Updated 14 November 2026. This notice explains how IT Advanced Services (ITAS) handles information from website visitors and people who contact us.
Who is responsible
IT Advanced Services d.o.o., registered office: Dalmatinska 78, Podgorica, Montenegro. Office and correspondence: NTP, Bulevar Mihaila Lalića, Podgorica, Montenegro. Contact: info@itas.ai.
Ivan Bošković handles enquiries and privacy requests and is responsible for implementing the enquiry-retention procedure. You can reach him at info@itas.ai.
Website hosting
Our hosting provider is NEOSERV, operated by Avant.Si d.o.o., Slovenia. Hosting involves website files, databases and technical logs, which may include IP addresses. These support website delivery, troubleshooting and protection against misuse. We use them for our legitimate interest in operating a secure and reliable website.
NEOSERV’s published terms, section 4.1, describe usual server-log retention of 30–60 days, depending on the service and configuration. The access-log archive setting checked on our account on 10 November 2026 is 60 days. This setting is not a retention deadline for every security record or backup.
The provider’s data-processing annex, section 1.3.3, describes backup copies and their removal within 3–9 months after the hosting service expires. This is the provider’s published post-expiry period, not the rotation period of every backup during an active subscription. The location and full lifecycle of this account’s backups have not been independently verified.
Contacting ITAS
When you contact us by email or through the contact form, we process your name, email address, enquiry and related correspondence to respond and discuss possible cooperation. A phone number is optional and is requested only if you ask for a callback. Without the required contact details and message, we may be unable to respond. Please do not send medical records, passwords or other sensitive information through this general enquiry channel.
Depending on the enquiry, processing is necessary to take steps at your request before entering into a contract, fulfil a contract, or pursue our legitimate interest in responding to business enquiries. Where applicable, these correspond to Article 6(1)(b) and (f) GDPR. Records required by law are processed to meet the relevant legal obligation. We do not add people who contact us to newsletters or marketing lists.
ITAS uses Google Workspace for email. The website form is configured to send to info@itas.ai and does not store message content in the WordPress database. This address is an alias of the ITAS director’s business account: messages arrive directly in that mailbox, rather than in a separate info@ mailbox. Access is intended for authorised people who need the information to handle the enquiry.
How long we keep enquiries
- Enquiries that do not lead to a business relationship: up to 12 months after communication concludes, including any callback number. We may delete information earlier when it is no longer needed.
- Spam: deleted promptly and no later than 30 days.
- Contracts and important business records: only correspondence needed for contracts, projects, accounting obligations or specific legal claims is retained for the relevant purpose and period. This does not justify keeping every enquiry indefinitely.
Ivan Bošković is responsible for the retention procedure. It provides for monthly review of concluded enquiries and weekly spam review. Enquiries whose deadline falls before the next review are selected for earlier deletion. Records retained separately have a documented reason and a review date.
Mailbox deletion and removal from provider recovery systems or backups may occur at different times. The enquiry-retention limits apply to our working records; they are not a promise that all provider copies disappear immediately. If old data is restored, the retention rules must be applied again.
Form protection
The contact form processes your name, email, message, selected language and optional callback number. It sends enquiries to info@itas.ai without storing message content in the WordPress database.
To limit misuse, the form uses temporary coded identifiers derived from connection information and, when submitted, the sender’s email. These records contain counters and expiry information, not message content or the original email or IP address. Their validity is at most one hour; expired records are scheduled for hourly cleanup. This schedule depends on the server running the cleanup task.
We use Cloudflare Turnstile to protect the public contact form. It loads when you interact with the form. It processes connection and browser signals, including IP address, for bot detection. Cloudflare acts as processor for site protection and controller for improving detection. Our purpose is to protect enquiries and the website against abuse. See the Turnstile privacy notice.
Website analytics
We use Cloudflare Web Analytics for basic visit and performance statistics on the public website. Its purpose is to understand interest in our pages and language versions and improve the site, without advertising profiles or marketing lists.
Reports cover page views, visits, referring sites, country, browser, device and performance. Cloudflare states that its measurement script uses no cookies or browser storage. Its receiving data centre handles the IP address for network communication and discards it rather than storing it in the analytics service’s core databases or logs. Processing can occur in another country. See Cloudflare’s description of the service.
Our integration does not send contact-form fields as analytics events and excludes local and staging environments, administration and logged-in visits. Cloudflare states that unsampled measurements are retained for seven days and reports are available for the preceding six months; these are distinct periods, not a guarantee of deletion of every provider copy. Web Analytics FAQ.
Media and necessary cookies
Fonts, images and the consulting video are served with the website. The video file loads after you start playback; viewing it does not require an embedded YouTube or Vimeo player. WordPress administration uses login cookies. Technical hosting logs and Turnstile protection are separate from cookie-free Web Analytics. This notice does not make a blanket claim that every website function is cookie-free.
Providers and international processing
We use NEOSERV / Avant.Si d.o.o. for hosting and Google Workspace for email. Cloudflare, Inc. provides Web Analytics and Turnstile services. Providers may use authorised service partners and process data outside Montenegro.
NEOSERV’s published processing terms provide for storage in the EU or territories recognised by the EU as offering adequate protection. They do not identify the location of this account’s individual copies. Google Workspace has no EU-only storage region selected on our account. Google and Cloudflare processing may include the United States and other countries.
The published Google processing terms and Cloudflare processing terms describe safeguards for international transfers, including contractual clauses where applicable. For information about the arrangements relevant to your data, contact info@itas.ai.
Your rights and requests
Write to info@itas.ai to request information about your personal data, access, correction or deletion. Depending on the applicable law and circumstances, you may also request restriction or portability and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. We may request proportionate information to verify your identity and will respond within the applicable statutory deadlines.
You may seek protection from the Montenegrin Agency for Personal Data Protection and Free Access to Information (AZLP). Where GDPR applies, you may also complain to a competent EU supervisory authority, including in your place of habitual residence or work. This website does not use automated decisions with legal or similarly significant effects on you.