Privacy Policy

Last updated: 17 October 2026

NIT Institute respects your privacy. This Privacy Policy explains how personal data is collected and used when you visit NIT Institute websites, contact us, explore our products and consultancy services, register for training, purchase courses, or use related learning services.

This notice applies to our websites and services, including academy.nit-institute.com, products.nit-institute.com, and consultancy.nit-institute.com, as applicable. Some training platforms or third-party services may display additional privacy information.

1. Who is responsible for your data?

For the NIT services covered by this policy, the primary contact and relevant controller is:

NIT Institut DOO za informacione tehnologije Novi Sad
Fruskogorska 1, Novi Sad, Serbia
Email: info@nit-institute.com
Website: https://academy.nit-institute.com/contact-us/

Where a contract, order, or service is provided by another NIT legal entity or a business customer, the applicable contract or supplementary notice may identify the relevant controller and any additional arrangements. For privacy inquiries, contact us using the email above.

2. Personal data we collect

Depending on how you interact with us, we may process:

  • Contact and business information: name, email, telephone number, organization, job title, country, and inquiry content.
  • Enrollment and account information: chosen courses, enrollment records, employer or billing organization, learning-platform account details, participation, assignments, examination outcomes, certificates, and correspondence relating to course delivery.
  • Orders and payment-related information: products and courses purchased, billing details, invoices, payment status, transaction references, and refund information. Payment-card details, where applicable, are handled by the relevant payment provider rather than being stored in our standard website records.
  • Support and communications: questions, requests, messages, replies, feedback, and records reasonably necessary to support participants and customers.
  • Technical information: IP address, browser and device information, approximate region, timestamps, pages requested, security logs, and cookie or similar technology preferences.
  • Optional analytics and marketing data: website events, campaign attribution, and other information gathered by optional technologies when the necessary consent has been provided.

Please avoid submitting sensitive personal information unless it is specifically needed and we have arranged an appropriate means of receiving it.

3. Why we use personal data and our legal bases

We process personal data for the following purposes, where permitted by applicable law:

Purpose Typical legal basis
Responding to inquiries, preparing proposals, and communicating with prospective customers Steps before entering a contract and/or legitimate interests in responding to business requests
Delivering courses, managing enrollment and access, examinations, certificates, consultancy, and purchased services Performance of a contract or steps requested before entering one
Billing, payment administration, accounting, and legally required records Contract performance and compliance with legal obligations
Maintaining website security, preventing misuse, troubleshooting, and protecting our services Legitimate interests and, where relevant, legal obligations
Non-essential audience measurement, advertising, and marketing pixels Consent, when required
Sending optional promotional emails Consent or another basis only where specifically permitted by applicable marketing law, with a clear opt-out

Where we rely on legitimate interests, we assess those interests against the rights and freedoms of the people concerned. You can contact us for further information about the basis applicable to a particular activity.

4. Courses, learning platforms, and certification

When you enroll, we may use your information to arrange course access, coordinate instructors and sessions, track training progress, answer support inquiries, conduct assessments, and issue or verify certificates. If a company enrolls its employees, certain participation or achievement information may be shared with that company as described in the training arrangement and as legally permitted.

We may use third-party educational, conferencing, discussion, and file-sharing platforms to provide these activities. Additional platform notices may apply when you access those services.

5. Cookies, analytics, advertising, and embedded content

We use strictly necessary technologies to operate and secure our websites and services, support checkout and account sessions where relevant, and remember privacy choices. These do not require marketing consent.

With your permission, we may also use:

  • Analytics technologies to understand how visitors use the websites and improve content and services.
  • Marketing technologies, including advertising and conversion measurement tools, to evaluate campaigns and show relevant promotions.
  • Third-party embedded content, such as videos provided through Vimeo. Playing or loading this content may involve sharing technical information with its provider and may involve its own cookies or other technologies.

