Privacy Policy

Last Updated: August 2026

1. About This Policy

At Soprex, we are committed to protecting your privacy and handling personal data responsibly, securely, and transparently.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit soprex.ai, contact us, or engage with our services. It also explains your rights in relation to your personal data and how to exercise them.

Please read this Policy carefully. By using this website, you acknowledge that you have read and understood its contents.

2. Who We Are

Soprex d.o.o. is the data controller responsible for personal data collected through this website.

Soprex d.o.o. Takovska 45a 11000 Belgrade, Serbia

Company registration number: 103102753 / 17514784

General enquiries: info@soprex.com Privacy enquiries: privacy@soprex.com

3. What Information We Collect

We may collect personal information when you:

  • Submit a contact or enquiry form on this website
  • Contact us directly by email or phone
  • Request information about our services or solutions
  • Discuss potential projects, engagements, or partnerships
  • Interact with content on our website

The personal information collected may include:

  • Full name
  • Company name and job title
  • Email address
  • Phone number
  • The content of any message or correspondence submitted

We collect only the personal data that is necessary for the stated purpose. Providing personal information through our contact forms is voluntary. However, failure to provide certain information may limit our ability to respond to your enquiry.

4. Information Collected Automatically

When you visit our website, certain technical data is collected automatically through cookies, server logs, and analytics tools. This may include:

  • IP address
  • Browser type and version
  • Operating system and device type
  • Referring URL
  • Pages viewed and time spent on each page
  • Date and time of visit
  • Clickstream and interaction data

This information is used to maintain website security, improve performance, understand how visitors use the site, and ensure a consistent user experience across devices.

Where this data constitutes personal data under applicable law, it is processed in accordance with this Policy.

5. How We Use Your Information

We may use the personal information we collect for the following purposes:

  • To respond to enquiries, requests, and correspondence
  • To communicate with you regarding services, proposals, and potential engagements
  • To manage and maintain our business relationship with you
  • To improve the functionality, content, and user experience of our website
  • To monitor and maintain the security of our systems and website
  • To comply with applicable legal, regulatory, and contractual obligations
  • To analyse website usage and performance through aggregated, anonymised data

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Legal Basis for Processing

Where required by applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of Serbia, we process personal data on one or more of the following legal bases:

  • Consent — where you have given clear, informed consent to specific processing activities, such as receiving marketing communications or non-essential cookies
  • Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our website, and maintaining security, provided those interests are not overridden by your rights and interests
  • Contract — where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract to which you are a party
  • Legal obligation — where processing is necessary to comply with a legal or regulatory requirement to which Soprex is subject

Where we rely on legitimate interests as the legal basis, you have the right to object to that processing. See Section 10 for details on how to exercise your rights.

7. Cookies and Analytics

This website uses cookies and similar tracking technologies to support functionality, measure performance, and understand how visitors interact with our content.

We distinguish between:

  • Strictly necessary cookies — required for the website to function and which cannot be disabled
  • Analytics and performance cookies — used to collect aggregated, anonymised information about how visitors use the website
  • Functional cookies — used to remember preferences and improve the user experience
  • Third-party cookies — set by external services integrated into our website

Where required by applicable law, non-essential cookies will only be placed after you have provided your consent through our cookie consent mechanism. You may withdraw or adjust your cookie preferences at any time.

For full details on the cookies we use, their purpose, duration, and how to manage them, please refer to our Cookie Policy.

8. Sharing Personal Information

We do not sell, rent, or trade personal data to third parties for commercial purposes.

Personal information may be shared in the following limited circumstances:

  • Service providers — with trusted third-party providers who assist us in operating our website, delivering services, or managing communications, where those providers are contractually required to process data securely and in compliance with applicable law
  • Legal requirements — where we are required by law, court order, or regulatory authority to disclose personal data
  • Business transfers — in connection with a merger, acquisition, restructuring, or sale of assets, in which case personal data may be transferred as part of that transaction, subject to appropriate safeguards
  • With your consent — in any other circumstances where you have provided explicit consent to the sharing

Any third parties with whom personal data is shared are subject to appropriate data processing agreements and are required to implement adequate security measures.

9. International Data Transfers

Soprex operates internationally and may engage service providers or subprocessors located outside the Republic of Serbia or the European Economic Area (EEA).

Where personal data is transferred to a country that does not provide an equivalent level of data protection, Soprex implements appropriate safeguards to protect that data, which may include:

  • Standard contractual clauses approved by the relevant supervisory authority
  • Transfers to countries recognised as providing adequate protection
  • Other mechanisms recognised under applicable data protection law

You may request further information about the safeguards in place for international transfers by contacting privacy@soprex.com.

10. Your Rights

Depending on your location and the applicable data protection legislation, you may have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete personal data
  • Right to erasure — to request deletion of your personal data, subject to applicable legal and contractual obligations
  • Right to restriction — to request that we limit the processing of your personal data in certain circumstances
  • Right to object — to object to processing based on legitimate interests or for direct marketing purposes
  • Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible
  • Right to withdraw consent — to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal
  • Right to lodge a complaint — to submit a complaint to the relevant supervisory authority in your jurisdiction

To exercise any of the above rights, please contact us at privacy@soprex.com. We will respond to your request within the timeframe required by applicable law and will not charge a fee for reasonable requests.

Where we are unable to comply with a request, we will explain the reasons in writing.

11. Data Retention

Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, tax, or contractual obligations.

The criteria we use to determine retention periods include:

  • The nature of the information and the purpose for which it was collected
  • Whether there is an ongoing relationship or active engagement
  • Legal or regulatory requirements to retain certain categories of data for specified periods
  • Whether retention is necessary to establish, exercise, or defend legal claims

When personal data is no longer required, it is securely deleted or anonymised.

12. Data Security

Soprex implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.

These measures include, where appropriate:

  • Encrypted transmission of data using industry-standard protocols
  • Access controls and authentication requirements for systems holding personal data
  • Regular review of security practices and procedures
  • Contractual requirements on service providers to maintain equivalent security standards

While we take reasonable steps to protect personal data, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security, and you transmit personal data at your own risk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable law.

13. Children’s Privacy

This website is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate consent, please contact us at privacy@soprex.com and we will take steps to delete that information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services we offer.

The revised Policy will take effect from the date displayed at the top of this page. We encourage you to review this page periodically to remain informed of how we handle your personal data.

Continued use of this website following publication of an updated Policy constitutes your acknowledgment of the changes.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

Soprex d.o.o. Takovska 45a 11000 Belgrade, Serbia

General enquiries: info@soprex.com Privacy enquiries: privacy@soprex.com Phone: +381 11 334 2545