB): 21331040 Tax ID / VAT number (PIB): 110288306 Email: myformdesign@gmail.com

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018; the “Serbian Law”).

2. What data we collect

Contact form. When you send an enquiry, we collect your name, your email address and the description of your project that you enter in the form. Please do not include sensitive information, such as health data, in the project description.

Email correspondence. If you write to us or we reply to your enquiry, we process the content of that correspondence.

Technical data. When you visit the website, our hosting provider automatically processes the data needed to deliver the pages: IP address, date and time of access, browser type, operating system and pages visited.

Providing your data through the form is voluntary. Without a name and an email address, we cannot reply to your enquiry.

3. Why we use your data and on what legal basis

• Replying to your enquiry and preparing an offer. Data: name, email, project description. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR; Art. 12(1)(2) Serbian Law).
• Carrying out a project if we sign a contract. Data: contact and project data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR; Art. 12(1)(2) Serbian Law).
• Keeping records required by tax and accounting law. Data: contract and invoice data. Legal basis: legal obligation (Art. 6(1)(c) GDPR; Art. 12(1)(3) Serbian Law).
• Operating the website securely. Data: technical data. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR; Art. 12(1)(6) Serbian Law).

We do not use data from the form for newsletters or advertising. We do not sell your data, and we do not use automated decision-making or profiling.

4. Who receives your data

We share personal data only with the following service providers, which help us run the website and communicate with you:

• Webflow, Inc., San Francisco, USA — website hosting and processing of form submissions.
• Google LLC, Mountain View, USA — email service (Gmail) for receiving and answering enquiries.

We may also disclose data to public authorities, courts or professional advisers, such as accountants and lawyers, where the law requires it or where it is necessary to establish or defend legal claims.

5. Transfers outside the EU and Serbia

Webflow stores form submissions on servers in the United States, and Google may process email in the United States. Webflow, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. Its data processing agreement also includes the EU Standard Contractual Clauses. For data processed under Serbian law, the transfer relies on appropriate safeguards provided for by that law, such as standard contractual clauses.

6. How long we keep your data

• Enquiries that do not lead to a contract: deleted no later than 12 months after our last contact.
• Client and project data: kept for the duration of the contract and afterwards for as long as tax and accounting law requires (in Austria generally 7 years under § 132 of the Federal Fiscal Code; in Serbia as set by accounting regulations).
• Technical log data: kept by the hosting provider for a short period for security purposes, then deleted.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict processing;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw any consent you have given at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, email myformdesign@gmail.com. We will reply within one month of receiving your request.

You also have the right to lodge a complaint with a supervisory authority:

• Austria: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at
• Serbia: Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs
• or the authority in the EU country where you live or work.

8. Cookies

Our website uses only cookies that are technically necessary for it to work. We do not use analytics or advertising cookies.

9. Security

We protect your data with TLS encryption in transit and by limiting access to the people who need it to handle your enquiry.

10. Changes to this policy

We may update this policy when our services or the law change. The current version is always available on this page, with the date of the last update at the top.

Questions about this policy: myformdesign@gmail.com.