Privacy Policy

Last updated: 30/10/2026

This Privacy Policy explains which personal data we process when you visit www.ideaholding.net or contact us through it, why we do so, how long we keep it and which rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Serbian Law on Personal Data Protection (ZZPL) and, where applicable, the Swiss Federal Act on Data Protection (FADP).

1. Who is responsible (data controller)

Idea Holding
Branka Gerlića 8, 22000 Mačvanska Mitrovica, Serbia
E-mail: support@ideaholding.biz

For all questions about data protection and to exercise your rights, please write to support@ideaholding.biz.

2. Visiting the website

When you open a page, our web server automatically records technical information that your browser sends: IP address, date and time, the page requested, the referring page, and the browser and operating system (user agent).

  • Purpose: delivering the website, keeping it secure (for example detecting attacks and abuse) and fixing errors.
  • Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).
  • Retention: server logs are deleted automatically after 14 days, unless a log is needed to investigate a specific security incident.

Visit statistics. For every page of this website that you open we additionally save one record in our own database (hosted in the EU): the page, the date and time, your IP address, the referring website, your browser, operating system and device type, and your browser language. To show on a map from which country and city the visits come, the IP address is sent to the geolocation service ipwho.is, and the resulting location (country, region, city, internet provider) is saved with it. Requests from search-engine robots and other automated programs are not counted. When you open one of our free tools (psychrometric chart, piping pressure drop), the IP address, the date and time and the country are also saved in a separate usage record that counts how often each tool is used. The values you enter into the tools are not saved.

  • Purpose: finding out which pages and tools are used and from which countries, to improve our website and our offer.
  • Legal basis: our legitimate interest in knowing how our website and free tools are used (Art. 6(1)(f) GDPR). You can object at any time (see section 11).
  • Retention: visit records are deleted automatically after 24 months.
  • Access: only authorised employees of IDEA can see the statistics, in a protected administration area.

We do not use third-party analytics, advertising or tracking tools, we do not set tracking cookies, and we do not create user profiles.

3. Cookies

The website uses only strictly necessary cookies:

  • a security cookie that protects our forms against forged submissions (cross-site request forgery);
  • an access cookie for each free tool you open (names starting with idea_tool_). It proves that you opened the tool from our website, is valid for two hours and is used to protect the tool from automated misuse.

They contain no personal information and are removed when you close your browser or when they expire. Because they are technically necessary, no consent is required (Art. 6(1)(f) GDPR and the applicable e-privacy rules).

We do not use analytics, marketing or third-party cookies.

4. Contact form

When you send us a message, we process the data you enter: name, company (optional), e-mail address, subject and message.

  • Purpose: answering your enquiry and, where relevant, preparing an offer.
  • Legal basis: steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
  • Retention: we delete the message when your enquiry has been fully handled, at the latest 24 months after our last contact, unless a business relationship results from it or legal retention periods apply.

5. Job applications (Careers)

When you apply, we process your first and last name, e-mail address, phone number (optional), your message and your CV.

  • Purpose: carrying out the recruitment process.
  • Legal basis: steps prior to entering into an employment contract (Art. 6(1)(b) GDPR, Art. 88 GDPR and national employment law).
  • Retention: your application is deleted 6 months after the recruitment process ends, unless you are hired or you agree that we keep it longer for future vacancies. You can withdraw that agreement at any time.

Your CV is checked for type and size and sent to our recruitment mailbox by e-mail. It is not stored on the web server.

6. Newsletter

If you subscribe, we first send one confirmation e-mail to the address you entered (double opt-in). Only when you click the link in it, you are added to the newsletter list. We store your e-mail address, the date and time of your sign-up and confirmation, your IP address at sign-up (as proof of consent) and the fact that you subscribed via the website. If you do not confirm, we send nothing further.

  • Purpose: sending news about IDEA, our software and events.
  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Retention: until you unsubscribe. You can unsubscribe at any time with one click via the link in every newsletter or by writing to support@ideaholding.biz. After you unsubscribe we keep only your e-mail address on a block list, so that you do not receive a newsletter by mistake again (legitimate interest, Art. 6(1)(f) GDPR). Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

7. YouTube videos

Videos are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com) and are only loaded when you click on them. Before that click, no data is sent to YouTube; the preview image is loaded from YouTube's image server (i.ytimg.com), which receives your IP address. After the click, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) receives data such as your IP address and may set cookies. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework.

  • Legal basis: your action of starting the video (Art. 6(1)(a) GDPR) and our legitimate interest in showing product videos (Art. 6(1)(f) GDPR).

More information: Google Privacy Policy.

8. Recipients and service providers

We do not sell your personal data and do not share it for advertising. We use the following service providers (processors), bound by data processing agreements:

  • Amazon Web Services EMEA SARL (Luxembourg) – hosting of the website and sending of form e-mails (Amazon SES), sending of the newsletter and the database with the newsletter list and visit statistics. Data is stored in AWS data centres in the European Union.
  • ipwho.is – receives the IP address of visitors to determine the country and city for our visit statistics (see section 2). No other data about you is sent to this service.
  • Our business e-mail provider – receiving and storing the e-mails generated by the forms.

Within our group (IDEA Software HVAC d.o.o., Serbia; Motta d.o.o., Bosnia and Herzegovina; Idea Trading Sagl, Switzerland), personal data is shared only where needed to answer your enquiry or application.

9. Transfers outside the EU/EEA

Serbia, Bosnia and Herzegovina and Switzerland are outside the EU/EEA. Switzerland is recognised by the European Commission as providing an adequate level of protection. For other transfers we use the European Commission's Standard Contractual Clauses or other safeguards under Chapter V GDPR. You can request a copy of these safeguards from us.

10. Security

We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS/TLS), protection against forged form submissions and spam, restricted server access, regular security updates and access to personal data only for the people who need it.

11. Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR);
  • rectification of incorrect data (Art. 16 GDPR);
  • erasure (Art. 17 GDPR);
  • restriction of processing (Art. 18 GDPR);
  • data portability (Art. 20 GDPR);
  • object to processing based on legitimate interests (Art. 21 GDPR);
  • withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise these rights, write to support@ideaholding.biz. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority – in Serbia the Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs), or the authority in the EU country where you live or work.

12. Obligation to provide data

You are not obliged to provide personal data. Without the data marked as required, however, we cannot answer your enquiry, consider your application or send you the newsletter.

13. Changes to this policy

We may update this Privacy Policy when our website or the law changes. The current version is always available on this page, with the date of the last update at the top.