Privacy Policy
Last updated: December 2025
1. Controller
CYBX IT (Company name: CYBX DOO)
Zmaj Jovina 1, 21300 Beočin, Serbia
Managing Director: Goran Matev
Email: office@cybx-it.com
2. General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
3. Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Controller" section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us. This may, for example, be data you enter into a contact form. Other data is collected automatically or with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data is used to analyze your user behavior to continuously improve our website. Data collected through the contact form is used to process your inquiry and to contact you.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of the processing of your personal data under certain circumstances.
4. Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
What data is collected?
Name, company name, email address, phone number (optional), company size, description of your IT challenge, information about your preference for a long-term partnership
Legal basis:
The processing of this data is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. An informal message via email to us is sufficient. The legality of data processing operations carried out before the revocation remains unaffected by the revocation.
Storage duration:
The data you entered in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies.
5. HubSpot CRM
We use HubSpot CRM to manage our customer relationships. When you fill out the contact form, your data is transmitted to HubSpot and stored there.
What data is transmitted to HubSpot?
All data entered in the contact form (name, email, company, phone, company size, IT challenge, long-term partnership preference) is transmitted to HubSpot and linked to your contact profile there.
Legal basis:
The use of HubSpot is based on your consent according to Art. 6 para. 1 lit. a GDPR.
Storage location:
HubSpot stores the data in data centers within the European Union. A data processing agreement (DPA) has been concluded with HubSpot in accordance with Art. 28 GDPR.
Storage duration:
The data is stored at HubSpot until you request deletion or revoke your consent.
More information:
Details on data processing by HubSpot can be found in HubSpot's privacy policy.
6. Email Sending and Confirmations
After submitting the contact form, you will receive an automatic confirmation email to the email address you provided.
Email provider:
Email sending is done via a self-hosted email server hosted at Hetzner Online GmbH in Germany.
What data is processed?
Your email address, your name, and the content of the confirmation message are processed for sending the confirmation email.
Legal basis:
Processing is based on your consent (Art. 6 para. 1 lit. a GDPR).
Storage duration:
Email copies are stored on the server for technical purposes (delivery proof) and automatically deleted after 90 days at the latest.
7. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies and similar technologies to analyze visitor usage of the website.
What data is collected?
The information generated by cookies about your use of this website (including your IP address) is transmitted to and stored on a Google server. Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage.
IP anonymization:
We have activated IP anonymization. This means your IP address is shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Legal basis:
The use of Google Analytics is based on your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time.
Objection to data collection:
You can prevent collection by Google Analytics by setting an opt-out cookie that prevents the collection of your data on future visits to this website. Alternatively, you can install the browser add-on to deactivate Google Analytics .
More information:
More information on how Google Analytics handles user data can be found in Google's privacy policy.
8. Google Fonts
This website uses Google Fonts, provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required fonts into its browser cache to display texts and fonts correctly.
Legal basis:
The use of Google Fonts is based on our legitimate interest in a uniform and appealing presentation of our website (Art. 6 para. 1 lit. f GDPR).
What data is transmitted?
For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that this website was accessed via your IP address.
9. SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.
10. Your Rights as a Data Subject
Right to access:
You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data.
Right to rectification:
You have the right to request the correction of inaccurate personal data concerning you.
Right to erasure:
You have the right to request the deletion of your personal data, provided that the legal requirements are met.
Right to restriction of processing:
You have the right to request restriction of the processing of your personal data, provided that the legal requirements are met.
Right to object:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Right to data portability:
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
Right to lodge a complaint:
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
Exercising your rights:
To exercise your rights, you can contact us at any time using the contact details provided above.
11. Changes to the Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.