legal information

Privacy Policy and Cookies

We respect your privacy. Here we explain what data we collect, why we use it, which cookies are used and which rights you have.

Last updated: 26 October 2026.

1. Data controller

The controller of personal data on izradasajta.rs is Izrada Sajta (sole proprietor: Branislav Grujić), Belgrade, Serbia. For any questions about data processing you can contact us at dizajn@izradasajta.rs.

2. What data we process

  • Enquiry data. When you fill in the contact form we process your name, e-mail address, phone number (optional), the selected service and the content of your message.
  • Direct communication. If you write to us via Viber, WhatsApp or e-mail, we process your phone number or e-mail address and the content of the messages.
  • Technical data. The server hosting the site automatically records the IP address, access time, requested pages and browser data (server logs) for security and correct operation.
  • Visit measurement data. Only with your consent, and only if measurement is enabled on the site, Google Analytics 4 is used. It records pages visited, device type, approximate location and events on the site (for example a click on the Viber or WhatsApp button).
  • Google Map. When you display the embedded map, Google receives your IP address and browser data.

We do not collect sensitive personal data and do not use data for automated decision-making or profiling.

  • Answering enquiries and quotes: steps taken at your request before entering a contract and our legitimate interest in replying to enquiries.
  • Performance of a contract: if we work together, we use data to deliver the agreed services and to meet legal obligations (for example accounting).
  • Security and operation of the site (server logs): our legitimate interest.
  • Analytics and third-party content (Google Analytics, Google Map): your consent, which you can withdraw at any time.

4. Cookies and similar storage

On your first visit we show a banner with the choice "Accept all" or "Necessary only". Both choices are equally available. You can change your choice at any time using the "Cookie settings" link at the bottom of every page.

  • Necessary: only your cookie choice is stored in your browser's memory (localStorage, key izs_cc) until you delete it yourself. It is not used for tracking and is not sent to us.
  • Analytics (only with consent): Google Analytics 4 sets the cookies _ga and _ga_* valid for up to 2 years. If you choose "Necessary only", analytics is not loaded.
  • Third-party content: the Google Map on the Contact page is loaded only when you display it or accept all cookies. Google may then set its own cookies, which are governed by Google's privacy policy.

The site does not use advertising cookies or social network cookies.

5. Who we share data with

  • FormSubmit (USA): a service that forwards contact form messages to our e-mail.
  • Google (USA): Google Analytics and Google Maps, only with your consent.
  • Hosting provider: stores the site files and server logs.
  • Viber and WhatsApp: third-party communication apps, whose own terms and privacy policies apply to their processing.

Some of these services may transfer data outside Serbia, including to the USA. The transfer relies on the legal safeguards those providers apply. We do not sell data.

6. Retention

We keep enquiry data as long as needed to answer the enquiry and carry out any cooperation, then delete it or keep it only as long as legal obligations require. Server logs are kept briefly, according to the hosting provider's settings. Google Analytics data is kept according to the account settings, at most 14 months.

7. Your rights

Under the Serbian Law on Personal Data Protection and, if you are in the European Union, under the GDPR, you have the right to request access to your data, rectification, erasure, restriction of processing, portability, to object to processing and to withdraw consent at any time. Send your request to dizajn@izradasajta.rs. You may also contact the Commissioner for Information of Public Importance and Personal Data Protection of Serbia (poverenik.rs) or the supervisory authority in your country.

8. Security

The site uses an HTTPS connection and only authorised persons have access to enquiry data. No transmission over the internet is completely secure, but we take reasonable technical and organisational measures to keep the risk to a minimum.

9. Minors

The site is not intended for persons under 16 and we do not knowingly collect their data. If you believe we have received it, tell us and we will delete it.

The site may contain links to third-party pages. We are not responsible for their content or privacy policies.

11. Changes to this policy

We may change this policy from time to time. The current version is always published on this page, with the date of the last update at the top.