1. Introduction
MM Digital respects your privacy and is committed to handling personal information transparently, responsibly, and in accordance with applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:
- visit our website at https://milansystems.co/;
- contact us by email;
- schedule a consultation or business meeting;
- communicate with us about our services; or
- establish or maintain a business relationship with us.
This Privacy Policy applies to personal information processed by MM Digital for its own business purposes. It does not govern personal information that MM Digital processes solely on behalf of its business clients when providing AI-assisted lead qualification, workflow automation, CRM integration, or related services. Such processing is governed by the applicable client agreements and data processing arrangements.
2. Who we are
The entity responsible for the processing of personal information described in this Privacy Policy is:
Legal Business Name: MILAN MILOŠEVIĆ PR KOMBINOVANE KANCELARIJSKO-ADMINISTRATIVNE USLUGE MM DIGITAL ŠAPINE
Trading Name: MM Digital
Registered Address: Srpskih vladara 67, Šapine, Malo Crniće, 12311 Šapine, Republic of Serbia
Registration Number: 68626943
Tax Identification Number (PIB): 115778568
Email: milan@milansystems.co
Website: https://milansystems.co/
For questions concerning this Privacy Policy or our processing of personal information, you may contact us using the email address above.
3. Personal information we collect
We collect personal information only where reasonably necessary for our website operation, business communications, scheduling, contractual relationships, and related legitimate business activities.
3.1 Information you provide directly
When you contact us by email or communicate with us about our services, we may process:
- (a)your first and last name;
- (b)your email address;
- (c)your telephone number, if you provide it;
- (d)your company name and professional role, if relevant;
- (e)the content of your inquiry or correspondence;
- (f)information about your business needs or proposed project; and
- (g)other information you voluntarily provide.
Our website does not currently contain a contact form. Business inquiries are generally submitted directly by email. Providing information is generally voluntary. If you do not provide information needed to respond to an inquiry, arrange a requested meeting, or enter into or perform a contract, we may be unable to take that step. Information required for tax, accounting, or other legal records may be mandatory under the applicable law.
3.2 Meeting and scheduling information
When you schedule a meeting through our external Cal.com scheduling link, we may receive or access information needed to organize and conduct the meeting, including:
- (a)your name;
- (b)your email address;
- (c)the selected date and time;
- (d)scheduling-related information you provide;
- (e)meeting confirmation and status; and
- (f)associated Google Calendar or Google Meet details.
The scheduling service is operated by Cal.com, and related calendar and meeting functionality may be provided through Google services. Our website links to the external Cal.com scheduling page rather than embedding the Cal.com scheduling interface directly into our website.
3.3 Technical information
When you visit our website, limited technical information may be processed by our website infrastructure and external service providers as part of delivering and securing the website.
Depending on the technical operation of those services, such information may include:
- (a)IP address;
- (b)browser type and device information;
- (c)date and time of a request;
- (d)requested pages or resources;
- (e)network and security-related information; and
- (f)other technical information reasonably necessary to deliver, maintain, or protect the website.
We do not currently use Google Analytics, Meta Pixel, Google Ads tracking, or comparable website visitor analytics or advertising tracking tools. The website is hosted through Cloudflare Pages. Cloudflare may process technical information in connection with content delivery, network operations, security, and related infrastructure functions.
3.4 Information from business relationships
If you become a client, prospective client, supplier, or other business contact, we may process information reasonably necessary to establish, administer, perform, document, and manage the relevant business relationship. This may include business contact information, contractual communications, invoices, payment-related records, and correspondence. We do not collect payment card details through our website, and the website does not provide online checkout or payment functionality.
4. How we use personal information
We may process personal information for the following purposes:
4.1 Responding to inquiries
To receive, review, and respond to questions, requests for information, and inquiries about our services.
4.2 Scheduling and conducting meetings
To arrange, confirm, reschedule, cancel, and conduct business meetings and consultations.
4.3 Providing services
To evaluate proposed projects, prepare proposals, communicate with clients, perform contractual obligations, and manage ongoing business relationships.
4.4 Business administration
To maintain business records, manage correspondence, issue and retain relevant documentation, and comply with applicable legal, accounting, and tax obligations.
4.5 Website operation and security
To deliver website content, maintain technical functionality, detect or prevent misuse, and protect the availability and security of the website and related systems.
4.6 Establishing and protecting legal rights
To establish, exercise, or defend legal claims and protect our lawful business interests where necessary and permitted by applicable law. We do not use information collected through our website to conduct behavioral advertising or create advertising profiles of website visitors.
