Who we are
Elselab is the trading name of MUSTAFA BAYSAL PR Elselab, Riste Vukanovića 4, 11050 Belgrade (Zvezdara), Serbia. Tax ID (PIB) 113821455, registration number (MB) 67109511. We are the controller of the personal data described in this policy. You can reach us about anything privacy-related at [email protected].
What we collect
When you fill in a form on this website, we collect what you enter:
- Your name, email address and phone number.
- What you need help with, and any message you write.
- Whether you ticked the box to receive text messages from us, and when.
We also record some details automatically when you submit a form or visit the site:
- The page you sent the form from and the country your browser settings suggest, which we use to read your phone number correctly.
- Campaign details in the link you arrived on, such as UTM tags and Google Ads click IDs, so we know which ad or page brought you here.
- Standard technical data our hosting keeps in server logs, such as your IP address, browser type and the time of the request.
When you become a client, we also hold your billing details, our correspondence and the access you give us to your tools.
When you pay through PayPal, PayPal shares with us your name, the email address of your PayPal account, the amount and the transaction ID. We never receive your full card number or your PayPal password.
How we use it
- To reply to your enquiry, hold your free consultation, prepare a proposal and follow up on it. The legal basis is taking steps at your request before entering a contract.
- To deliver and support the work you buy from us, and to invoice you. The legal basis is performing our contract with you.
- To understand which pages and ads bring us enquiries, and to keep the site secure. The legal basis is our legitimate interest in running and improving the business.
- To keep records that tax and accounting law requires. The legal basis is our legal obligation.
- To send you text messages and to use analytics and advertising cookies, only if you said yes. The legal basis is your consent, which you can withdraw at any time.
We do not sell your personal data and we do not use it to send marketing to anyone who has not been in touch with us.
Text messages
If you tick the box on our form, we may text you about your request, such as to book your call or follow up on a proposal. We send at most 4 messages a month and frequency varies. Message and data rates may apply.
- Reply STOP to any message to stop receiving texts. Reply HELP for help, or email us.
- Ticking the box is optional and is not a condition of working with us.
- We do not share or sell your mobile number or your consent to receive texts with third parties for their marketing. Mobile information is shared only with the provider that delivers our messages.
Emails
We reply to your enquiry by email and keep in touch about your request or project. We do not add you to a newsletter or send you marketing emails. If you would rather not hear from us, email us and we will stop.
AI review of enquiries
When you send an enquiry, we use an AI model provided by Anthropic to read it and summarise what you need, so we can reply faster and with a more useful first answer. A person at Elselab reads every enquiry and makes every decision about it. Anthropic processes this data on our behalf and does not use it to train its models.
International transfers
Some of our providers store or process data outside your country, including in the United States. Where the law requires it, these transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Enquiries that do not lead to work are deleted within 24 months of our last contact, or sooner if you ask.
- Client records are kept for as long as we work together, and invoices and related records for as long as tax and accounting law requires.
- Server logs are kept for a short period by our hosting provider for security and troubleshooting.
Data we handle for clients
When we build or maintain automation for you, your systems may contain personal data about your own customers. For that data you are the controller and we are your processor: we use it only on your instructions and for the agreed work, we do not copy it into our own systems unless the work needs it, and we return or delete it when the work ends. A data processing agreement is available on request.
Security
We use reputable providers, encrypted connections, strong unique passwords and two-factor authentication where available. We ask for team member access to your tools instead of your passwords whenever the tool allows it.
Your rights
Depending on where you live, you can ask us to:
- Tell you what personal data we hold about you and give you a copy.
- Correct data that is wrong or incomplete.
- Delete your data.
- Stop or limit how we use it, or object to a use based on our legitimate interests.
- Send your data to you or another provider in a portable format.
Email [email protected] and we will reply within 30 days. You also have the right to complain to a data protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the authority in the country where you live or work.
Children
Our services are for businesses. We do not knowingly collect data from anyone under 16.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. Significant changes will be emailed to current clients.