Privacy Policy

Last updated: 20 October 2025

This Policy explains how Energy Transition Consulting (“we”, “us”, “our”) collects, uses, shares, and safeguards personal data on energytransition.rs and when you interact with us.

1) Controller

Energy Transition Consulting
Djordja Servickog 22, 21000 Novi Sad, Serbia
Email: office@energytransition.rs | Phone: +381 64 12 13 212
We process personal data under the EU GDPR and the Serbian Law on Personal Data Protection. We do not target or monitor individuals in the EU; this site is aimed at Serbia and the Western Balkans.

2) Data we process

You provide: contact forms (name, email, phone optional, organization, message); newsletter email/consent; bookings (name, email, company, time, notes); client/supplier data (business contact, tax/registration, payment details, contracts).
Automatically: IP address, device/browser, pages visited, referrer, timestamps, coarse location; cookies as described in the Cookie Policy.
Special categories: we do not seek them; please don’t include such data.

3) Purposes & legal bases

Respond to inquiries / proposals — Art. 6(1)(b) (pre-contract) and Art. 6(1)(f) (our interest in responding).
Perform contracts / client management — Art. 6(1)(b).
Newsletters / thought leadership — Art. 6(1)(a) (consent, withdraw anytime).
B2B outreach relevant to our services — Art. 6(1)(f); we perform an LIA and provide opt-out in every message.
Analytics and site optimization (privacy-respecting settings, IP anonymization, aggregation) — Art. 6(1)(f)/(a) depending on your consent choices.
Legal/tax compliance — Art. 6(1)(c).
Security and fraud prevention — Art. 6(1)(f).

4) Cookies & analytics

We use strictly necessary cookies to operate the site and non-essential cookies (functional/analytics/marketing) only with your choice in the banner. You can Accept, Reject, or manage categories anytime.
We implement consent controls that prevent non-essential cookies from loading until consent and log consent choices.
See our Cookie Policy bellow for an up-to-date list of cookies (name, provider, purpose, lifetime).

5) Recipients / processors

We share data only with service providers acting as processors under DPAs, and with professional advisors where required by law:

Hosting/infrastructure: Loopia d.o.o. (Serbia)
Email & productivity: Microsoft 365 (Microsoft Ireland/affiliates)
Web analytics: Google Analytics (Google Ireland/affiliates)
Accounting & legal: professional advisors as needed

We do not sell personal data.

6) International transfers & safeguards

Some providers may process data in the EEA and/or outside the EEA (incl. the US). Where we transfer data internationally, we rely on Standard Contractual Clauses (SCCs) and implement additional safeguards (encryption in transit, access controls, data minimization). Copies of SCCs are available on request.

7) Retention

We keep data only as long as needed, then delete or anonymize:

Inquiries: 12 months after last contact (unless you become a client).
Client/supplier files & accounting: 5–10 years to meet legal/tax duties.
Newsletter data: until you withdraw consent or we prune inactive subscribers.
Analytics: GA4 user-level retention 14 months; aggregated reports may persist longer without personal data.
WP form entries: 12 months (unless needed longer for a contract or dispute).

8) Your rights

You can access, rectify, erase, restrict processing, object to processing based on legitimate interests, and port data; and withdraw consent at any time (future only).
We may request reasonable identity verification. We respond within one month; this may be extended by up to two months for complex requests (we’ll notify you).
Complaints: You may contact the Serbian Commissioner (Bulevar kralja Aleksandra 15, 11000 Beograd, +381 11 3408 900, office@poverenik.rs, poverenik.rs) and/or your EU supervisory authority if you are in the EEA.

9) Security

We apply administrative, technical, and physical safeguards (HTTPS, least-privilege, MFA where available, patching, monitoring, backups). We assess vendors and train staff. We maintain a process for incident response and will notify authorities/individuals where required.

10) Children

Not directed to children under 16. If you believe a child provided data, contact us to delete it.

