Legal · TanyaLabs

Privacy Policy

Updated 2 October 2026

This Privacy Policy explains what personal data TanyaLabs collects through tanyalabs.com and our client work, why we use it, who we share it with, and the rights you have. Imaginifera has its own Privacy Policy.

1. Who is responsible for your data

The controller of your personal data is TANYA BAL PR Beograd (Stari Grad), a sole proprietorship (preduzetnik) registered in the Republic of Serbia, at Trg Nikole Pašića 5, 11103 Beograd (Stari Grad), Serbia. TanyaLabs is its brand name. For any privacy question or request, write to [email protected].

2. What we collect

  • Messages you send us: your name, email address, company, and whatever you include about your project or question.
  • Client project data: contact and billing details, and the files, brand materials and feedback you share for a project.
  • Order data: if you buy from Imaginifera, our payment provider shares with us your name, email address, country and the order details. We do not receive your full card or bank details.
  • Technical data: when you visit tanyalabs.com, our hosting and delivery provider processes your IP address, browser type, the pages you request and the time of the request, to deliver the site and protect it from abuse.

We do not use advertising or analytics tools on tanyalabs.com, and we do not sell personal data.

3. Why we use it, and our legal basis

  • To answer your messages and prepare quotes: our legitimate interest in replying to you, or steps you ask for before entering a contract.
  • To deliver client projects: performance of our contract with you.
  • To process orders, issue invoices and keep accounting records: performance of a contract and our legal obligations.
  • To keep the website and our systems secure and prevent fraud: our legitimate interest in protecting our business and our users.
  • To send you news about our products, only if you ask for it: your consent, which you can withdraw at any time.

We rely on the Serbian Law on Personal Data Protection and, where it applies to you, the EU General Data Protection Regulation (GDPR).

4. Who we share it with

  • Payment providers, which process orders, payments, tax and refunds for Imaginifera purchases as independent controllers under their own privacy notices.
  • Service providers that help us run the business, such as website hosting and delivery, email and cloud storage. They may use your data only to provide their services to us.
  • Professional advisers, such as accountants and lawyers, when needed.
  • Authorities, when the law requires it or to protect rights and safety.

5. International transfers

Some of our providers process data outside Serbia, for example in the European Union or the United States. When data leaves Serbia, we rely on an adequacy decision or on standard contractual clauses approved by the Serbian Commissioner or the European Commission, or on another lawful safeguard.

6. How long we keep it

  • Enquiries that do not lead to a project: up to 24 months after our last exchange.
  • Project files: for the duration of the project and up to 12 months afterwards, unless we agree otherwise.
  • Invoices, order and accounting records: as long as Serbian accounting and tax law requires.
  • Technical logs: kept by our hosting provider for a short period for security, usually no more than 30 days.

7. Cookies and local storage

tanyalabs.com does not use advertising or analytics cookies. It saves your language choice in your browser's local storage so the site opens in that language next time. Our hosting provider may set strictly necessary security cookies to protect the site from abuse.

8. Your rights

You have the right to access your personal data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. To use any of these rights, write to [email protected]. We reply within one month. You can also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or, if you live in the EU, to your local data protection authority.

9. Security

We protect personal data with encrypted connections (HTTPS), access limited to what each task needs, and providers that commit to appropriate security measures.

10. Children

Our website and services are not directed at children.

11. Changes to this policy

We may update this policy. We will post the new version on this page with a new date, and tell clients about important changes.

12. Contact

TANYA BAL PR Beograd (Stari Grad), Trg Nikole Pašića 5, 11103 Beograd (Stari Grad), Serbia. Email: [email protected]