Privacy Policy
Website privacy notice for LCA Institut — Serbia-based, EU-facing B2B sustainability services
Last updated: 8 August 2026
LCA Institut respects the privacy of website visitors, prospective clients, client representatives, business contacts and users who communicate with us through our website. This Privacy Policy explains how we collect, use, share and protect personal data in connection with our website, consultation and booking forms, product-document submissions, business communications and related online services.
1. Who is responsible for your data?
For website-related processing, LCA Institut acts as the data controller unless another role is expressly stated. We operate from Belgrade, Serbia. Questions about this Policy or personal-data requests may be sent to info@dev.tanvir.top.
2. Personal data we may collect
- Identity and business-contact data, such as name, work email, telephone number, company, role and country.
- Enquiry and project information submitted through contact, booking or consultation forms.
- Product or technical documents that you voluntarily upload or send for an initial review, including information contained in those files.
- Communications with us, including emails, meeting requests, questions and follow-up correspondence.
- Technical website data, such as IP address, browser/device information, security logs and cookie or analytics data where permitted.
3. Why we use personal data
We process personal data to respond to enquiries, arrange consultations, prepare proposals, provide or administer LCA, EPD, product-carbon, CBAM, DPP-readiness and related services, operate and secure the website, improve user experience, maintain business records and comply with applicable legal obligations. Depending on the circumstances, processing may be based on steps requested before entering a contract, performance of a contract, legitimate business interests, compliance with law, or consent where consent is required.
4. Cookies, analytics and marketing
Strictly necessary technologies may operate without optional consent where permitted. Analytics, advertising or other non-essential technologies are used only where the required consent has been obtained. You can review or change your choices through the website’s Cookie Settings. Marketing communications are sent only where permitted by applicable law, and you may opt out at any time.
5. Who may receive personal data?
We may share data with trusted providers that support website hosting, email, calendars, forms, file storage, CRM, security, analytics or professional services. Where a client engages us for EPD or similar work, relevant project information may also be shared with agreed verifiers, programme operators or technical partners as necessary for delivery. Providers are expected to use data only for the agreed purpose and subject to appropriate confidentiality and data-protection obligations.
6. International transfers and retention
Some service providers may process data outside Serbia or the European Economic Area. Where transfer rules apply, we use an appropriate legal mechanism or contractual safeguard. We retain personal data only for as long as reasonably necessary for the purpose collected, to maintain client and project records, resolve disputes, protect legal rights and meet applicable accounting, tax or regulatory obligations. Enquiry data that does not lead to a business relationship is periodically reviewed and deleted or anonymised when no longer needed.
7. Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability where applicable, or object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing. You may also lodge a complaint with the competent data-protection authority, including the Commissioner for Information of Public Importance and Personal Data Protection in Serbia where relevant.
8. Security, external links and changes
We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, loss, alteration or disclosure. However, no internet transmission or storage system is completely risk-free. Our website may link to third-party sites whose privacy practices are outside our control. We may update this Policy when our services, technology or legal requirements change; the revised version will be posted with a new ‘Last updated’ date.
Contact: LCA Institut, Belgrade, Serbia |office@dev.tanvir.top | +381 63 284 588