Last updated: October 3, 2026

This policy explains how personal information is handled through Logistik WM Lite Mobile (the App), an Android application provided by Digital Solutions d.o.o. (Digital Solutions, we, us). The App’s package name is rs.digitalsolutions.logistik.wmlite.mobile.

This policy is an information notice, not a commercial offer or a standalone software or service agreement. Publication does not by itself create additional contractual duties or warranties. Services and contractual responsibilities are governed by applicable law and validly agreed terms.

1. Who is responsible for personal information

The business or organization that authorizes your access (the Customer Organization) determines who may use the App, what goods receipt and issue records are maintained and how those records, including records of user activity, are used for its workplace purposes. It ordinarily acts as controller, or for another controller, and is responsible for lawful processing, informing individuals, managing access, retention and requests concerning records it controls.

Digital Solutions does not assume responsibility, merely by providing the App, for privacy or security practices independently determined and implemented by the Customer Organization. This does not exclude obligations or liability that apply to Digital Solutions’ own processing or conduct.

Where Digital Solutions processes information solely on the Customer Organization’s behalf, it acts as a processor or subprocessor under the applicable processing arrangements and lawful instructions. Hosting, maintenance, technical support and security measures performed on that organization’s behalf do not, by themselves, make Digital Solutions a controller of customer records. Those arrangements govern the agreed processing services; this notice does not replace them.

Digital Solutions acts as controller only for separate processing for which it determines its own purposes and essential means. That role is limited to the specific processing concerned, with the applicable purposes and legal bases described in section 6; it does not extend to customer records processed solely on the Customer Organization’s behalf. Providing the App alone does not make Digital Solutions the controller of customer records or the administrator of customer-operated systems.

2. What the App does

The App enables authorized workplace users to record goods received into and issued from storage facilities. It displays a web service selected during device setup, together with its supporting server components (the connected service). Information entered or displayed through the App is processed by that service and, as needed for functionality, by the App.

Available functions depend on the connected service and user permissions. The App has no separate native offline database of goods receipt and issue records, although local settings and web-session data can remain on the device. Hosting, administration, backup and recovery depend on the relevant service arrangements; the App is not itself a backup.

3. Information processed

Depending on the service configuration and features used, processing can include:

• Setup and installation information: service-connection settings, provisioning and authorization information, an App-generated installation identifier and temporary authentication information.
• Account and session information: usernames, internal user identifiers, roles, credentials submitted at sign-in, session information and access events. The native App does not separately store the connected-service password.
• Goods receipt and issue records: product and barcode information, quantities, storage locations, customer or supplier details, documents, related references and notes, and records identifying users who performed operations.
• Technical information: IP addresses, request and connection information, App and device-software information, and diagnostic, security and audit records.
• Communications: information provided in support enquiries or privacy requests.

Different components process different information. This list does not mean that all customer records are sent to or retained by Digital Solutions’ setup and authorization service. Installation identifiers and business records can be personal information when linked to an identifiable person.

The current release does not include third-party advertising, behavioral analytics or crash-reporting SDKs.

4. Scanning and device permissions

Keyboard-style barcode scanners supply values to the connected service like manually entered text. The current release does not request camera, microphone, location, contacts, storage or nearby-device permissions.

A workflow may open Android’s system prompt to enable Bluetooth. The App does not itself scan for or pair nearby devices. Independent processing by Android, Google Play or device providers is covered by their own privacy information; this does not remove Digital Solutions’ responsibilities for its own processing or integrations.

5. Why information is processed

Information is used, as relevant to each component and role, to:

• configure access, authorize users and installations, and maintain sessions;
• record goods receipts and issues and maintain associated audit trails;
• protect services, investigate errors or misuse, prevent duplicate actions and provide agreed support; and
• handle privacy requests, comply with legal obligations and establish, exercise or defend legal claims.

Digital Solutions does not sell personal information or use App information for third-party behavioral advertising, cross-app advertising tracking or data-broker profiling.

6. Legal basis

The Customer Organization determines the legal basis for processing it controls. Digital Solutions processes information on its behalf under the applicable processing arrangements and lawful instructions.

For processing it controls, Digital Solutions uses the following bases, as applicable:

• Service administration, security, support communications and legal claims: legitimate interests in those activities, where not overridden by individuals’ rights.
• Processing required by law: compliance with the relevant legal obligation.
• Processing necessary to perform a contract with the individual concerned: performance of that contract, where the individual is a party to it.

Consent is requested separately where required; this notice is not blanket consent. Information needed to identify the service environment and authorize access is necessary to use those functions.

7. Cookies and local data

Connection settings, installation identifiers and session information can be stored on the device, including in WebView cookies and cache. These support functionality, preferences and security, not advertising.

Signing out, resetting the connection and clearing App storage are different actions. Their effects depend on the relevant App or service function; they do not necessarily remove all local information. Remaining information can persist until expiry or removal through the relevant App or Android controls. Removing local data does not delete server records.

