1. Who we are
Prozone AI DOO is the controller of the personal data processed through this website. In practice that means we decide what is collected here and what happens to it.
- Company: Prozone AI DOO
- Registered office: Novo selo 3, 75, Sremska Kamenica, Republic of Serbia
- Registration number: 22141694 · Tax ID (PIB): 115321246
- Email: office@prozoneai.com
We have not appointed a Data Protection Officer, because we are not required to. Anything to do with personal data reaches a person directly at the email address above.
This policy covers prozoneai.com. Where we work with a client under a signed agreement, the handling of any data involved in that work is governed by that agreement rather than by this page.
2. What we collect and why
There is no account to create on this site and no login. Most visitors never give us any personal data at all. The table below covers everything we do process.
| Data | Why we process it | Legal basis | Kept for |
|---|---|---|---|
| Contact form: name, email address, company, topic, engagement type, data type, timeline, and your message | To read your enquiry and reply to it, and to take the steps you are asking us to take before any agreement | Steps taken at your request prior to entering into a contract; our legitimate interest in responding to business enquiries | 24 months from our last exchange |
| Email and phone correspondence you start yourself | To hold the conversation you began and keep a record of what was agreed | Same as above | 24 months from our last exchange |
| Server and security logs: IP address, browser user agent, timestamp, requested URL | To deliver the site, keep it available, and detect abuse and attacks | Our legitimate interest in operating and securing the site | Short-term, per our hosting provider's log retention |
| Analytics: pages viewed, approximate location, device and browser type, and an analytics identifier | To see which pages are actually useful and where the site fails people | Your consent | Up to 14 months |
| Interaction recording: mouse movement, clicks, scrolling and page interactions, replayed as an anonymised session | To see where the site is confusing or broken, in a way page counts alone cannot show | Your consent | Up to 13 months |
| Advertising measurement: interactions with the page and an advertising identifier | To measure whether an advertising campaign reached the right people | Your consent | Up to 3 months |
We ask for nothing in the contact form that we do not need in order to give you a useful first reply. Only your name and email address are required; everything else is optional. Please do not send confidential material, or personal data about other people, in a first message to us.
3. Cookies and tracking
Cookies are small files a website stores in your browser. Local storage works similarly, but the data stays in your browser and is never sent automatically with each request. We use both, in three categories.
Categories
- Strictly necessary. Needed for the site to work and to remember the cookie choice you make. These cannot be switched off, and we do not ask for consent to them.
- Analytics. Aggregate measurement of how the site is used, and anonymised recordings of how pages are interacted with. Off until you accept.
- Marketing. Measurement of our advertising campaigns. Off until you accept.
Before you choose
Until you make a choice in the cookie banner, no analytics or marketing cookies are set and no analytics or advertising identifiers are collected. Google Consent Mode is initialised in a denied state on every page before any tag loads. The Meta and Microsoft tags do not read that signal, so they are separately instructed to withhold consent before they can run. The only thing stored before you decide is nothing at all; the record of your decision is written once you make it.
What we set
| Name | Set by | Purpose | Type | Duration |
|---|---|---|---|---|
prozone_consent_v1 | Prozone AI | Remembers your cookie choice so you are not asked again | Local storage | 12 months |
_ga | Distinguishes visitors for analytics | Cookie | 2 years | |
_ga_Q8ET11XSDY | Keeps analytics session state | Cookie | 2 years | |
_clck | Microsoft | Identifies a returning visitor for Clarity | Cookie | 1 year |
_clsk | Microsoft | Groups a visit's page views into one Clarity session | Cookie | 24 hours |
_fbp | Meta | Campaign measurement across the site | Cookie | 3 months |
_fbc | Meta | Records the ad click that brought you to the site | Cookie | 3 months |
Google and Microsoft cookies are set only after you accept analytics. Meta cookies are set only after you accept marketing.
Changing your mind
The banner appears once, on your first visit, and your answer is remembered for 12 months. To change it before then, clear this site's cookies and site data in your browser. Your stored choice is removed along with them, and the banner appears again the next time you visit.
You can also block or delete cookies in your browser settings at any time, and most browsers let you refuse third-party cookies outright. Doing so works independently of the choice you make here, and takes effect immediately.
4. Who we share data with
We do not sell personal data and we do not trade it. A small number of service providers process data on our behalf, under contract and on our instructions.
| Recipient | What they do for us | Where | Basis for transfer |
|---|---|---|---|
| Cloudflare | Hosting, content delivery and protection against attacks | Global network, including the United States | Standard contractual clauses |
| Tag Manager and Google Analytics 4, and delivery of the site's web fonts | European Union and the United States | Standard contractual clauses, EU-US Data Privacy Framework | |
| Microsoft | Clarity: heatmaps and session replay, to see where the site confuses people | European Union and the United States | Standard contractual clauses |
| Meta | Campaign measurement and audience building | European Union and the United States | Standard contractual clauses, EU-US Data Privacy Framework |
We may also disclose data where the law requires it, or to establish or defend a legal claim. We do not carry out profiling or automated decision-making that produces legal effects for you.
Web fonts are loaded from Google's servers, which means your IP address reaches Google when a page loads. This happens before any consent, because it is part of rendering the page. If you would rather avoid it, most browsers and privacy extensions can block that request.
5. Transfers and retention
Some of the providers above process data outside the Republic of Serbia, including in the United States. Those transfers rely on standard contractual clauses and, where applicable, the EU-US Data Privacy Framework, in line with Article 65 of the Serbian Personal Data Protection Act and Chapter V of the GDPR.
Retention periods are set out in the table in section 2. In short: enquiries are kept for 24 months from the last exchange, so we can pick up a conversation where it left off; logs are kept briefly; analytics data expires on the schedule above. Where you withdraw consent, the related data stops being collected immediately and existing records expire on their normal schedule.
6. Your rights
In relation to your personal data you have the right to:
- ask what we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have data erased, where we have no continuing reason to keep it;
- ask us to restrict how we use it while a question is being resolved;
- receive the data you gave us in a portable, machine-readable form;
- object to processing based on our legitimate interest;
- withdraw consent at any time, without affecting anything done before you withdrew it.
Write to office@prozoneai.com and we will respond within 30 days. We do not charge for this, and we will not ask you for more identification than we need to be sure we are talking to the right person.
If you think we have handled your data badly, you can complain to the Serbian supervisory authority: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs. If you are in the European Union, you may complain to the supervisory authority in your own country instead. We would rather you came to us first, but that is your choice, not a condition.
This site is aimed at organizations and professionals. It is not directed at children, and we do not knowingly collect data from anyone under 15.
7. Security
The site is served over HTTPS and form submissions are encrypted in transit. Enquiries land in a mailbox that only the people who need to answer them can reach. We keep as little as possible for as long as necessary, which is the part of security that tends to matter most.
We make no claim to hold a formal security certification for this website. Where a client engagement requires a specific security posture, that is agreed and documented in the engagement itself.
8. Changes and contact
If this policy changes, the updated version appears on this page with a new date at the top. Where a change materially affects how we handle your data, we will say so clearly rather than quietly reissuing the document.
For anything in this policy, write to office@prozoneai.com, or to Prozone AI DOO, Novo selo 3, 75, Sremska Kamenica, Republic of Serbia.