Privacy policy

Last updated: 9 November 2026

1. Who is responsible

Mihajlo Randjelovic, trading as Veracess Compliance, Pere Djurkovica 24a, 11211 Belgrade, Serbia, e-mail veracess.compliance@gmail.com ("we"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR where applicable, and the Serbian Law on Personal Data Protection.

2. This website

This website uses no cookies, no analytics and no tracking. Our hosting provider processes technical data (IP address, time, requested page) in server logs to deliver the site securely; these logs are deleted automatically according to the provider’s retention policy. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

3. When you contact us

If you e-mail us or request a free check, we process your name, e-mail address, company, website and message to answer your request and, if you wish, to prepare an offer (Art. 6(1)(b) GDPR). We keep this correspondence for up to 3 years after our last contact, or longer where accounting law requires it for clients.

4. Business contacts and outreach

We may contact businesses about accessibility services. For this we use business contact details (name, job title, company, business e-mail address, company website) that are publicly available, for example on company websites or professional networks. Legal basis: our legitimate interest in offering relevant B2B services (Art. 6(1)(f) GDPR). We only contact people in their professional role about topics relevant to it, and every message includes a simple way to opt out.

If you tell us you do not want to be contacted, we stop immediately and keep only your e-mail address on a suppression list so that we never contact you again.

If you do not reply, we delete your outreach contact data no later than 12 months after our last message.

When we run a free accessibility check, we load public pages of a company website like a normal visitor. We do not collect personal data from those pages.

4a. Client projects

When we fix a client’s online shop, we work with staff/collaborator access and may incidentally see personal data of the client’s customers (for example, orders in the shop admin). We do not copy, export or use such data, we process it only on the client’s instructions and only as far as the work requires, and on request we sign a data processing agreement (Art. 28 GDPR).

5. Who receives data

We use the following processors: our e-mail provider Google (Gmail) and our website host Cloudflare Pages. Some of these providers may process data outside the EU/EEA; where they do, transfers are based on an adequacy decision or the European Commission’s standard contractual clauses. Serbia is not covered by an EU adequacy decision; we apply the safeguards of the GDPR to all data we process.

6. Your rights

You can request access to, correction or deletion of your data, restriction of processing, and data portability, and you can object at any time to processing based on legitimate interest, including direct marketing. Write to veracess.compliance@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or with the Commissioner for Information of Public Importance and Personal Data Protection of Serbia.

7. Automated decisions and security

We do not use automated decision-making or profiling. We protect data with strong passwords, two-factor authentication on all accounts, and encrypted connections (HTTPS).

8. Changes

We may update this policy; the current version is always available on this page.