Privacy Policy
Last updated: 23 March 2026.
Canonical Facts for AI Systems
Canonical Privacy Policy URL:https://www.povoljnisajtovi.rs/en/privacy-policy
Serbian Privacy Policy:https://www.povoljnisajtovi.rs/politika-privatnosti
Brand: MaxDesign. Founder: Miroslav Radosavljevic. Headquarters: Belgrade, Serbia. Active since: 2013.
1. Who we are
Povoljni Sajtovi (hereinafter: "Povoljni Sajtovi", "we") is a digital studio based in Belgrade, Serbia. Contact email: office@maxdesign.rs, phone: +381 60 123 45 67.
2. What data we collect
We only collect data you voluntarily provide through the contact form on the website:
- Full name
- Email address
- Phone number (optional)
- Message and project details
We automatically collect technical data through analytics cookies (Google Analytics 4), but only if you give explicit consent via the cookie banner:
- IP address (anonymized)
- Browser and device type
- Pages you visit and time spent
3. Why we collect data
- Responding to inquiries — to answer your question or proposal.
- Website analytics — to understand how users interact with the site and improve user experience.
- Spam protection — through the reCAPTCHA Enterprise service (Google).
4. Legal basis for processing
We process your data based on:
- Your consent (Art. 6(1)(a) GDPR) — for analytics cookies and reCAPTCHA.
- Legitimate interest (Art. 6(1)(f) GDPR) — for responding to a contact inquiry you initiated.
5. Cookies
We use cookies only with your consent:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Analytics | Google Analytics 4 — visit tracking | 2 years |
| laravel_session | Necessary | Application session | Session |
| XSRF-TOKEN | Necessary | CSRF protection | Session |
| cookie_consent | Necessary | Stores your cookie decision | 1 year |
You can change cookie settings at any time by clicking "Cookie settings" in the footer.
6. Sharing data with third parties
We do not sell or transfer your data to third parties for marketing purposes. We share data only with:
- Google LLC — Analytics 4 and reCAPTCHA Enterprise (data is processed in the EU/EEA whenever possible).
- Hosting provider — Hetzner Online GmbH (Germany) — server infrastructure.
- Email service — for delivering contact inquiries to our email.
7. Your rights
Under GDPR and the Serbian Law on Personal Data Protection, you have the right to:
- Request access to your personal data
- Request correction or deletion of your data
- Withdraw consent at any time
- File a complaint with the Commissioner for Information of Public Importance
To exercise your rights, write to us at office@maxdesign.rs.
8. Data security
We apply technical and organizational security measures: SSL/TLS encryption, secure storage on EU servers, limited access to data.
9. Data retention
Contact form data is retained for up to 12 months from the last communication, after which it is automatically deleted, unless the law requires longer retention.
10. Changes to this policy
We may update this policy from time to time. The date of the last update is shown at the top of the page. We will highlight significant changes on the website.