PRIVACY POLICY AND PERSONAL DATA PROCESSING POLICY

Last updated: 25 August 2026

CIBUS d.o.o. Beograd (hereinafter referred to as “CIBUS”) respects the privacy of visitors to its website and is committed to protecting the personal data it collects and processes.

This Privacy Policy and Personal Data Processing Policy explains what personal data CIBUS may collect through www.cibus.rs, the purposes for which such data are used, the legal bases for processing, how long the data are retained, and the rights that data subjects may have in relation to their personal data.

CIBUS d.o.o. is a company registered in the Republic of Serbia and conducts business with customers, suppliers and business partners in domestic and international markets.

The processing of personal data is carried out in accordance with the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of the Republic of Serbia”, No. 87/2018) and, where applicable, other applicable data protection laws and regulations governing the specific processing activity, including the General Data Protection Regulation of the European Union (GDPR – Regulation (EU) 2016/679), where the conditions for its application are met.

1. Data Controller

The data controller is:

CIBUS d.o.o. Beograd
Konstantina Filozofa 8
11000 Belgrade, Serbia

Company Registration Number: 21299774
Tax Identification Number (PIB): 110110977

E-mail: info@cibus.rs

For any questions regarding the protection and processing of personal data, you may contact us at the above e-mail address.

2. What Personal Data Do We Collect?

Through www.cibus.rs, we may collect personal data that you voluntarily provide to us, particularly through our contact form.

Such data may include:

• company name;
• address;
• city;
• country;
• telephone number;
• e-mail address;
• the content of your enquiry or other information you voluntarily provide.

When using our website, certain technical and statistical information may also be collected through Google Analytics and cookies, including information about how the website is used, the device, operating system, web browser, IP address or technical identifiers associated with it, as well as other information that may be collected through analytics technologies.

CIBUS does not intentionally collect special categories of personal data through its contact form. Please do not provide sensitive personal data through the contact form unless such data are necessary for processing your enquiry.

3. For What Purposes Do We Use Personal Data?

We may process personal data for the following purposes:

• responding to your enquiries and requests;
• establishing and maintaining business communication;
• preparing quotations and providing information about our products and services;
• establishing and maintaining business relationships with customers, suppliers and business partners;
• taking steps at your request prior to entering into a contract;
• improving the content, functionality and security of our website;
• analysing the use of our website;
• complying with legal obligations;
• protecting the rights and legitimate business interests of CIBUS.

4. Legal Basis for Processing

CIBUS processes personal data where there is an appropriate legal basis for such processing, including:

• the consent of the data subject, where consent is required;
• taking steps at the request of the data subject prior to entering into a contract;
• performance of contractual obligations;
• compliance with legal obligations applicable to CIBUS;
• pursuing the legitimate interests of CIBUS or third parties, where such interests do not override the rights and freedoms of the data subject.

 Where processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Google Analytics and Cookies

The website www.cibus.rs uses Google Analytics, a service provided by Google, to analyse how visitors use the website, monitor website traffic statistics, and improve the content and functionality of the website.

Google Analytics uses cookies and similar technologies that enable the collection of information about the use of the website.

Cookies are small text files that may be stored on a user’s device when visiting a website.

The following Google Analytics cookies are used on www.cibus.rs:

In addition to Google Analytics cookies, the website may use technical cookies necessary for the proper functioning of the website, including WordPress cookies. The retention period of such cookies depends on the type and purpose of the specific cookie.

Depending on the website settings and your device, Google Analytics may process certain technical and statistical information associated with your visit to the website.

You can control the use of cookies through your web browser settings and, where available, through the cookie management mechanisms provided on our website.

For more information about how Google processes data, you may refer to Google’s Privacy Policy.

6. Who May We Share Personal Data With?

CIBUS does not sell, rent or commercially provide personal data to third parties.

Personal data may be accessible to:

• authorized employees and other authorized persons within CIBUS;
• providers of IT and technical services, including website hosting and maintenance providers;
• providers of analytics services, including Google Analytics;
• other service providers engaged by CIBUS where access to personal data is necessary for the provision of a particular service;
• competent government authorities where required by law or where there is another appropriate legal basis.

Access to personal data is limited to the data necessary to fulfil the relevant purpose.

7. International Transfers of Personal Data

Given the international nature of CIBUS’s business and the use of certain technological and business services, personal data may, where necessary and permitted by applicable law, be processed or transferred to other countries.

Where personal data are transferred to a country that does not provide an adequate level of protection under applicable law, CIBUS will implement appropriate legal, technical and organisational safeguards and transfer mechanisms as required by applicable legislation.

8. How Long Do We Retain Personal Data?

CIBUS retains personal data only for as long as necessary to fulfil the purpose for which they were collected, unless a longer retention period is required by law or is necessary for the establishment, exercise or defence of legal claims.

The retention period may depend on:

• the nature and content of the enquiry;
• the duration of business communication;
• the duration of the business relationship;
• legal requirements concerning the retention of records;
• applicable limitation periods relevant to the establishment or defence of legal claims.

After the applicable retention period expires, personal data are deleted, anonymised or their further processing is restricted in accordance with applicable law.

9. Data Security

CIBUS implements appropriate technical and organisational measures to protect personal data against unauthorized access, loss, misuse, alteration, destruction or unauthorized disclosure.

Access to personal data is restricted to authorized persons who require such access in order to perform their duties.

Although CIBUS takes appropriate measures to protect personal data, no system for transmitting or storing data over the internet can guarantee absolute security.

10. Rights of Data Subjects

In accordance with applicable law, data subjects may have the right to:

• obtain confirmation as to whether their personal data are being processed;
• request access to their personal data;
• request the rectification of inaccurate or completion of incomplete personal data;
• request the erasure of personal data where the applicable legal requirements are met;
• request restriction of processing;
• object to certain types of processing;
• request data portability, where applicable;
• withdraw consent where processing is based on consent.

To exercise your rights, you may contact us at:

info@cibus.rs

CIBUS will respond to requests in accordance with the deadlines and other requirements prescribed by applicable law.

11. Right to Lodge a Complaint

If you believe that your personal data are being processed in violation of applicable laws and regulations, you have the right to lodge a complaint with the competent data protection authority.

In the Republic of Serbia, the competent authority is:

Commissioner for Information of Public Importance and Personal Data Protection

15 Bulevar kralja Aleksandra

11000 Belgrade, Republic of Serbia

Registration Number: 17585641

Tax Identification Number (TIN): 103641774

Contact: https://poverenik.rs/kontakt/

If the processing of your personal data is subject to the GDPR or the data protection laws of another country, you may also have the right to lodge a complaint with the competent supervisory authority in that country or region, in accordance with applicable laws and regulations.

12. Changes to This Privacy and Personal Data Processing Policy

CIBUS may periodically amend or update this Policy to reflect changes in its business activities, the technologies it uses, or applicable laws and regulations.

The current version of this Policy will be available on www.cibus.rs, together with the date of the latest update.

13. Contact

For any questions regarding this Privacy Policy and Personal Data Processing Policy or the way in which CIBUS processes personal data, you may contact us at:

CIBUS d.o.o. Beograd
Konstantina Filozofa 8
11000 Belgrade, Serbia

E-mail: info@cibus.rs