Last updated: 15 October 2026
This is an English translation of our privacy policy, provided for convenience. In case of any discrepancy, the Serbian version prevails.
This Privacy Policy explains how METRIK SOLUTIONS DOO SUBOTICA processes personal data when you use the Bar Metrik website, the Bar Metrik mobile applications for iOS and Android, and related services (the “Service”). We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of RS, No. 87/2018) (the “Law”).
1. Data controller
- Company name
- METRIK SOLUTIONS DOO SUBOTICA
- Registered office
- Ivana Broza 14A, 24000 Subotica, Serbia
- Registration number
- 22336045
- Tax ID (PIB)
- 115987435
- office@barmetrik.com
For any questions about the processing of personal data or exercising your rights, you can contact us at the email address above.
2. What data we collect
2.1. Inquiry form data
When you send us an inquiry through the website, we collect:
- first and last name;
- the name of your company or venue (optional);
- email address and/or phone number.
2.2. User account
We use an email address and password to sign in to the app. The account and password are managed by Amazon Cognito (AWS); we never see your password or store it in readable form. The app stores your email address and session tokens on your device to keep you signed in; they are removed when you sign out.
2.3. Customer and subscription data
When you subscribe to the Service, we process customer data: contact person name, company or venue name, address, postal code, city and country, as well as data about the selected plan, invoices (issued and due, line items, amounts) and licence status. We do not collect or store payment card data.
2.4. Data about the customer's employees
The customer (venue owner or manager) can add profiles of employees who perform inventory counts — first name, last name and the PIN the employee uses to sign a count. The person who performed each count and its time are recorded.
2.5. Business inventory data
Inventory counts and reports (measured quantities, comments, time), counting locations, the personal product catalog (including product photos you upload yourself), favorite products, display order and settings. This is the customer's business data, but it is linked to the account and to the person who performed the count. Count drafts are synchronized in real time between devices signed in to the same account.
2.6. Inventory count email notifications
The customer can enter up to 10 email addresses that receive a PDF report when a count is completed. These addresses are stored in our database and may belong to third parties (e.g. the owner or an accountant) — the customer is responsible for obtaining their consent. You can turn notifications off in the settings.
2.7. Technical data and error reports
The app and our server send error reports, technical logs and performance data to Sentry. These include: a randomly generated installation identifier (not tied to the device hardware), the email address of the signed-in user, device model, operating system and app version, and the time of the event. We do not record users' IP addresses.
2.8. Device permissions
- Bluetooth — to connect to the Bar Metrik scale.
- Location — on some Android versions, the operating system requires this permission to allow scanning for Bluetooth devices. Bar Metrik does not collect, store or transmit your location data.
- Photos / gallery — only when you choose an image for a product in the catalog yourself.
3. Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Responding to inquiries and arranging cooperation | Taking steps at the data subject's request prior to entering into a contract (Art. 12(1)(2) of the Law) |
| Providing the Service, account management, customer support | Performance of a contract (Art. 12(1)(2) of the Law) |
| Invoicing and bookkeeping | Compliance with the controller's legal obligations (Art. 12(1)(3) of the Law) |
| Security, troubleshooting and improving app stability (Sentry) | Legitimate interest of the controller (Art. 12(1)(6) of the Law) |
| Inventory count email reports to addresses entered by the customer | Performance of a contract; only at the customer's choice |
We do not use your data for automated decision-making or profiling.
4. The customer as controller of employee data
With respect to employee data the customer enters into the app (section 2.4), the customer is the controller, and METRIK SOLUTIONS DOO processes that data on the customer's behalf as a processor, solely to provide the Service. The customer is responsible for informing employees about this processing. Employees exercise their rights regarding this data primarily with their employer, and we will provide the employer with any necessary assistance.
5. Cookies and the website
Our website does not use cookies for tracking, analytics or advertising. The website loads fonts from Google Fonts, which means your IP address is passed to Google when you visit. More information is available in Google's privacy policy.
6. Who we share data with
We do not sell or rent your data. We use the following processors:
- Amazon Web Services — server and database hosting, authentication (Cognito), image storage (S3) and email delivery (SES). Data is stored in the eu-north-1 region (Stockholm, Sweden).
- Sentry — error and performance reports (servers in the European Union).
- Google Fonts — loading fonts on the website (see section 5).
- accounting and legal advisors, to the extent necessary for their work;
- public authorities, where we are required to do so by law.
7. Transfers outside the Republic of Serbia
Data is stored on servers in the European Union (Sweden), which provides an adequate level of protection. Service providers headquartered outside the EU (Amazon, Sentry, Google) may process data subject to appropriate safeguards under Articles 64 and 65 of the Law, such as standard contractual clauses.
8. Data retention
- Inquiry data — up to 12 months from the last contact, if no cooperation follows.
- Inventory counts and reports — deleted automatically after the retention period of the customer's plan (90 days by default).
- Account, catalog, employees and settings — for as long as the account exists; permanently deleted when the account is deleted (see section 11).
- Invoices and accounting records — for the periods required by accounting law, including after the account is deleted.
- Technical logs and error reports — according to Sentry settings (up to 90 days by default).
- Database backups — deleted data may remain in backups until they expire, after which it is permanently erased.
9. Data security
We apply appropriate technical and organizational safeguards, including encrypted communication (HTTPS/TLS), authentication through AWS Cognito, per-account access control and access to data restricted to authorized personnel only. Employee PINs are used to record who performed a count, not to protect sensitive data.
10. Your rights
Under the Law, you have the right to:
- access your data and obtain a copy of the data we process;
- rectification of inaccurate and completion of incomplete data;
- erasure of data;
- restriction of processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
You can send a request to office@barmetrik.com. We will respond without delay, and no later than 30 days after receiving the request.
If you believe the processing of your data violates the Law, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, www.poverenik.rs.
11. Account deletion
You can permanently delete your account and all associated data in either of these ways:
- in the app: Podešavanja (Settings) → Moj nalog (My account) → Obriši nalog (Delete account), confirmed with your password;
- on the account deletion page, by entering your email address and password;
- by sending a request from your account's email address to office@barmetrik.com.
Deletion permanently removes the account, inventory counts and reports, counting locations, the product catalog and product photos, employee profiles, notification email addresses and settings. We retain invoices for the period required by law. More details are available on the account deletion page.
12. Minors
The Service is intended for businesses and is not intended for persons under 18. We do not knowingly collect data about minors.
13. Changes to this privacy policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by email or through a notice in the app. The date of the last change is shown at the top of this page.