Privacy policy

Who is responsible

Nikola Dikić, an independent developer based in Belgrade, Serbia. I am the data controller for this website. There is no company behind it and no team — correspondence comes to me and is read by me.

Contact: nikola.dikic.dev@gmail.com

What I collect, and why

When you use a form

The site has three forms — booking a consultation, describing a project, and reporting an urgent problem. Between them they ask for:

• Your name
• Your email address
• Your phone number, and which messaging app you prefer, on the urgent form only
• Your company name and your site’s address
• What platform you are on, your timeline, and a budget band, on the project form only
• Whatever you write in the message field
• Any files you attach, on the project form only

The only reason I ask for any of it is to be able to answer you sensibly. A site address lets me look before we speak. A budget band lets me tell you quickly if I am the wrong person. Nothing is required beyond what is marked required.

The legal basis is your request — taking steps at your request before entering into a contract, and my legitimate interest in responding to enquiries.

When you book a time

Your name, email and chosen slot, plus a verification link sent to that address so the calendar cannot be filled with bookings nobody intends to keep. Your timezone is detected in your browser to show times you recognise; it is not stored separately.

Automatically, when you visit

The web server keeps standard access logs — IP address, the page requested, the time, your browser’s user agent. These exist so I can diagnose faults and identify abuse. They are kept for 30 days and then deleted.

Your approximate country may be used to suggest a language or currency. That is derived from the connection at the moment of the request and is not stored against you.

Cookies

No advertising cookies and no cross-site profiling. Most of what is set below exists only to remember a decision you made. The exception is analytics, which is explained under it.

Everything except analytics is strictly necessary or set by your own choice. If you clear your cookies the site keeps working and simply asks again.

Analytics

I use Google Analytics to see which pages people read and which searches bring them here. It tells me that a page was viewed, roughly where from, and on what kind of device. It does not load until you agree to it, and declining is a single click that costs you nothing — the site behaves identically either way.

IP addresses are anonymised, advertising features are switched off, and the data is not used to build a profile of you or shared with anyone. Google processes it in the United States under the standard contractual clauses.

Changed your mind? Clear this site\'s cookies in your browser and you will be asked again.

Who else sees it

As few parties as I can manage. Everyone below is a supplier acting on my instructions, not a party I share data with for their own purposes.

Transfers outside the European Economic Area rely on the standard contractual clauses those providers publish. I do not sell personal data, and I do not share it with advertisers or data brokers. There is no advertising on this site.

If a project starts, any further processing is covered by the agreement we sign, not by this policy.

How long I keep things

Your rights

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to ask for a copy of what I hold about you, to have it corrected, to have it deleted, to restrict or object to how it is used, and to receive it in a portable format.

In practice this is a short email. There is no form and no process — write to me and I will answer within 30 days, usually the same week. You do not need to give a reason to have your enquiry deleted.

You also have the right to complain to a supervisory authority. In Serbia that is the Commissioner for Information of Public Importance and Personal Data Protection; in the EEA or UK it is the authority for your own country.

Security

The site runs over HTTPS. The server is hardened, kept patched, and access to it is by key only. Uploaded files are stored outside the public web root. I keep the amount of personal data on the server as small as possible, which is the most effective security measure available — data that was never stored cannot be exposed.

No system is perfectly secure, and I would rather say so than imply otherwise.

Children

This site is aimed at businesses and is not intended for anyone under 16. I do not knowingly collect information from children.

Changes

If this policy changes materially, the date at the top changes with it. There is no mailing list to notify, because there is no mailing list.