1. General Information
This Privacy Policy explains how personal data is processed when you visit www.in4nova.com, contact us through the website or apply to IN4NOVA.
Personal data means any information relating to an identified or identifiable natural person.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection requirements. The information below includes the identity and contact details of the controller, the EU representative and the Data Protection Officer, as required under Article 13 GDPR.
2. Controller
The controller responsible for processing personal data through this website is:
IN4NOVA DOO LOZNIČKO POLJE
Drinska 20
15300 Lozničko Polje, Loznica
Republic of Serbia
Registration Number: 21843563
Tax Identification Number (PIB): 113309728
Email: contact@in4nova.com
Phone: +381 64 556 1678
Managing Director: Verica Reitenspiess
Die Firmierung, Anschrift, Registrierungsnummer, PIB und Geschäftsführung sind im aktuellen APR-Auszug vom 16.06.2026 bestätigt.
3. Representative in the European Union
IN4NOVA has designated the following representative in the European Union:
IN4NOVA GmbH
Laimingerstraße 5
85055 Ingolstadt
Germany
Email: contact@in4nova.com
Managing Director: Alfonso Reitenspieß
Registered at: Amtsgericht Ingolstadt
Commercial Register: HRB 13048
Die GmbH-Daten ergeben sich aus der Handelsregistereintragung.
Die Benennung als EU-Vertreter sollte intern noch schriftlich dokumentiert werden. Artikel 27 GDPR verlangt eine schriftliche Benennung, sofern dessen Voraussetzungen erfüllt sind.
4. Data Protection Officer
Our Data Protection Officer can be contacted at:
Slavisa Rosic
Email: slavisa.rosic@in4nova.com
You may contact the Data Protection Officer directly regarding questions about the processing of your personal data or the exercise of your data protection rights
5. Hosting and Server Log Files
This website is hosted by:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you access this website, your browser automatically transmits technical information to the web server. The following data may be processed:
- IP address of the accessing device
- date and time of access
- requested page or file
- amount of data transferred
- browser type and browser version
- operating system
- referrer URL
- host name of the accessing device
- access status and HTTP status code
This processing is necessary to display the website, ensure its technical stability, identify errors and protect the website against attacks and misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and reliable operation of this website.
Server log files are generally stored for up to 14 days. Data may be stored for a longer period where this is necessary to investigate a security incident, enforce legal claims or comply with statutory obligations.
IONOS provides and maintains web-server log files as part of its hosting services.
6. Contact Form, Email and Telephone
You can contact us through the contact form on this website, by email or by telephone.
When you use the contact form, we may process the following information:
- your name
- your email address
- your company
- the content of your message
- date and time of submission
- technical information required to transmit and protect the form
The information entered in the contact form is transmitted to us by email and is also stored in our WordPress system.
We process this data in order to respond to your enquiry, communicate with you and, where applicable, prepare or perform a contractual relationship.
Where your enquiry relates to a contract or possible business relationship, the legal basis is Art. 6(1)(b) GDPR.
For general enquiries, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to respond to enquiries and conduct professional business communication.
Where you have expressly consented to particular processing, the legal basis is Art. 6(1)(a) GDPR.
Your data is accessible only to employees and service providers who require it to process your request.
Contact-form submissions stored in WordPress are deleted no later than 12 months after the request has been completed, unless the information must be retained for contractual, tax, accounting, legal-defence or other statutory purposes.
Business correspondence may be retained for longer where statutory retention requirements apply.
You are not legally or contractually obliged to provide information through the contact form. However, without the information required to contact you, we may not be able to respond to your enquiry.
7. Google reCAPTCHA
We use Google reCAPTCHA in our contact form to protect the website against automated submissions, spam, fraudulent activity and misuse.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When reCAPTCHA is activated, Google may process technical information such as:
- your IP address
- browser and device information
- language settings
- date and duration of access
- mouse movements and keyboard interactions
- referrer information
- cookies and similar identifiers
- the result of the security check
Google uses cookies and similar technologies for security purposes, including protection against spam, fraud and abuse.
