Politika privatnosti
Poslednje ažuriranje: 8. jul 2026.
Ova Politika objašnjava koje lične podatke prikupljamo kroz platformu RankSEO (rankseo.rs), zašto ih prikupljamo, kako ih koristimo i štitimo, kao i koja prava imate u skladu sa Opštom uredbom o zaštiti podataka (GDPR) i Zakonom o zaštiti podataka o ličnosti Republike Srbije.
1. Ko smo mi
Platformu RankSEO pruža:
Za sva pitanja u vezi sa zaštitom podataka i ostvarivanjem vaših prava, kontaktirajte nas na info@rankseo.rs.
2. Naša dvostruka uloga: rukovalac i obrađivač
U zavisnosti od vrste podataka, imamo dve različite uloge prema GDPR-u:
Rukovalac (Controller)
Za podatke o vama kao korisniku platforme (nalog, email, prijava, tehnički logovi). Mi odlučujemo o svrsi i načinu obrade ovih podataka.
Obrađivač (Processor)
Za podatke koje vi unosite u platformu o svojim klijentima i njihovim veb-sajtovima (domeni, ključne reči, podaci iz Google Search Console, uptime podaci). Vi ste rukovalac tih podataka, a mi ih obrađujemo isključivo po vašim uputstvima. Za ovaj odnos zaključujemo poseban Ugovor o obradi podataka (DPA) u skladu sa članom 28 GDPR-a.
3. Koje podatke prikupljamo
Podaci koje nam vi dajete
- Podaci naloga: ime, email adresa, lozinka (čuvana u heširanom obliku)
- Podaci za kontakt i naplatu ako se pretplatite na uslugu
Podaci koje platforma automatski prikuplja
- IP adresa, podaci o prijavama i sesiji
- Tehnički logovi neophodni za rad i bezbednost platforme
Podaci koje obrađujemo u vaše ime (kao obrađivač)
- Domeni i URL adrese sajtova koje pratite
- Podaci iz Google Search Console koje povezujete sa platformom
- Podaci o pozicijama ključnih reči, uptime i tehnički SEO podaci
4. Svrhe i pravni osnov obrade
| Svrha | Pravni osnov |
|---|---|
| Pružanje i održavanje usluge (nalog, praćenje pozicija, izveštaji) | Izvršenje ugovora (čl. 6(1)(b)) |
| Bezbednost platforme, sprečavanje zloupotreba, tehnički logovi | Legitimni interes (čl. 6(1)(f)) |
| Obrada podataka klijenata koje unosite | Po uputstvu rukovaoca — vas (čl. 28) |
| Komunikacija i podrška | Izvršenje ugovora / legitimni interes |
5. Period čuvanja podataka
- Podaci naloga: tokom trajanja korišćenja usluge i do 90 dana nakon prestanka, radi eventualne reaktivacije i pravnih obaveza.
- Tehnički i uptime logovi: u pokretnom prozoru (do 12 meseci), nakon čega se automatski brišu ili anonimizuju.
- Podaci klijenata (obrađivačka uloga): dok ih vi držite u platformi; brišu se na vaš zahtev ili po prestanku ugovora.
Podatke ne čuvamo duže nego što je neophodno za navedene svrhe.
6. Podobrađivači i treće strane
Za rad platforme koristimo sledeće pružaoce usluga koji mogu obrađivati podatke u naše ime:
| Podobrađivač | Svrha | Lokacija |
|---|---|---|
| Contabo GmbH | Hosting i skladištenje podataka | Nemačka (EU) |
| Cloudflare, Inc. | Merne tačke i zaštita saobraćaja | SAD / globalna mreža |
| DataForSEO LLC | Podaci o ključnim rečima i SERP-u | SAD |
| Google (Search Console / API) | Podaci o učinku u pretrazi, mape | SAD / EU |
Sa svakim podobrađivačem imamo ili zaključujemo odgovarajući ugovor o obradi podataka. Ažuriranu listu podobrađivača dostavljamo na zahtev.
7. Međunarodni prenos podataka
Naš server se nalazi u Nemačkoj (EU). Međutim, pošto se naša firma nalazi u Srbiji (van Evropskog ekonomskog prostora), a pojedini podobrađivači (DataForSEO, Google, Cloudflare) u SAD-u, može doći do prenosa podataka van EEA.
Takve prenose vršimo uz odgovarajuće mehanizme zaštite predviđene GDPR-om, prevashodno Standardne ugovorne klauzule (SCC) Evropske komisije, odnosno druge zakonom priznate osnove.
8. Bezbednost podataka
Primenjujemo odgovarajuće tehničke i organizacione mere zaštite, uključujući enkripciju prenosa (HTTPS/TLS), kontrolu pristupa, heširanje lozinki i redovno održavanje sistema. Nijedan sistem nije apsolutno bezbedan, ali kontinuirano radimo na zaštiti podataka od neovlašćenog pristupa, gubitka ili zloupotrebe.