11) Sources (where not collected directly)

We may obtain business contact details from public sources (company websites, LinkedIn) or referrals for B2B sales, solely to contact you about relevant services (you can opt-out anytime).

12) Necessity of providing data

Providing contact details is necessary to respond to your inquiry; if not provided, we cannot reply or deliver the requested service.

13) Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

14) Changes

We will update this Policy as needed; see the “Last updated” date. Material changes will be posted here and/or emailed where appropriate.

Contact: office@energytransition.rs | Energy Transition Consulting, Djordja Servickog 22, 21000 Novi Sad, Serbia

COOKIE POLICY

Last updated: 20 October 2025

This Cookie Policy explains what cookies are, which cookies we use on energytransition.rs, for what purposes, and how you can manage or withdraw your consent at any time.

1) What are cookies?

Cookies are small text files stored on your device by websites you visit. They can be first-party (set by this site) or third-party (set by other domains, e.g., analytics or advertising). Cookies may be session (deleted when you close the browser) or persistent (expire after a defined period).

2) Your choices (consent)

On your first visit we show a cookie banner that lets you Accept all, Reject all, or manage categories.

Strictly necessary cookies run always (to operate the site).
Non-essential cookies (functional/analytics/marketing) run only after your consent.

You can change your choice at any time by clicking Cookie settings in the footer (reopens the banner). You can also delete cookies in your browser or block new ones via browser settings.

Consent record: we log your choices (date/time, categories, policy version) to demonstrate compliance.

3) Categories we use

(A) Strictly necessary – core functionality (security, session, load balancing).
(B) Functional – remember your preferences (e.g., language).
(C) Analytics/Performance – measure traffic and page performance (in aggregated form).
(D) Marketing – advertising and remarketing (used only if/when introduced and only with consent).

4) Cookie list

Names and lifetimes may vary slightly by plugin/version. Update if your setup changes.

(A) Strictly necessary

Name	Domain	Purpose	Expiry
wordpress_[hash]	energytransition.rs	Auth/session for logged-in users/admin.	Session
wordpress_logged_in_[hash]	energytransition.rs	Remembers logged-in status.	Session
wp-settings-, wp-settings-time-	energytransition.rs	Stores WP admin/editor preferences.	Up to 1 year
comment_author_, comment_author_email_ (if comments enabled)	energytransition.rs	Remembers commenter details for next visit.	Up to 1 year

(B) Functional

Name	Domain	Purpose	Expiry
pll_language (Polylang)	energytransition.rs	Stores chosen site language.	1 year

(C) Analytics (GA4 – only after consent)

Name	Domain	Purpose	Expiry
_ga	.energytransition.rs	Distinguishes users (aggregated stats).	Up to 2 years
_ga_* (e.g., _ga_XXXXXXXXXX)	.energytransition.rs	Maintains session/state for GA4.	Up to 2 years
_gid	.energytransition.rs	Short-term user/session distinction.	24 hours

We use GA4 with IP anonymization by design and privacy-respecting settings. Non-essential analytics are loaded only after consent (via our CMP/Consent Mode).

(D) Marketing

We currently do not use marketing cookies. If we introduce them, we will update this Policy and the banner; such cookies will load only after consent.

5) Third parties / recipients

Analytics data may be processed by Google Ireland Limited (GA4). Hosting is provided by Loopia d.o.o. (Serbia). Access by service providers is limited to what is necessary and governed by data processing agreements. Where data are transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) and additional safeguards. See our Privacy Policy for details.

6) Manage or withdraw consent

Click Cookie settings in the footer to reopen the banner and change your choice (accept/reject categories).
You can delete/block cookies in your browser.
If you clear cookies, the banner will reappear and you can select your preferences again.

7) Changes to this Policy

We update this Policy from time to time to reflect changes in technology, legal requirements, or our services. The date at the top shows the latest revision. Significant changes will be highlighted here and/or in the banner.

8) Contact

Questions about cookies or your choices: office@energytransition.rs
Address: Energy Transition Consulting, Djordja Servickog 22, 21000 Novi Sad, Serbia