Google reCAPTCHA is blocked by our consent-management system until you give your consent. The legal basis for activating reCAPTCHA is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time through the privacy or cookie settings on this website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you do not consent to Google reCAPTCHA, the contact form may not be fully available. You can still contact us directly by email at:
Data processed through Google services may also be transferred to servers outside the European Economic Area, including the United States. Google describes its international data-transfer mechanisms in its privacy documentation.
8. Google Maps
We use Google Maps on this website to display our company locations and help visitors plan their route.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When Google Maps is activated, Google may process information including:
- your IP address
- browser and device information
- approximate location information
- date and time of access
- referrer URL
- interactions with the embedded map
- cookies and similar identifiers
Google Maps is not loaded until you have given your consent through the consent banner or the placeholder displayed on the website.
The legal basis is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time through the privacy or cookie settings on this website.
If you do not consent, the interactive map will remain blocked. The addresses of our locations are still available in text form on the website.
Data processed through Google Maps may be transferred to countries outside the European Economic Area, including the United States. Further information about Google’s processing and international data-transfer mechanisms is available in Google’s privacy documentation.
9. Consent Management with Complianz
We use the WordPress plugin Complianz to obtain, manage and document visitors’ privacy choices.
The provider is:
Complianz B.V.
Kalmarweg 14-5
9723 JG Groningen
The Netherlands
Complianz stores technically necessary information on your device to remember:
- whether you accepted or rejected optional services
- which service categories you selected
- when your consent was given or changed
- the version of the consent configuration
The purpose of this processing is to comply with legal requirements concerning cookies, external media and consent-based services.
The legal basis for storing the consent decision and demonstrating compliance is Art. 6(1)(c) GDPR. Where necessary, processing is also based on our legitimate interest in maintaining a legally compliant consent-management system under Art. 6(1)(f) GDPR.
You can change or withdraw your selection at any time through the Manage consent function on the website.
Further details about the cookies and services used are available in our separate Cookie Policy (EU).
10. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Cookies are small files stored on your device. Some cookies are technically necessary for the website to function. Other technologies are used only after you have provided consent.
We distinguish between the following categories:
Functional technologies
Functional technologies are necessary for:
- secure delivery of the website
- operation of WordPress and the website interface
- storage of your privacy preferences
- protection of forms and technical functions
The legal basis is Art. 6(1)(f) GDPR and, where the storage is strictly necessary to provide a service requested by the user, the applicable rules governing access to information on terminal equipment.
Optional external services
External services such as Google Maps and Google reCAPTCHA are activated only after your consent.
The legal basis is Art. 6(1)(a) GDPR.
You can accept all optional services, reject them or configure your individual preferences through the consent banner.
Your current choice can be changed at any time using the Manage consent function.
For detailed information about individual cookies, their providers, purposes and retention periods, please refer to our Cookie Policy (EU).
11. Applications
You may submit an application to IN4NOVA by email to:
When you apply, we may process:
- your name and contact details
- your curriculum vitae
- qualifications and professional experience
- application documents
- salary expectations and availability, where provided
- communication relating to your application
- other information voluntarily submitted by you
The data is processed solely for the purpose of reviewing your application, communicating with you and deciding whether to establish an employment or contractual relationship.
The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary to take steps at your request before entering into a contract.
Where special categories of personal data are included in an application, they are processed only where legally permissible, necessary or expressly provided by you.
Application data is accessible only to employees and decision-makers involved in the recruitment process.
If your application is unsuccessful, your application data will generally be deleted no later than six months after completion of the application process, unless:
- you have consented to longer storage in an applicant pool;
- the data is required to defend against legal claims; or
- statutory retention obligations apply.
Where you consent to inclusion in an applicant pool, your information may be retained for up to 24 months. You may withdraw this consent at any time.
If an employment or contractual relationship is established, the relevant application data may be transferred to the personnel file and processed for the administration of that relationship.
Please do not send unnecessary sensitive information, identification-document numbers or medical information with your initial application.
12. Recipients and Service Providers
We may disclose personal data to service providers where this is necessary to operate the website or process your request.
Possible recipients include:
- hosting and IT service providers
- email and communication providers
- website administrators
- WordPress and plugin service providers
- Google, where you consent to Google Maps or reCAPTCHA
- legal, tax or professional advisers where necessary
- public authorities where disclosure is required by law
Service providers acting on our instructions are contractually required to process personal data only in accordance with our instructions and applicable data-protection law.
