FiscalScan - politika privatnosti

Poslednje ažuriranje: 31. avgust 2026.

Rukovalac podacima za aplikaciju FiscalScan je LIDDER MONOLIT doo, Dr Žarka Fogaraša 52a, 26000 Pančevo. Za pitanja o privatnosti pišite na office@nd.rs.

Podaci koje obrađujemo

Radi prijave i sprovođenja poslovne licence obrađujemo email/korisničko ime, identifikator naloga, naziv uređaja i kriptografski identitet uređaja. Kada korisnik zatraži obradu računa, obrađujemo podatke fiskalnog računa, PIB primaoca, pripremljene PDF/XML/CTL dokumente, email adresu primaoca i opcionu napomenu. Cloud pristupni parametri koje obezbedi korisnik ili njegova firma koriste se samo za izvršenje traženog slanja.

Svrha i pravni osnov

Podatke koristimo za pružanje ugovorene B2B usluge, proveru licence i limita, bezbednost naloga, slanje dokumenata u izabrani cloud ili na email i tehničku podršku. Obrada se zasniva na izvršenju ugovora sa poslovnim korisnikom, preduzimanju radnji na zahtev korisnika i legitimnom interesu zaštite sistema od zloupotrebe.

Kamera, fotografije i Poreska uprava

Kamera se koristi samo za čitanje QR koda. Korisnik može izabrati pojedinačnu fotografiju radi čitanja QR koda; aplikacija ne pregledava ostatak biblioteke. URL iz QR koda šalje se zvaničnom SUF servisu Poreske uprave Republike Srbije radi provere i preuzimanja podataka računa. Kada QR nije čitljiv, korisnik može ručno uneti PFR broj, brojač računa, ukupan iznos i PFR vreme. Ti podaci se prikazuju u originalnoj SUF formi koju korisnik lično šalje Poreskoj upravi. Zvanična strana koristi sopstveni Google reCAPTCHA mehanizam; aplikacija ga ne zaobilazi niti čuva ručno unete podatke posle završetka ili napuštanja tog toka.

Čuvanje i zaštita

Istorija obrade na uređaju automatski se zadržava najviše godinu dana. Pristupni tokeni, privatni ključ uređaja i ručno uneti cloud parametri čuvaju se u Apple Keychain-u odnosno Android Keystore-u. Cloud lozinke upisane uz licencu šifrovane su na serveru. Dokumenti poslati emailom obrađuju se radi slanja, a dokumenti poslati u cloud čuvaju se prema pravilima cloud naloga poslovnog korisnika. Podatke naloga i evidenciju licence čuvamo dok je to potrebno za pružanje usluge, zaštitu sistema i ispunjenje zakonskih obaveza.

Deljenje, oglašavanje i praćenje

Podatke ne prodajemo, ne koristimo za oglašavanje i ne pratimo korisnike između aplikacija i sajtova. Podaci se prosleđuju samo pružaocima infrastrukture koji su potrebni za rad servisa, izabranom email primaocu, cloud nalogu poslovnog korisnika i zvaničnom SUF servisu kada je to potrebno za funkciju koju je korisnik pokrenuo.

Prava korisnika i zahtev za brisanje

U skladu sa Zakonom o zaštiti podataka o ličnosti možete tražiti pristup, ispravku, brisanje ili ograničenje obrade, kao i uložiti prigovor kada su za to ispunjeni uslovi. Zahtev pošaljite na office@nd.rs sa naslovom „FiscalScan - zahtev za brisanje” i navedite email naloga i šifru kupca. Potvrdićemo identitet podnosioca i obavestiti vas šta je obrisano, a šta moramo zadržati zbog zakonskih obaveza ili zaštite sistema. FiscalScan naloge otvara i gasi administrator poslovnog korisnika; nalog se ne može samostalno otvoriti u mobilnoj aplikaciji.

Imate pravo i da se obratite Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

Izmene

Ako ovu politiku značajno izmenimo, objavićemo novu verziju na ovoj adresi i ažurirati datum na vrhu stranice.

FiscalScan - Privacy Policy

Last updated: 31 August 2026.

The data controller for the FiscalScan application is LIDDER MONOLIT doo, Dr Žarka Fogaraša 52a, 26000 Pančevo, Serbia. For privacy enquiries, contact office@nd.rs.

Data we process

To sign users in and administer business licences, we process the email address or username, account identifier, device name and cryptographic device identity. When a user requests receipt processing, we process fiscal receipt data, the recipient's tax identification number, prepared PDF/XML/CTL documents, the recipient's email address and an optional note. Cloud access details provided by the user or their company are used only to complete the requested delivery.

Purpose and legal basis

We use the data to provide the contracted B2B service, verify licences and limits, protect accounts, deliver documents to the selected cloud service or by email, and provide technical support. Processing is based on performing the contract with the business customer, taking steps at the user's request and our legitimate interest in protecting the system from misuse.

Camera, photos and the Tax Administration

The camera is used only to read a QR code. The user may select an individual photo for QR-code recognition; the application does not browse the rest of the photo library. The URL from the QR code is sent to the official SUF service of the Tax Administration of the Republic of Serbia to verify and download receipt data. If the QR code cannot be read, the user may manually enter the PFR number, receipt counter, total amount and PFR time. Those details are displayed in the original SUF form, which the user submits directly to the Tax Administration. The official page uses its own Google reCAPTCHA mechanism; the application neither bypasses it nor retains manually entered details after the user completes or leaves that flow.

Retention and security

Processing history on the device is retained automatically for no longer than one year. Access tokens, the device private key and manually entered cloud settings are stored in Apple Keychain or Android Keystore. Cloud passwords stored with a licence are encrypted on the server. Documents sent by email are processed for delivery, while documents sent to a cloud service are retained under the rules of the business customer's cloud account. We retain account data and licence records for as long as necessary to provide the service, protect the system and meet legal obligations.

Sharing, advertising and tracking

We do not sell data, use it for advertising or track users across applications and websites. Data is shared only with infrastructure providers required to operate the service, the email recipient selected by the user, the business customer's cloud account and the official SUF service when required for a function initiated by the user.

User rights and deletion requests

Under the Serbian Law on Personal Data Protection, you may request access, correction, deletion or restriction of processing and may object where the applicable conditions are met. Send the request to office@nd.rs with the subject “FiscalScan - data deletion request” and include the account email address and customer code. We will verify the requester's identity and explain what has been deleted and what must be retained to meet legal obligations or protect the system. FiscalScan accounts are created and closed by the business customer's administrator; an account cannot be created independently in the mobile application.

You also have the right to contact the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

Changes

If we materially change this policy, we will publish the new version at this address and update the date shown at the top of the page.