5. Legal bases for processing
Where a legal basis is required under applicable data protection law, including the Serbian Law on Personal Data Protection and, where applicable, the EU General Data Protection Regulation (GDPR), we rely on one or more of the following grounds:
For transparency, the usual basis depends on the request and applicable law: pre-contractual steps or contract performance for responding to a requested proposal, meetings, and contracted services; legitimate interests for ordinary business communications, website security, and legal claims where not overridden by the individual’s rights; and legal obligations for tax and accounting records. Consent is used only where a specific feature or law requires it.
5.1. Steps prior to entering into a contract and performance of a contract
Where processing is necessary to respond to a request to enter into a contract or to perform an agreement with you.
5.2. Legitimate interests
Where processing is necessary for legitimate business interests, provided those interests are not overridden by your applicable rights and freedoms. Such interests may include responding to business inquiries, managing professional communications, organizing meetings, maintaining website security, and protecting legal rights.
5.3. Legal obligations
Where processing is necessary to comply with applicable legal, tax, accounting, or other statutory requirements.
5.4. Consent
Where consent is required under applicable law for a specific processing activity. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal. The applicable legal basis depends on the particular processing activity and the law governing it.
6. Website technologies, cookies, and local storage
Our website does not currently use Google Analytics, Meta Pixel, Google Ads tracking, or comparable marketing and analytics technologies. The website does not currently use a contact form, user account system, or online payment system.
6.1 Session storage
Our website uses a limited browser session-storage item identified as:
ms-nav=1
This item is used for temporary website navigation functionality. It is not intended to contain personal information or to track visitors across websites. The item is stored in the visitor's browser session storage rather than being used as an advertising or analytics identifier.
6.2 Infrastructure technologies
Cloudflare and other infrastructure providers may use technical mechanisms necessary to deliver, secure, and operate their services. Such mechanisms may be subject to the relevant provider's technical configuration and privacy documentation.
6.3 Third-party websites
If you follow a link to an external website or service, that provider may use its own cookies or similar technologies in accordance with its privacy practices. Further information about our website technologies is provided in our separate Cookie Policy, where applicable.
7. Third-party services
We use selected third-party services to operate our website, manage communications, and schedule business meetings.
7.1 Cloudflare
Our website is hosted through Cloudflare Pages. Cloudflare also provides DNS-related infrastructure and may process limited technical information associated with website delivery, network security, and operation. Cloudflare's processing is governed by its applicable contractual terms and privacy documentation.
7.2 Porkbun
Our domain is registered through Porkbun. Porkbun provides domain registration services. DNS services are configured through Cloudflare.
7.3 Google Workspace
We use Google Workspace for business email communications, including the address milan@milansystems.co. Messages and related information may be stored and processed within our Google Workspace account.
7.4 Google Calendar and Google Meet
We use Google Calendar and Google Meet in connection with business scheduling and online meetings. Google Meet links may be generated when meetings are scheduled. We do not routinely record or transcribe business meetings. If recording or transcription is proposed in the future, the relevant participants will be informed and any legally required permissions or legal bases will be addressed before such processing begins.
7.5 Cal.com
Our website provides an external link to Cal.com for scheduling meetings. When you follow that link, you interact with the Cal.com service, which may process information in accordance with its own applicable privacy documentation and its role in the relevant processing. We may receive and use scheduling information necessary to organize and conduct the requested meeting.
7.6 Google Fonts
Our website loads Google Fonts from Google's servers. As a result, when your browser requests the relevant font resources, Google may receive technical information associated with that request, potentially including your IP address and browser-related information. This processing is distinct from website visitor analytics and advertising tracking.
7.7 Video content and YouTube
Our website primarily uses locally hosted video content. A YouTube-based fallback may be available where the visitor chooses to activate it. When you choose to load content through YouTube, your browser may connect to Google's or YouTube's services, and those services may process technical information in accordance with their applicable privacy practices. We do not describe YouTube as automatically loaded for every visitor.
7.8 Service provider changes
We may replace or update service providers as our business and technical requirements evolve. Where such changes materially affect the information described in this Privacy Policy, we will update the Policy as appropriate.
8. Disclosure of personal information
We do not sell personal information.
We may disclose personal information only where reasonably necessary and legally permitted, including:
- (a)to service providers supporting our website, email, scheduling, and business operations;
- (b)to professional advisers, accountants, or other authorized advisers where necessary;
- (c)to competent public authorities where disclosure is required by applicable law;
- (d)where necessary to establish, exercise, or defend legal claims; or
- (e)where you have requested or authorized a particular disclosure.
We seek to limit disclosures to information reasonably necessary for the relevant purpose.
