Nexum Advisory d.o.o. Belgrade · Last updated: 13 August 2026
Nexum Advisory d.o.o. Belgrade, Pivljanina Baja 41, 11000 Belgrade, Republic of Serbia. Registration number: 22322168. VAT ID: 115861724. Email: office@nexumadvisory.rs. Website: nexumadvisory.rs
Nexum Advisory d.o.o. is the data controller within the meaning of the Serbian Personal Data Protection Act („Official Gazette RS", No. 87/2018). The company is not required to appoint a data protection officer under Article 56 of the Act. For any questions regarding the processing of your data, please contact office@nexumadvisory.rs.
From the contact form we collect: full name, position in the company, company name and email address (mandatory), phone number and description of your situation (optional), and area of interest.
Please note that the „description of your situation" field should not contain confidential business information, trade secrets or personal data of third parties. For exchanging such information we will agree an appropriate, secure communication channel.
When you visit the website, subject to your prior consent, technical data is collected through analytics tools: IP address in truncated form, device and browser type, operating system, pages visited, time spent on the site, referral source and approximate geographic location at city level. Without your consent this data is not collected.
Responding to your enquiry and establishing business contact — legal basis is consent, Article 12(1)(1) of the Act. Preparing and delivering a service proposal — steps taken prior to entering into a contract, Article 12(1)(2). Website analytics and improvement — consent, Article 12(1)(1). Compliance with statutory tax and accounting obligations — legal obligation, Article 12(1)(3).
Analytics data is collected in anonymised form (truncated IP address) and is not used for advertising. We do not use your data for automated decision-making, profiling or unsolicited commercial communications.
Data entered into the contact form is retained for 24 months from our last contact with you, after which it is permanently deleted. If a service agreement is concluded on the basis of your enquiry, data is retained in accordance with the retention periods prescribed by Serbian tax and accounting regulations, generally ten years from the end of the financial year. Data collected through analytics is retained for a maximum of 14 months.
We do not sell your data and do not transfer it to third parties for their own marketing purposes. Data may be accessible to the following processors, strictly to the extent necessary for the provision of their service: Webflow, Inc. (website hosting and receipt of form submissions, USA) and Google Ireland Limited (website analytics via Google Analytics, EU and USA).
Transfers of data to the United States are made on the basis of standard contractual clauses and appropriate safeguards, in accordance with Article 65 of the Act. Data may also be provided to competent state authorities where required by law.
Cookies are small text files stored on your device when you visit the website. Essential cookies enable the basic functioning of the site and remember your cookie preference; they are set without consent because the site cannot operate without them.
Analytics cookies are set only after you give consent by clicking „Accept" in the cookie notice. If you choose „Essential only", these cookies are not set. We do not use marketing cookies or cookies for advertising personalisation. You may change your choice at any time by deleting cookies in your browser settings, after which the notice will be shown again.
Under the Act you have the right of access to your data, the right to rectification and completion, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, and the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Requests should be submitted to office@nexumadvisory.rs. We will respond within 30 days of receiving the request. Where a request is complex, the deadline may be extended by a further 60 days, of which you will be notified.
If you believe that your data is being processed contrary to the Act, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs, office@poverenik.rs
We apply organisational and technical protection measures proportionate to the risk: encrypted data transmission (HTTPS/TLS), access to data limited strictly to persons who require it in order to perform their work, and contractually governed relationships with processors.
No system of data transmission over the internet is absolutely secure. In the event of a personal data breach likely to result in a high risk to the rights and freedoms of individuals, we will notify you and the Commissioner in accordance with Articles 52 and 53 of the Act.
We may amend this policy from time to time. The date of the last update is shown at the top of the document. In the event of material changes affecting the purpose of processing or your rights, we will notify you in an appropriate manner.