This policy explains which personal data we process when you use kursdanas.rs, why, on what legal basis and what rights you have. It is written in line with the General Data Protection Regulation (GDPR) for visitors from the European Economic Area and with the Personal Data Protection Act of the Republic of Serbia (Official Gazette of the RS, no. 87/2018), under which the publisher of the site operates.
Data controller
The controller is the publisher of kursdanas.rs. For any question about personal data, contact us through the contact form.
What data we collect
Data you give us
- Contact form — your name, e-mail address, subject and the content of your message. We process them in order to answer your question. Legal basis: our legitimate interest in replying to an enquiry, or taking steps at your request.
Data that arises automatically
- Technical data about the request — IP address, time of access, page requested, browser type. This appears in server logs and serves security, detection of abuse and prevention of spam. Legal basis: legitimate interest.
- Cookies and similar technologies — see the Cookie policy.
We do not collect special categories of personal data and we do not knowingly process the data of minors.
How long we keep the data
- Messages from the contact form: up to 12 months after the last exchange.
- Server logs: up to 90 days.
Once those periods expire, the data is deleted or irreversibly anonymised.
Third parties that process data
Google AdSense
The site is funded by adverts delivered by Google (Google Ireland Limited). Google and its partners may use cookies and similar technologies to display adverts, measure how they perform and, with your consent, to personalise adverts on the basis of your earlier visits to this and other sites.
- Google’s privacy policy: policies.google.com/privacy
- Ad settings: adssettings.google.com
- How Google uses data from partner sites: policies.google.com/technologies/partner-sites
For visitors from the EEA, the United Kingdom and Switzerland, consent is collected through a framework that meets Google’s requirements. Until consent is given, adverts are shown without personalisation and Google’s consent mechanism (Consent Mode v2) keeps every storage category in the “denied” state.
Analytics
We use a traffic measurement tool for statistics on the number of visits and the most-read pages. Analytics cookies are set only after you consent; until then, if anything is collected at all, it is collected without identifiers and without cookies.
Hosting and delivery
The site is hosted on a server in the European Union. The hosting provider processes data on our instructions, under a data processing agreement.
Transfers outside the EEA
Google may also process data outside the European Economic Area. In such cases the transfer is made on the basis of the European Commission’s standard contractual clauses or another appropriate safeguard.
Your rights
You have the right to:
- access the data we process about you and receive a copy of it;
- rectify inaccurate data and complete incomplete data;
- erase your data (the “right to be forgotten”) when there is no longer a basis for processing;
- restrict processing or object to it, including an objection to processing based on legitimate interest;
- port your data to another controller in a structured, machine-readable format;
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
Send your request through the contact form. We reply within 30 days at the latest.
If you believe that we process your data contrary to the rules, you have the right to lodge a complaint with the supervisory authority in your country of residence, or with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Bulevar kralja Aleksandra 15, Belgrade).
Security
Traffic to and from the site is encrypted (HTTPS). Access to data is limited to the small number of people who need it in order to maintain the site. Passwords are stored only as cryptographic hashes.
Changes to this policy
We may change this policy when the rules, the technologies we use or the scope of processing change. The date of the last revision is shown at the top of this page. Significant changes are announced on the home page.
Frequently asked questions
Two things. What you send through the contact form — name, e-mail address, subject and message — which we process in order to reply to you. And technical data that arises automatically in server logs: IP address, time of access, page requested and browser type, kept for security and abuse detection. We collect no special categories of data and do not knowingly process data about minors.
Contact form messages for up to twelve months after the last exchange, and server logs for up to ninety days. After those periods the data is deleted or irreversibly anonymised. The policy names a legal basis for each: our legitimate interest in replying, or steps taken at your request. There are no accounts here, so no profile accumulates beyond those two things.
Access to the data we hold and a copy of it, rectification, erasure, restriction of processing, objection, portability, and withdrawal of consent at any time without affecting what was lawful before. Send the request through the contact form and we reply within thirty days at the latest. You may also complain to the supervisory authority in your country of residence.