8. Sharing and disclosure of personal information

Personal information may be shared or made accessible, as needed for the purposes described in this policy and where there is a lawful basis, to:

• The Customer Organization and its authorized users and administrators, to operate and manage workplace accounts and goods receipt and issue records.
• The connected-service operator and authorized Digital Solutions personnel, as relevant to their roles in providing agreed services, handling support or privacy requests, and protecting the systems they operate.
• Hosting, infrastructure and other technical service providers, as needed to deliver, maintain, support or protect the relevant services.
• Competent authorities or other recipients, where disclosure is required by law or lawfully necessary to respond to valid legal requests, protect services against misuse, or establish, exercise or defend legal claims.

Digital Solutions’ processors and subprocessors are subject to the safeguards and customer authorization required for the relevant relationship. Providers independently appointed by a Customer Organization are not automatically Digital Solutions subprocessors. That organization supplies information about its own providers; Digital Solutions supplies information about those for which it is responsible.

9. Security and responsibility for systems

Digital Solutions applies technical and organizational measures appropriate to the processing and risks in the components it operates, including access controls and protection of stored configuration information. Personal information and credentials must be transmitted using modern encryption, such as HTTPS/TLS. Operators are responsible for configuring systems within their control, subject to applicable law and agreed duties. Selecting a service address does not certify that environment’s security.

No system is guaranteed completely secure or continuously available. This notice provides no guarantee that every incident, unauthorized access or loss of data will be prevented.

To the extent permitted by applicable law and binding agreements, Digital Solutions is not responsible for security incidents or resulting data loss caused by unauthorized modifications, misuse of access credentials, or the operation or configuration of systems controlled by the Customer Organization or its independently appointed providers, except to the extent attributable to an act or omission for which Digital Solutions is legally responsible.

10. Retention

Personal information is retained for the relevant purpose and any applicable legal need. Retention depends on the type of record and who controls it:

• Local settings and sessions: until expiry or removal through the relevant App, service or device controls, depending on their type.
• Digital Solutions’ setup, support and technical records: according to the need to administer authorized installations, resolve requests or investigate incidents, and any applicable legal retention requirements or periods for legal claims.
• Customer accounts and business records: according to the Customer Organization’s lawful retention requirements and instructions. Where Digital Solutions acts as processor, return or deletion follows the processing agreement and applicable law.

Residual backup copies may remain until overwritten or removed under the relevant backup cycle, subject to applicable protection and retention requirements. This does not mean that a backup or recovery service is included with the App.

11. Privacy requests and deletion

Subject to applicable law, you may request access, correction, erasure, restriction or portability of your personal information, object to certain processing, and withdraw consent where processing relies on it. Withdrawal does not affect earlier lawful processing.

For workplace accounts and business records, contact the Customer Organization that issued access. The App does not offer public self-registration. Account deactivation, local reset and uninstalling are not the same as deletion of server records.

You may also contact office@digitalsolutions.rs, identifying the relevant organization and request. Proportionate verification of identity or authority may be required. Digital Solutions handles requests about its own processing and, where it acts as processor, assists or refers the request to the responsible organization as required by law and the processing arrangements.

Erasure is subject to lawful retention exceptions, including legal obligations and legal claims. Applicable response periods and remedies are determined by law. You may complain to the competent supervisory authority; in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection.

12. Processing locations and transfers

Processing locations depend on the connected service and its providers. Information may be processed outside your country. For transfers for which Digital Solutions is responsible, applicable transfer requirements and required safeguards apply. Information about the locations and safeguards for Digital Solutions’ processing can be requested at office@digitalsolutions.rs.

Contact the Customer Organization for information about hosting and transfers it arranges or controls.

13. Children

The App is intended for authorized workplace users and is not directed to children for consumer use. Digital Solutions does not knowingly collect children’s personal information through the App for consumer purposes.

14. Scope of this notice and changes

Publishing this policy explains how personal information is handled. Publication does not, by itself, create a separate service contract, extend agreed services, establish a service-level commitment or create an independent contractual undertaking to compensate losses. The descriptions in this policy do not certify a Customer Organization’s infrastructure or establish a separate guarantee of business results, uninterrupted operation, data recovery or complete security.

Contractual responsibilities and any liability are determined by applicable law and validly agreed contractual terms. This notice does not amend those terms. Nothing in this policy excludes or limits rights, remedies or obligations that cannot lawfully be excluded or limited, including the obligation to provide accurate information about processing. Individuals are not required to waive their privacy rights.

We can update this policy to reflect changes to the App, services, applicable requirements or data practices. The date above will be updated on publication. Additional notice will be provided where required, and consent will be requested separately where a change requires it.

15. Contact

Digital Solutions d.o.o.
Gorana Kovačića 1
11080 Belgrade (Zemun), Serbia

Email: office@digitalsolutions.rs
Website: https://digitalsolutions.rs