Legal

This privacy notice explains how the demo site dezimal.svilenkovic.rs ("the Site") handles personal data, consistent with EU GDPR (Reg. 2016/679) and the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti, "Sl. glasnik RS" 87/2018).

Data controller

The Site is operated by D. Svilenković (Serbia). Contact: info@svilenkovic.com. Because this is a demo / portfolio site, the operator is the controller for any data submitted here.

What we collect

• Contact-form submissions: name, email, company (optional), message text, timestamp, IP address.
• Server access logs: IP, user agent, requested URL, timestamp. Retained up to 30 days for security/abuse purposes.
• Analytics: Google Analytics 4 (measurement ID G-S83SEJQ064) — only after you click "Accept" on the cookie banner. We use IP anonymisation and Google Consent Mode v2; analytics is denied by default.
• Functional cookies: a single first-party cookie (cc_consent, 1 year) records your cookie choice. PHP session cookie is set transiently for CSRF protection on the contact form.

Lawful basis

• Form submissions: legitimate interest (Art. 6(1)(f) GDPR / čl. 12 ZZPL) — to respond to the inquiry. You may object at any time.
• Analytics & marketing cookies: explicit consent (Art. 6(1)(a) GDPR / čl. 12 ZZPL) collected via the banner.
• Server logs: legitimate interest — security and abuse prevention.

How long we keep it

• Form messages: up to 90 days from receipt, then deleted.
• Server logs: up to 30 days.
• Analytics: 14 months (GA4 default, configured maximum allowed without payment).

Who we share it with

We do not sell or rent personal data. Limited processors:

• Hosting infrastructure (Svilenković, Serbia — see svilenkovic.com).
• Google Ireland Ltd. — analytics, only after consent.

We do not transfer personal data outside the EU/EEA except via Google's standard contractual clauses (Consent Mode v2 keeps cookieless pings inside Google's GDPR posture).

Your rights

Under GDPR / ZZPL you can ask us to:

• Confirm whether we hold data about you and provide a copy (access).
• Correct inaccurate data (rectification).
• Delete your data (erasure / "right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time without affecting processing already performed.

Email info@svilenkovic.com. We respond within 30 days.

Complaints

If you are not satisfied, you can lodge a complaint with the Serbian DPA — Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti (poverenik.rs) — or your local EU supervisory authority.

Security

HTTPS is enforced (HSTS preload), responses use a strict CSP, contact-form posts require a CSRF token, and rate limits apply. We follow patch schedules for OS / web server / PHP and run periodic malware scans.

The Site uses the cookies listed below. Categories follow the EU "ePrivacy" terminology.

Name	Category	Purpose	Duration
cc_consent	Strictly necessary	Records your cookie banner choice	1 year
PHPSESSID	Strictly necessary	CSRF protection on contact form	Session
_ga, _ga_*	Analytics (consent)	Google Analytics 4 visitor ID	2 years (or until consent withdrawn)

To withdraw or change consent, clear the cc_consent cookie and reload — the banner reappears.

By accessing dezimal.svilenkovic.rs you agree to these terms. Disagreement = please don't use the Site.

Demo / portfolio nature

The Site presents a layout demonstration for a fictional consulting brand. No real consulting, contracting, sale of services, or business relationship is created by browsing the Site or submitting the contact form. Any pricing, statistic, or service description shown is for layout illustration only.

Intellectual property

Source code, layouts, and copy are © 2025–2026 D. Svilenković unless otherwise noted. Third-party components (Tailwind CSS, Font Awesome) keep their own licenses (MIT and CC BY 4.0 / SIL OFL respectively).

Acceptable use

• No automated scraping that violates robots.txt or the AUP.
• No attempt to bypass authentication, abuse the contact form, or test exploits without prior written authorization.
• Coordinated security disclosure: see /.well-known/security.txt.

Limitation of liability

The Site is provided "as is" with no warranties. Operator is not liable for indirect, incidental, or consequential damages arising from use of the Site.

Changes

These terms may be updated. The "Last updated" date at the top reflects the most recent revision.

Governing law

Serbian law applies. Disputes are subject to courts of competent jurisdiction in the Republic of Serbia. Where you are an EU consumer, mandatory provisions of your country's consumer law are unaffected.