9. International transfers of personal information
MM Digital is established in the Republic of Serbia. Some of our service providers, including Google, Cloudflare, and Cal.com, may process information through infrastructure or personnel located outside Serbia. Accordingly, personal information may be transferred to, accessed from, or otherwise processed in other jurisdictions. Where a transfer is subject to legal restrictions, we will apply the safeguards or transfer mechanisms required by the relevant applicable data protection law. Depending on the circumstances, these may include legally recognized adequacy arrangements, appropriate contractual safeguards, or another legally permitted transfer mechanism. The use of a third-party service does not, by itself, establish that every international transfer is lawful. Any mandatory transfer requirements must be satisfied for the relevant processing activity.
10. Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
Our general retention practices are:
| Category | General Retention Period |
|---|---|
| Business inquiries that do not result in a client relationship | Up to 12 months after the last relevant communication |
| Meeting and scheduling information | Generally up to 12 months after the relevant meeting or last scheduling activity |
| Business and contractual correspondence | Generally up to 5 years after the relevant business relationship ends, or longer only where required or permitted by law and necessary for the applicable purpose |
| Accounting, tax, and legally required business records | For the period required by applicable law |
| Technical and security information | According to the applicable infrastructure provider's retention settings and legal requirements |
We may retain information for longer where reasonably necessary to comply with a legal obligation, resolve a dispute, or establish, exercise, or defend legal claims, provided such retention is permitted by applicable law. Personal information will be deleted, anonymized, or otherwise appropriately handled when it is no longer required for the relevant purpose, subject to applicable technical and legal limitations.
11. Data security
We implement reasonable technical and organizational measures appropriate to the nature of the personal information we process and the risks associated with that processing.
Depending on the relevant system and activity, these measures may include:
- (a)restricting access to authorized persons;
- (b)using appropriate account authentication and access controls;
- (c)relying on security features provided by our infrastructure and business service providers;
- (d)taking reasonable steps to protect business communications and account credentials;
- (e)limiting unnecessary collection and retention of personal information; and
- (f)responding appropriately to identified security incidents.
No website, internet transmission, or electronic storage system can be guaranteed to be completely secure.
12. Your privacy rights
Depending on the data protection law applicable to your personal information and the circumstances of the processing, you may have rights to:
- (a)receive information about how your personal information is processed;
- (b)request access to personal information concerning you;
- (c)request correction of inaccurate or incomplete information;
- (d)request deletion of personal information;
- (e)request restriction of processing;
- (f)object to certain processing activities;
- (g)request data portability where legally applicable;
- (h)withdraw consent where processing is based on consent; and
- (i)exercise other rights available under applicable law.
These rights are subject to the conditions, limitations, and exceptions established by applicable law.
To submit a privacy request, contact:
We may request information reasonably necessary to verify your identity before responding to a request. We will respond within the period required by the law applicable to the request.
13. Complaints
If you have concerns about how we process personal information, we encourage you to contact us first at:
Where Serbian data protection law applies, you may also have the right to lodge a complaint with the competent supervisory authority:
Commissioner for Information of Public Importance and Personal Data Protection, Republic of Serbia
Website: https://www.poverenik.rs
Where another jurisdiction's data protection law applies, you may also have the right to contact the competent supervisory authority under that law.
14. Children's privacy
Our website and services are directed primarily toward businesses and adult professional users. They are not intended to solicit personal information directly from children. We do not knowingly use the website to collect personal information from children for marketing or profiling purposes. If we become aware that personal information concerning a child has been collected in circumstances requiring corrective action under applicable law, we will take appropriate steps.
15. Third-party links
Our website may contain links to websites and services operated by third parties, including scheduling and video services. We do not control the privacy practices, security measures, or content of independently operated third-party websites. We encourage visitors to review the relevant privacy policies before providing personal information to those services.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our website, business operations, service providers, processing activities, or applicable legal requirements. The current version will be made available on our website. Where required by applicable law, we will provide additional notice or obtain consent before implementing a material change to a processing activity. The “Last Updated” date at the beginning of this Policy indicates when the Policy was most recently revised.
17. Contact information
If you have any questions about this Privacy Policy, our handling of personal information, or your applicable privacy rights, please contact:
MM Digital
MILAN MILOŠEVIĆ PR KOMBINOVANE KANCELARIJSKO-ADMINISTRATIVNE USLUGE MM DIGITAL ŠAPINE
Srpskih vladara 67, Šapine, Malo Crniće, 12311 Šapine, Republic of Serbia
Email: milan@milansystems.co
Website: https://milansystems.co/