We do not sell personal data.
13. International Data Transfers
The controller, IN4NOVA DOO LOZNIČKO POLJE, is established in Serbia. The website is hosted in Germany and IN4NOVA GmbH acts as our representative in the European Union.
Personal data submitted through the website may therefore be accessed and processed by authorised members of IN4NOVA in Serbia and Germany.
Where personal data is transferred to a country outside the European Economic Area, we ensure that the transfer is based on an appropriate legal mechanism where required. Depending on the recipient and circumstances, this may include:
- an adequacy decision of the European Commission
- standard contractual clauses
- additional technical and organisational safeguards
- your explicit consent where legally permitted
- another applicable exception under Art. 49 GDPR
When Google Maps or reCAPTCHA is activated, data may also be processed in the United States or other countries in which Google or its service providers operate. Google provides information about its international transfer mechanisms and applicable data-transfer frameworks.
14. Storage and Deletion
We retain personal data only for as long as necessary for the relevant processing purpose.
The applicable retention period depends on:
- the purpose for which the data was collected
- contractual requirements
- statutory retention obligations
- limitation periods
- the need to establish, exercise or defend legal claims
- consent given by the data subject
Where no specific retention period is stated in this Privacy Policy, data will be deleted when it is no longer required and no legal obligation or legitimate reason requires continued storage.
If processing is based on consent and you withdraw that consent, the affected data will be deleted unless another legal basis permits or requires continued processing.
15. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
- unauthorised access
- accidental or unlawful loss
- destruction or alteration
- unauthorised disclosure
- misuse
- other unlawful processing
The website uses encrypted HTTPS communication.
Access to stored personal data is restricted to persons who require access for their duties.
No method of electronic transmission or storage can guarantee absolute security. However, we regularly review our measures and adapt them where appropriate.
16. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Google reCAPTCHA performs an automated technical assessment to distinguish legitimate users from automated or abusive activity. This assessment is used only to protect the form and website and is not used by IN4NOVA to make decisions that produce legal or similarly significant effects concerning you.
17. Your Rights
Subject to the applicable legal conditions, you have the following rights:
Right of access
You have the right to request confirmation as to whether we process personal data concerning you and to receive information about that data under Art. 15 GDPR.
Right to rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data under Art. 16 GDPR.
Right to erasure
You may request deletion of your personal data under the conditions set out in Art. 17 GDPR.
Right to restriction of processing
You may request restriction of processing under the conditions set out in Art. 18 GDPR.
Right to data portability
Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive your data in a structured, commonly used and machine-readable format under Art. 20 GDPR.
Right to object
You have the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR.
Where your personal data is processed for direct-marketing purposes, you may object at any time.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority.
You may in particular contact the supervisory authority in the EU Member State of:
- your habitual residence
- your place of work
- the place of the alleged infringement
The GDPR establishes these rights and the transparency obligations applying to controllers.
18. Exercising Your Rights
To exercise your rights or ask questions about data protection, contact:
Data Protection Officer
Slavisa Rosic
Email: slavisa.rosic@in4nova.com
You may also contact the controller:
IN4NOVA DOO LOZNIČKO POLJE
Drinska 20
15300 Lozničko Polje, Loznica
Republic of Serbia
Email: contact@in4nova.com
Or our representative in the European Union:
IN4NOVA GmbH
Laimingerstraße 5
85055 Ingolstadt
Germany
Email: contact@in4nova.com
We may request reasonable information to verify your identity before processing a data-protection request.
19. External Links
This website may contain links to websites operated by third parties.
We have no control over how these external providers process personal data. Once you leave our website, the privacy policy of the respective provider applies.
Please review the privacy information of the external website before submitting personal information.
20. Changes to This Privacy Policy
We may update this Privacy Policy where:
- legal requirements change
- the website or its technical functions change
- new services are introduced
- processing activities or providers change
The current version is always available on this website.
Last updated: July 2026
Manage Your Cookie Preferences
You can review or change your cookie and external-service preferences at any time:
