Select your language
EN Select your language
Last updated: 5 November 2026
1. Controller
LBT company d.o.o., Igmanska 2, Belgrade, Serbia. Company ID (Matični broj): 06196225 · Tax ID (PIB): 100031138.
Contact: marko.tomasevic@lbt.rs · +381 63 773 5245. This policy applies to the website lbt.rs, including the “Request a free initial assessment” form and the contact form.
2. What we collect and why
| Data | When | Purpose | Legal basis |
|---|---|---|---|
| Your name, work email, your preferred start time (where asked) and the details of your enquiry | When you submit the “Request a free initial assessment” or contact form | To respond to your enquiry, prepare an initial assessment and contact you about our accounting & tax services | Steps taken at your request; our legitimate interest in business-to-business communication |
| Anti-spam verification data (via Google reCAPTCHA) | When you complete a form | To tell human visitors from bots and protect our forms from abuse | Our legitimate interest (security) |
| Technical data (IP address, browser, timestamps) in server logs | Automatically, on every visit | To deliver and secure the website | Our legitimate interest (security, delivery) |
| Advertising / analytics data via cookies (only if enabled) | Only after you consent | To measure our Google Ads campaigns and improve the site | Your consent |
Some of this data (e.g. work email, a name) may relate to an individual and therefore counts as personal data. We do not collect special categories of personal data, and we do not buy or enrich your data from third parties.
3. Google reCAPTCHA
Our forms are protected by Google reCAPTCHA, which helps us distinguish human visitors from automated abuse. For this purpose, reCAPTCHA analyses information about your device and your use of the site and may set cookies; this information is transmitted to and processed by Google. Its use is subject to Google’s Privacy Policy and Terms of Service.
4. Advertising (Google Ads)
We promote this page through Google Ads on Google Search. If you reach us by clicking an ad, Google processes that interaction under its own terms. Where we use Google Ads conversion measurement or remarketing, these technologies rely on cookies and are activated only with your consent; declining has no effect on your ability to contact us or receive a reply.
5. Processors and international transfers
- Google (Google Ireland Ltd / Google LLC) — reCAPTCHA and online advertising (Google Ads).
- Our website hosting provider — website hosting, form processing and email delivery of your enquiry to us.
These providers process data on our behalf, and we do not sell your personal data. Google is based in the United States; where any transfer of personal data outside the EEA / Serbia occurs, it is carried out on the basis of appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
6. How long we keep it
- Enquiry / contact data (from the forms): for as long as needed to handle your request and any resulting business relationship, and up to 24 months after our last contact, unless you ask us to delete it earlier.
- Server access logs: up to 90 days.
- Advertising / analytics data (if enabled): according to the provider’s retention settings.
7. Your rights
Under the GDPR and the Serbian Personal Data Protection Act, you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (this does not affect processing already carried out). To exercise any right, email marko.tomasevic@lbt.rs. You may also lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).
8. Cookies
Sending us an enquiry does not require advertising cookies. Google reCAPTCHA may set cookies that are necessary to protect our forms from abuse. Any analytics or advertising cookies (e.g. Google Ads) are set only after you consent; you can decline, or clear your browser’s site data to reset your choice, and you will then be asked again.
9. Security
The site is served over an encrypted connection (HTTPS/TLS), and we and our providers apply industry-standard technical and organisational measures to protect personal data. In the event of a personal-data breach that is likely to result in a risk to your rights, we will act in accordance with applicable law, including notifying the supervisory authority where required.
10. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.
11. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under the age of 15.
12. Changes to this policy
We may update this policy from time to time. Any updated version will appear on this page with a new “Last updated” date; where changes are material, we will make a reasonable effort to announce them in advance.
13. Contact
Questions about this policy or your data: marko.tomasevic@lbt.rs.