9. Vaša prava
U skladu sa GDPR-om imate sledeća prava:
- Pristup — da dobijete kopiju podataka koje o vama obrađujemo
- Ispravka — da ispravite netačne podatke
- Brisanje — da zatražite brisanje podataka („pravo na zaborav")
- Ograničenje obrade
- Prenosivost podataka — da dobijete podatke u strukturiranom formatu
- Prigovor na obradu zasnovanu na legitimnom interesu
- Povlačenje saglasnosti u svakom trenutku, gde je obrada zasnovana na saglasnosti
- Pritužba nadzornom organu (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti u Srbiji, odnosno nadležni organ u vašoj zemlji)
Zahtev možete uputiti na info@rankseo.rs. Odgovorićemo u roku od 30 dana.
10. Kolačići
Platforma koristi isključivo neophodne (funkcionalne) kolačiće potrebne za prijavu i rad aplikacije. Ne koristimo analitičke ni marketinške kolačiće. Ukoliko to bude uvedeno u budućnosti, tražićemo vašu saglasnost pre postavljanja bilo kakvih neophodnih kolačića i ažurirati ovu Politiku.
11. Povreda podataka
U slučaju povrede zaštite podataka koja može predstavljati rizik za prava i slobode lica, obavestićemo nadležni nadzorni organ u roku od 72 sata i, gde je to potrebno, obavestiti pogođena lica bez nepotrebnog odlaganja.
12. Izmene ove Politike
Ovu Politiku možemo povremeno ažurirati. Datum poslednjeg ažuriranja naveden je na vrhu stranice. O značajnim izmenama obavestićemo vas putem platforme ili emailom.
13. Kontakt
Za sva pitanja o ovoj Politici privatnosti ili obradi vaših podataka:
Privacy Policy
Last updated: 8 July 2026
This Policy explains what personal data we collect through the RankSEO platform (rankseo.rs), why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (GDPR) and the Serbian Personal Data Protection Act.
1. Who we are
The RankSEO platform is provided by:
For any data-protection questions or to exercise your rights, contact us at info@rankseo.rs.
2. Our dual role: controller and processor
Depending on the type of data, we act in two distinct roles under the GDPR:
Controller
For data about you as a platform user (account, email, login, technical logs). We determine the purpose and means of processing this data.
Processor
For data you enter into the platform about your own clients and their websites (domains, keywords, Google Search Console data, uptime data). You are the controller of that data; we process it solely on your instructions. For this relationship we enter into a separate Data Processing Agreement (DPA) under Article 28 GDPR.
3. What data we collect
Data you provide
- Account data: name, email address, password (stored hashed)
- Contact and billing details if you subscribe to the service
Data the platform collects automatically
- IP address, login and session data
- Technical logs necessary for platform operation and security
Data we process on your behalf (as processor)
- Domains and URLs of the sites you monitor
- Google Search Console data you connect to the platform
- Keyword position data, uptime and technical SEO data
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the service (account, rank tracking, reports) | Performance of a contract (Art. 6(1)(b)) |
| Platform security, abuse prevention, technical logs | Legitimate interest (Art. 6(1)(f)) |
| Processing client data you enter | On the controller's (your) instructions (Art. 28) |
| Communication and support | Contract / legitimate interest |
5. Data retention
- Account data: for the duration of service use and up to 90 days after termination, for reactivation and legal obligations.
- Technical and uptime logs: on a rolling window (up to 12 months), after which they are automatically deleted or anonymised.
- Client data (processor role): for as long as you keep it in the platform; deleted on your request or upon contract termination.
We do not retain data longer than necessary for the stated purposes.
6. Sub-processors and third parties
To operate the platform we use the following service providers, who may process data on our behalf:
| Sub-processor | Purpose | Location |
|---|---|---|
| Contabo GmbH | Hosting and data storage | Germany (EU) |
| Cloudflare, Inc. | Monitoring probes and traffic protection | USA / global network |
| DataForSEO LLC | Keyword and SERP data | USA |
| Google (Search Console / API) | Search performance data, maps | USA / EU |
We have or enter into an appropriate data processing agreement with each sub-processor. An up-to-date list of sub-processors is available on request.
7. International data transfers
Our server is located in Germany (EU). However, since our company is based in Serbia (outside the European Economic Area) and some sub-processors (DataForSEO, Google, Cloudflare) are in the USA, data transfers outside the EEA may occur.
We carry out such transfers using appropriate safeguards required by the GDPR, primarily the European Commission's Standard Contractual Clauses (SCCs) or other legally recognised bases.
8. Data security
We apply appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), access control, password hashing and regular system maintenance. No system is absolutely secure, but we continuously work to protect data against unauthorised access, loss or misuse.
9. Your rights
Under the GDPR you have the following rights:
- Access — obtain a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction of processing
- Data portability — receive your data in a structured format
- Object to processing based on legitimate interest
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with a supervisory authority (the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or the competent authority in your country)
You can send requests to info@rankseo.rs. We will respond within 30 days.
10. Cookies
The platform uses only strictly necessary (functional) cookies required for login and application operation. We do not use analytics or marketing cookies. If this changes in the future, we will request your consent before placing any non-essential cookies and update this Policy.
11. Data breaches
In the event of a personal-data breach likely to result in a risk to individuals' rights and freedoms, we will notify the competent supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.
12. Changes to this Policy
We may update this Policy from time to time. The last-updated date is shown at the top of the page. We will notify you of material changes via the platform or by email.
13. Contact
For any questions about this Privacy Policy or the processing of your data: