Home / GDPR and data protection
GDPR and data protection
How we align data processing with the Serbian Personal Data Protection Act and the EU General Data Protection Regulation (GDPR).
1. Legal framework
We process data in accordance with the Serbian Personal Data Protection Act (Official Gazette RS No. 87/2018) and, where applicable, Regulation (EU) 2016/679 (GDPR).
2. Our clients’ data
When keeping books and running payroll we process data about our clients’ employees, suppliers and customers. In that role we act as a processor on the client’s behalf, under contract and only as far as the service requires.
3. Security measures
Only staff who need the data for their work, and who are bound by confidentiality, can access it. Data is stored securely and backed up regularly.
4. Cookies
The site uses necessary cookies to work and to remember your choice. Analytics and marketing cookies are enabled only with your consent, which you can change at any time through the “Cookie settings” link in the footer.
5. Exercising your rights
Send your request to office@profitlux.rs. We reply without delay and no later than 30 days after receiving the request.
6. Data breaches
If a personal data breach may put your rights at risk, we will notify the Commissioner and you within the deadlines set by law.
7. List of cookies
| Name | Type | Purpose | Duration |
|---|---|---|---|
pl_consent | Necessary | Remembers your cookie choice | 6 months |
pll_language | Necessary | Remembers the selected site language | 1 year |
wordpress_*, wp-settings-* | Necessary | Set only for logged-in site administrators | session / 1 year |
The site currently uses no analytics or marketing cookies. If we introduce them, they will only be enabled with your consent and this list will be updated. You can change your choice at any time via the “Cookie settings” link in the footer.
Last updated: 8 November 2026.