Our technology providers may include Google (including Google Tag Manager and related services where configured), Meta, Vimeo, and providers supporting our websites and learning platforms. The precise cookies and recipients depend on which features are enabled on the page.

Where consent is required, we will seek it before activating optional technologies. You can reject optional categories or adjust your choices using Cookie settings in the website footer. You can withdraw consent at any time without losing access to essential website features. Some embedded features may need your permission to load.

We aim to keep information about active cookie providers, purposes, and retention periods up to date. For specific cookie information or assistance with preferences, contact info@nit-institute.com.

6. Forms and direct communications

When you submit a form or contact us by email, we use the information to handle your request, follow up where appropriate, and maintain reasonable related records. Submitting an inquiry does not by itself enroll you in optional promotional emails. If we invite you to receive marketing communications, the choice will be separate from the request itself where required.

7. Who may receive your data?

We share personal data only to the extent reasonably necessary for the purposes described here, potentially with:

  • Providers of website hosting, IT administration, email, cloud storage, support, and security services.
  • Payment and invoicing providers, and professional advisers involved in transactions or legal obligations.
  • Course instructors, coordinators, online learning, conferencing and certification providers.
  • Analytics, video and advertising providers only as permitted by the relevant settings, agreements, and legal requirements.
  • Employers or corporate clients in relation to training purchased for their personnel, where applicable.
  • Regulators, public authorities, or other recipients when disclosure is required by law.

We do not sell personal data to data brokers. Where service providers process data for us, we seek appropriate contractual and security protections.

8. International data transfers

Our operations, customers, and service providers may be located in Serbia, the European Economic Area, the United States, and other countries. When data is transferred internationally, we assess the legal requirements applicable to the transfer and use an appropriate mechanism or safeguards where required, such as relevant contractual protections. You may contact us for information about safeguards relevant to your data.

9. How long we keep information

We keep information for no longer than reasonably necessary for its purpose, subject to legal obligations and legitimate needs such as accounting, dispute resolution, training administration, and certificate verification.

  • Inquiries and proposals: retained for a reasonable follow-up period unless a longer period is justified.
  • Orders, invoices and financial records: retained for the period required by applicable accounting, tax, and commercial laws.
  • Course and certification records: retained as needed to deliver the training and support certificate verification, subject to applicable requirements and individual rights.
  • Technical and security logs: retained for a limited period appropriate to their security or operational purpose.
  • Marketing choices and consents: retained as needed to respect choices and demonstrate compliance; marketing data is deleted or anonymized when no longer needed.

Retention periods may differ by legal entity, service, and country. You can request information about a particular record by contacting us.

10. Security

We use reasonable technical and organizational measures designed to protect personal information, including access controls, encrypted connections where applicable, and limits on access to information needed for service delivery. No online system can be guaranteed to be completely secure.

11. Your privacy rights

Depending on the law applying to your data, you may have the right to:

  • Request access to personal data held about you.
  • Correct inaccurate or incomplete information.
  • Ask us to erase data or restrict processing in appropriate circumstances.
  • Object to processing based on legitimate interests in appropriate circumstances.
  • Receive data in a portable format where the relevant conditions apply.
  • Withdraw consent at any time for processing based on consent, without affecting lawful processing before withdrawal.
  • Complain to the competent data-protection supervisory authority, including the Serbian Commissioner for Information of Public Importance and Personal Data Protection or a relevant EU/EEA supervisory authority where applicable.

To submit a request, email info@nit-institute.com. We may need to verify your identity before responding. Certain legal exceptions may apply.

12. Changes to this Policy

We may revise this policy when our services, technology, legal requirements, or data-handling practices change. The latest version will be published on this page with the updated date. We will provide additional notice if legally required for significant changes.

13. Contact

For privacy questions, consent concerns, or requests relating to personal data:

NIT Institut DOO za informacione tehnologije Novi Sad
Fruskogorska 1, Novi Sad, Serbia
info@nit-institute.com
https://academy.nit-institute.com/contact-us/