The Ministry of Finance of the Republic of Serbia has recently issued the opinion no. 011-00-313/2022-04 (“the Opinion”), which refers to taxation of the fees paid by resident legal entities to non-residents for leasing servers abroad.
Content of the Opinion
According to the Opinion, if a resident legal entity pays to non-resident legal entity fee for leasing server abroad, exclusively for data storage, there is no obligation to pay withholding tax by virtue of the Law on Corporate Profit Tax (Official Gazette of RS no. 25/2001, 80/2002, 80/2002 – other law, 43/2003, 84/2004, 18/2010, 101/2011, 119/2012, 47/2013, 108/2013, 68/2014 – other law, 142/2014, 91/2015 – authentic interpretation, 112/2015, 113/2017, 95/2018, 86/2019, 153/2020 and 118/2021) (“the Law on Corporate Profit Tax“).
Namely, according to Article 40, paragraph 1 of the Law on Corporate Profit Tax, unless otherwise foreseen by a double taxation treaty, withholding tax at 20% rate shall be calculated and paid for profit earned by non-resident legal entity from resident legal entity on the following bases:
- dividends and share in profit of legal entity, including dividend under Article 35 of this law;
- fee from copyright and related rights and intellectual property rights;
- fee from rental and sub-rental of movables and immovable in the territory of the Republic of Serbia;
- fee from the services of market research, accounting and auditing services and other services in the field of legal and business counselling, irrespective of the place of their provision or use and/or place where they will be provided or used.
Accordingly, in a situation where resident legal entity pays to non-resident legal entity fee for server leasing abroad where resident (as lessee) exclusively stores data, while no fee for any other service is being paid i.e., use of non-resident’s software for processing and distribution of such data, the fee paid by resident to non-resident is not subject to withholding tax.
Personal data protection
Nevertheless, this situation should also be observed from the aspect of regulations on personal data protection, notably the Law on Personal Data Protection (Official Gazette of RS no. 87/2018) (“the Law on Personal Data Protection“).
Namely, the Law on Personal Data Protection defines personal data processing as any activity or set of activities that are done automatically or non-automatically with personal data or sets thereof, such as collection, noting, classification, grouping and/or structuring, storage, adjusting or modifying, disclosing, insight, use, disclosing by transfer and/or submission, copying, dissemination or other form of making available, comparing, restricting, deleting or destroying.
Therefore, storage, i.e., keeping personal data on servers that are physically located abroad represents an activity of personal data processing by their transfer in terms of the Law on Personal Data Protection.
The Law on Personal Data Protection further stipulates that any transfer of personal data whose processing is in progress or which are intended for further processing after their transfer to another state or international organisation may only be done if, under other provisions of this law, the controller and processor act in compliance with the legally prescribed requirements, including further transfer of personal data from other states or international organisations to a third state or international organisation, for the purpose of ensuring appropriate level of protection of natural persons that is equivalent to the level guaranteed by this law. In other words, a precondition for lawful transfer by virtue of the Law on Personal Data Protection is compliance of data processing with all obligations established by this law.
In relation thereto, it should be noted that compliance of transfer with the provisions is examined, i.e., established from case to case, according to all relevant circumstances.
This article is to be considered as exclusively informative, with no intention to provide legal advice.
By Ivana Ruzicic, Managing Partner, and Lara Maksimovic, Senior Associate, PR Legal