Privacy Policy

This policy explains how BLIST processes personal data when you visit our website or communicate with us through the contact form or by email.

Last updated: 3 November 2026.

1. Scope of this policy

The BLIST website presents our company, products and business information. It does not offer user account registration, direct online purchasing or payment. This policy applies to website visitors and people who contact us about products, business cooperation or other enquiries.

We process personal data in accordance with the Serbian Law on Personal Data Protection and, to the extent applicable to the processing concerned, the EU General Data Protection Regulation — GDPR.

2. Personal data we process

• Information you provide: your name, email address, message and any other information you choose to include, such as a telephone number or company name.
• Technical information: IP address, access date and time, requested pages, browser and device information, and information needed to diagnose problems and protect the website.
• Cookie-related information: information used to maintain a session, remember your language selection and support similar website functions.

3. Purposes and legal bases

• Responding to general enquiries and business correspondence: our legitimate interest in communicating with interested individuals and business contacts.
• Preparing an offer at your request: taking steps before entering into a contract, where those steps are requested by the individual whose data is processed.
• Operating, maintaining and securing the website: our legitimate interest in ensuring availability, diagnosing technical issues and preventing misuse.
• Complying with legal requirements and handling data protection requests: compliance with legal obligations.
• Optional content and technologies requiring consent: your consent, where required by applicable law.

Providing information through the contact form is voluntary. Required fields are identified in the form. Without the information needed to understand your enquiry and respond, we may be unable to deal with your request.

4. Who may access personal data

Access is available to authorised people at BLIST who need the information to handle your enquiry or perform the relevant task. To the extent necessary, information may also be accessible to website hosting, maintenance and email service providers.

We may disclose information to competent authorities when required by law. Messages submitted through the contact form are not displayed publicly on the website.

5. Cookies and Google Maps

The website uses cookies and similar technologies for functions such as maintaining a session and remembering language preferences. You can manage cookies through your browser settings. Blocking them may affect certain website functions.

The contact page includes an embedded Google map. When the map loads, Google may receive your IP address, browser and device information, and information about the page from which the map is loaded. Google processes this information under its Privacy Policy.

For optional cookies and content for which applicable law requires consent, the legal basis is your consent. You may withdraw consent without affecting the lawfulness of earlier processing. Using Google Maps is not a condition for sending an enquiry to BLIST.

6. Processing in other countries

Depending on the service provider involved, personal data may be processed outside Serbia. Google provides its services through international infrastructure, which may include processing outside the European Economic Area.

Where a transfer requires specific safeguards, appropriate mechanisms provided for by applicable law are used. You may contact us for information about the recipients, processing countries and applicable safeguards.

7. How long we retain information

We retain enquiry information for as long as needed to respond, complete the related correspondence and fulfil the purpose of your enquiry. Longer retention may be necessary to meet a legal obligation or establish, exercise or defend legal claims until the relevant period expires.

Technical records are retained for the period needed to maintain systems, detect and investigate incidents and protect the website. Retention is assessed according to the purpose, security risks and any legal obligations. Google determines the retention periods for information it processes independently under its own policy.

8. Your rights

Subject to the conditions set by applicable law, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it.

Send your request to komercijala@blist.rs. To protect personal data, we may request information necessary to confirm your identity. We respond without undue delay, within 30 days under Serbian law or within one month where the GDPR applies. We will notify you within the applicable period if a legally permitted extension is necessary.

You may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection. Where the GDPR applies, you may also contact a competent supervisory authority in accordance with that regulation.

9. Security and automated decision-making

We protect personal data through appropriate technical and organisational measures and restrict access to people who need it for the purposes described. Within the processing covered by this policy, we do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

10. External links and policy updates

The website may contain links to other websites. When you follow such a link, processing on that website is governed by its controller’s policies.

We update this policy when website functions, processing practices or relevant legal requirements change. The current version is published on this page with its last updated date.