Privacy Policy

Last updated: 24 October 2026

1. Who processes your data

The data controller is HERC PRIME DOO Beograd, Višegradska 1, 11000 Belgrade, Serbia, company registration no. 20808373, tax ID (PIB) 107465213 (“HERC PRIME”, “we”). For any question about personal data, email office@herc.rs or call +381 64 880 88 88.

This policy applies to the herc.rs website. Our products DScore (dscore.live), DS2 (ds2.app) and DS Scout (ds-scout.com) have their own privacy policies, published on those websites.

2. What data we process and why

Technical visit data

When you open the website, the server automatically records your IP address, the time of access, the requested page, the referring page and browser and device information. We use this data to run the website, protect it from abuse and fix errors. The legal basis is our legitimate interest (Article 12(1)(6) of the Serbian Law on Personal Data Protection; Article 6(1)(f) GDPR). We keep this data for up to 12 months.

Analytics — only with your consent

If you accept analytics cookies, we use Google Analytics 4 to learn which pages are visited, how long visits last, which devices are used and which countries and cities visitors come from. Google sets the cookies _ga and _ga_VT7SBXZ8ZW, which last up to 2 years. The legal basis is your consent (Article 12(1)(1) of the Law on Personal Data Protection and Article 126 of the Law on Electronic Communications; Article 6(1)(a) GDPR). Without consent, Google Analytics is not loaded.

The analytics provider is Google Ireland Limited, and data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework. By accepting analytics you also consent to this transfer. Google keeps analytics data for up to 14 months.

You can withdraw consent at any time via the “Cookie settings” link at the bottom of the website or with this button: Change cookie settings

When you contact us

If you email or call us, we process your name, email address or phone number, organisation and the content of your message to reply and arrange cooperation. The legal basis is taking steps at your request before entering into a contract and our legitimate interest in answering inquiries. We keep correspondence while the communication or cooperation lasts and for up to 3 years after the last contact, unless regulations (for example on accounting) require longer.

Content from other services

The website loads styles and icons from public content delivery services (cdn.tailwindcss.com and cdn.jsdelivr.net). To send you these files, those services see your IP address and browser information. When you follow a link to another website (for example YouTube, our partners or our products), that website’s privacy policy applies.

3. Cookies and local storage

• herc_consent (browser local storage) remembers your analytics choice. It is strictly necessary, is never sent to the server and stays until you delete it.
• _ga and _ga_VT7SBXZ8ZW are Google Analytics cookies, set only with your consent, lasting up to 2 years.

The website uses no advertising or social media cookies.

4. Who can access the data

We do not sell or rent personal data. Access is limited to:

• the server provider hosting the website (Velia.net, data centre in France), as a processor on our behalf;
• Google, for analytics, only if you consented;
• email and telephone providers, when you contact us;
• public authorities, only where required by law.

5. Your rights

You have the right to request access to your data, rectification or erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.

Send requests to office@herc.rs. We reply without undue delay and within 30 days at the latest. If you believe the processing is unlawful, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia (www.poverenik.rs). If you live in the European Union, you may also complain to the supervisory authority in your country.

6. Security

The website is served only over an encrypted connection (HTTPS). Server access is limited to authorised persons, and the system is regularly updated and backed up.

7. Children

The website is not intended for children under 15, and we do not knowingly collect their data.

8. Automated decision-making

We do not make automated decisions or carry out profiling with legal or similarly significant effects on you.

9. Changes

We may update this policy when our services or the law change. The updated version is published on this page with a new date.