Privacy Policy

1. Who processes your data

The data controller is Stefanovic Language School — referred to below as “the school” or “we”. We hold lessons in classrooms at Bratstva i Jedinstva 78a (Borča) and Stanka Paunovića 47 (Miljakovac), as well as online.

For any questions about your data, reach us at 065 307 39 35, on Viber at the same number, or write to us at info@topengleski.com.

2. What data we collect

Through the enrollment form on this site, we only collect what you enter yourself:

• the student's full name — required
• the student's date of birth — required
• the parent's or guardian's name — required
• the parent's or guardian's phone number — required
• the parent's or guardian's email address — optional
• any note you choose to write — optional, and please don't use it to send us data you don't want us to keep

3. Technical data

When you submit the form, our server temporarily records an unreadable fingerprint of your internet address (the IP address converted into a string of characters that cannot be reversed into the original). Its only purpose is to stop an automated script from flooding the form with thousands of fake submissions. This record is deleted no later than ten minutes after submission.

Like any web server, our hosting provider keeps technical access logs for security and troubleshooting purposes. These logs are outside our control and are subject to the provider's own policies.

4. What we DON'T do

This site doesn't use cookies, doesn't use Google Analytics or any other analytics tool, doesn't place social-media tracking pixels, and doesn't track your movement across the internet. Fonts are built into the site itself, so nothing is pulled from third-party servers. That's why there's no cookie-consent banner here — there's nothing to consent to.

We don't sell, rent, or pass on your data to third parties for marketing purposes. We don't make automated decisions about you, and we don't engage in profiling.

5. Why we process your data, and on what legal basis

If you go on to enroll, your data continues to be processed to perform the enrollment contract and to meet our legal obligations, chiefly tax and accounting ones.

• To contact you and arrange a placement test and lesson times — the legal basis is taking steps at your request prior to entering into a contract, Article 12(1)(2) of Serbia's Law on Personal Data Protection.
• To suggest the right program — the date of birth tells us the student's age, and the note is whatever you choose to share.
• To protect the form from abuse — the basis is our legitimate interest, Article 12(1)(6) of the same law.

6. Children's data

This form is intended exclusively for parents and guardians. A child's data is entered by the adult who legally represents them, who by doing so confirms they are authorized to provide it.

For the child, we only ask for a name and date of birth. We do not ask for data about health, religion, ethnicity, or any other special category of data, and we ask that you not send us any of that through the note field.

If we determine that a child sent us their own data without a parent's knowledge, we will delete it without delay.

7. Who else can see your data

Data from the enrollment form is seen by school staff and associates who need it to contact you. Besides them, the following are involved in processing:

• our hosting provider, on whose server the site runs and where a submission is temporarily stored — a data processor acting on our instructions;
• Google Ireland Limited, because a copy of each submission is also sent to the school's Gmail address. This means the data passes through Google's servers and may be stored outside the Republic of Serbia, within the European Economic Area or in countries with adequate protection measures in place.

We may disclose data to government authorities when legally required to do so.

8. How long we keep your data

If you request deletion in the meantime, we delete it sooner — except for anything we're legally required to keep.

• A submission that doesn't lead to enrollment: kept for at most 12 months from submission, then deleted.
• A submission that leads to enrollment: kept for the duration of the contractual relationship, and for as long as tax and accounting regulations require.
• The anti-abuse record for the form: at most 10 minutes.
• The message in the school's email inbox: deleted together with the submission it relates to.

9. Your rights

At any time, you have the right to:

• get confirmation of whether we process your data, and request access to it;
• request correction of inaccurate data or completion of incomplete data;
• request deletion of your data;
• request restriction of processing;
• receive your data in a common electronic format and transfer it to another controller;
• object to processing based on legitimate interest;
• withdraw consent, where processing is based on it, without affecting the lawfulness of processing carried out before the withdrawal.

You can send a request to info@topengleski.com, call us at 065 307 39 35, or hand it in in person at one of our classrooms. We respond within 30 days at the latest. To protect your data, we may ask you to confirm your identity before we act on the request.

10. Complaints to the supervisory authority

If you believe we are processing your data unlawfully, you have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, email office@poverenik.rs, phone +381 11 3408 900.

We'd be grateful if you reached out to us first — we resolve the vast majority of misunderstandings the same day.

11. Security

The site is served over an encrypted connection. Your submission travels encrypted from your device to our server, and then on to the school's email inbox over an encrypted connection to the mail server.

Only people who need it for their work have access to submissions. No system is completely airtight, but if a data breach does occur and it could put your rights at risk, we will notify you and the Commissioner within the legal deadline.

12. Changes to this policy

We update this policy whenever the way the site works changes, or when the regulations do. The date of the last update appears at the top of this page. If a change is significant, we'll post a notice on the site's homepage.