Privacy Policy
How Gunum Trade handles information when you browse our website or contact us.
Last updated: 22 September 2026
Who is responsible
Gunum Trade DOO, a limited liability company in Belgrade, Serbia, operates gunumtrade.rs and is the controller of the personal data described here. Company registration number: 21549690. Tax number (PIB): 111837034.
Contact address: Jurija Gagarina 231, Lokal 329, 11070 Novi Beograd, Belgrade, Serbia. Email: [email protected]. Telephone: +381 66 550 5511. You can use these details for privacy questions and rights requests.
This policy covers the website and initial enquiries. Information needed for a subsequent service engagement is addressed in the arrangements for that service. Please do not include passports, financial documents, health information or other sensitive information in the website form.
Browsing, hosting and security
Cloudflare, Inc. hosts and delivers the site through Cloudflare Pages and provides network security. Serving a page involves processing your IP address, requested URL, request time, browser information and technical connection or security logs. This processing is needed to deliver the site and protect it against abuse, including when you reject analytics.
We also store your analytics preference and a tab-session flag used by the page-loading animation. These do not measure your browsing for analytics. Fonts and site images are served as site assets.
When you contact us
The contact form sends your name, email address, chosen service, message and anti-spam verification response to Web3Forms (Web3Creative). Web3Forms delivers the enquiry to [email protected] and stores a submission copy. Our team uses your enquiry and subsequent correspondence to respond and discuss the service you requested. The required form fields and spam check are necessary to submit the form; you may instead email or call us.
hCaptcha, provided by Intuition Machines, Inc., loads on the contact page to check for automated abuse independently of analytics consent. It processes device, network and interaction signals and a verification result. The form account also has Web3Forms’ advanced spam filter enabled; its provider identifies CleanTalk and Akismet as possible spam-checking subprocessors. We do not send your enquiry contents to PostHog or use your email to identify analytics visits.
Optional analytics
Only after you accept, PostHog, Inc. helps us understand visits and improve the site. It processes page views and exits, clicks on links and buttons, language changes, contact-link clicks, form-start and successful-submission events, and error-page navigation. It also collects browser and device details, screen and viewport sizes, timestamps, browser-generated identifiers, IP addresses and approximate location derived from the IP address, referring website origins and filtered campaign tags.
Heatmaps and interaction signals help us see click positions, scrolling and clicks that appear to have no effect. Performance measurements describe page speed and responsiveness. Error tracking reports unhandled browser errors and rejected promises with technical stack locations; error messages and potentially sensitive properties are redacted. These records are pseudonymous, not anonymous. We do not create named visitor profiles from enquiries, use Google Analytics or run advertising/remarketing tags in this implementation.
What session replay shows
If you accept analytics, PostHog can reconstruct interactions within our web pages, such as clicks, pointer movement, scrolling and changes to the page. It does not record your entire device screen, other applications, camera or microphone.
Form inputs and designated private or editable text are masked. Embedded frames, including the CAPTCHA, are blocked from replay. Public page text and images can remain visible. Link and resource addresses are filtered, and form values and selected attributes are redacted. Console logging, network headers and request/response bodies are not recorded by our configuration. These safeguards reduce collection; they do not mean every item on a page is masked.
Why we process information
Optional analytics, replay, performance and error tracking rely on your consent. You can browse and contact us without accepting. We process enquiries to take steps at your request before entering a contract, or on our legitimate interest in answering business correspondence when your request is not contractual. Site delivery and proportionate anti-abuse protection serve our legitimate interest in maintaining a reliable, secure website. We may also retain or disclose information where necessary to meet a legal obligation or establish, exercise or defend legal claims.
These grounds are applied under Serbian personal-data protection law and, where applicable, the GDPR. The site does not make decisions with legal or similarly significant effects about you solely through automated processing.
Recipients and international processing
Authorised Gunum Trade personnel and technical service providers supporting the site can access data needed for their work. Our development and analytics support provider is Prome Solutions; Gunum Trade remains the website operator. Analytics requests pass through j.promesolutions.com to PostHog’s US Cloud project. The proxy does not move storage to Serbia or Europe.
PostHog data is hosted in the United States. Web3Forms is operated from India and uses infrastructure providers including AWS, Cloudflare and Hetzner. hCaptcha is a US service, and Cloudflare operates a global network. Processing may therefore take place outside Serbia and the EEA. Providers publish data-processing terms and international-transfer provisions, including standard contractual clauses where applicable; the links below explain their frameworks. Contact us for information about the safeguards applicable to your data or to request a copy. Analytics consent is not itself a substitute for a lawful transfer arrangement.
Data may also be disclosed to authorities when required by law or to professional advisers where necessary for a legal matter. Following an external link or using your own email/telephone service involves that service’s separate privacy practices.
How long information is kept
The Web3Forms account is set to delete stored submissions after 3 years. This setting covers the provider’s submission store, not copies delivered to our mailbox or subsequent correspondence. The necessary duration of enquiry correspondence depends on the request, any resulting engagement, applicable record-keeping duties and the time needed to handle disputes or legal claims; deletion requests can be sent to us at any time.
The PostHog project’s replay retention is set to 30 days. Analytics events, including performance and error events, are stored separately from recordings and follow PostHog’s plan-based event retention and deletion controls. Its published event windows are 1 year for free plans and 7 years for paid plans; enforcement is being rolled out by project, so these windows are not a guarantee of automatic deletion. You can request deletion through us.
Hosting and anti-abuse providers retain technical records according to their service and security requirements, including investigating abuse and meeting legal duties. Browser storage has different lifetimes, listed in the Cookie Policy. Withdrawing consent stops further optional collection but does not automatically erase data already received.
Your choices and rights
Use “Analytics preferences” in the footer of any page, then “Reject analytics”, to withdraw consent. “Accept analytics” enables it again. Closing the panel without choosing leaves your preference unchanged. Your choice is remembered in that browser; clearing site storage makes the site ask again. Withdrawal does not affect the lawfulness of earlier consent-based processing.
Subject to the conditions in applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Email [email protected] with your request. We may need proportionate information to verify you and locate the relevant records. For analytics, the browser identifier and approximate visit date may help, because we do not link visits to your name or email. We will explain how to provide those details if needed.
You may complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), or another competent supervisory authority where applicable. We update this policy when our practices change; the date above identifies this version.
Your choices and related policy
[email protected] · +381 66 550 5511