Your data, in plain language.

Who is responsible

The controller of the personal data processed through this website is Marko Petrović, who operates PLATINERA. You can reach him at info@platinera.com.

What we collect, and why

Contact form. When you send the form we receive what you enter: your name, company, email address, topic and message, and optionally your website, a budget range and a timeline. We use it to reply to you and, if you ask for it, to arrange a demo or prepare a proposal. Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and, for the optional fields, our legitimate interest in understanding your enquiry (Art. 6(1)(f)).

AI assistant on the custom systems page. The field on that page is an AI assistant, not a person. Your messages are sent to it and stored together with its replies. If you then leave your email address, it is stored with a short summary of your request and the conversation reaches us as an enquiry. Please do not enter sensitive personal data. Legal basis: our legitimate interest in answering questions about our services (Art. 6(1)(f)); once you leave your email, Art. 6(1)(b).

Client portal. If we invite you to the portal at start.platinera.com, we process your email address, your sign-in codes and session, the answers in your brief, the files you upload and a log of activity on the project. Domain names you check there are sent to the domain registries. Legal basis: preparing and performing our contract with you (Art. 6(1)(b)).

Technical data. To limit abuse of the forms, the assistant and the sign-in, our server stores a keyed hash of your IP address, which it uses to count requests. Our hosting provider processes standard technical data, such as your IP address, browser type and the time of the request, to deliver the pages and protect the site. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

We collect nothing else: no newsletter, no tracking and no advertising profiles. No decisions with legal effect on you are made automatically. This website is not directed at children.

Who processes it for us

We use a small number of service providers:

• Supabase, Inc.: database, file storage and server functions. Data is stored in Frankfurt, Germany.
• OpenAI, L.L.C. (United States): generates the assistant's replies from the messages of the current conversation. According to its API terms, OpenAI does not use this data to train its models and keeps it for up to 30 days.
• Resend, Inc. (United States): delivers the emails that tell us about your enquiry, and portal invitations and sign-in codes.
• Google LLC (Google Workspace): hosts the mailbox where your enquiry arrives.
• Cloudflare, Inc. (United States, with servers worldwide): hosts the website and protects it against attacks.

Where data leaves the EU, the transfer rests on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as applicable to each provider.

How long we keep it

• Conversations with the assistant are deleted automatically 12 months after the last message.
• Enquiries, meaning form submissions and the email address and summary left with the assistant, are deleted automatically 36 months after they were sent, unless we have started working together.
• Hashed IP addresses are deleted together with the records they belong to.
• Portal data is kept for as long as the project and our obligations from it require. You can ask us to delete it sooner where no such obligation applies.

Cookies and browser storage

The public website uses no analytics service and sets no cookies. It stores one note in your browser's session storage so that the opening animation does not repeat. That note never leaves your device and disappears when you close the tab.

The client portal sets one strictly necessary cookie that keeps you signed in. It is not used for anything else.

Your rights

Under the General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection you can ask us to:

• tell you which of your data we hold and give you a copy
• correct or delete it
• restrict how we use it, or object to its use
• hand it over in a portable format

Write to info@platinera.com. We answer within one month. You also have the right to complain to a data protection authority: in the EU, the authority of the country where you live; in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection.

Changes

When this page changes, the date at the top changes with it. We will update the section on who is responsible as soon as our company details change.