Privacy Policy

1. Who we are

Povoljni Sajtovi (hereinafter: "Povoljni Sajtovi", "we") is a digital studio based in Belgrade, Serbia. Contact email: office@maxdesign.rs, phone: +381 60 123 45 67.

2. What data we collect

We only collect data you voluntarily provide through the contact form on the website:

• Full name
• Email address
• Phone number (optional)
• Message and project details

We automatically collect technical data through analytics cookies (Google Analytics 4), but only if you give explicit consent via the cookie banner:

• IP address (anonymized)
• Browser and device type
• Pages you visit and time spent

3. Why we collect data

• Responding to inquiries — to answer your question or proposal.
• Website analytics — to understand how users interact with the site and improve user experience.
• Spam protection — through the reCAPTCHA Enterprise service (Google).

4. Legal basis for processing

We process your data based on:

• Your consent (Art. 6(1)(a) GDPR) — for analytics cookies and reCAPTCHA.
• Legitimate interest (Art. 6(1)(f) GDPR) — for responding to a contact inquiry you initiated.

5. Cookies

We use cookies only with your consent:

Cookie	Type	Purpose	Duration
_ga, _ga_*	Analytics	Google Analytics 4 — visit tracking	2 years
laravel_session	Necessary	Application session	Session
XSRF-TOKEN	Necessary	CSRF protection	Session
cookie_consent	Necessary	Stores your cookie decision	1 year

You can change cookie settings at any time by clicking "Cookie settings" in the footer.

6. Sharing data with third parties

We do not sell or transfer your data to third parties for marketing purposes. We share data only with:

• Google LLC — Analytics 4 and reCAPTCHA Enterprise (data is processed in the EU/EEA whenever possible).
• Hosting provider — Hetzner Online GmbH (Germany) — server infrastructure.
• Email service — for delivering contact inquiries to our email.

7. Your rights

Under GDPR and the Serbian Law on Personal Data Protection, you have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Withdraw consent at any time
• File a complaint with the Commissioner for Information of Public Importance

To exercise your rights, write to us at office@maxdesign.rs.

8. Data security

We apply technical and organizational security measures: SSL/TLS encryption, secure storage on EU servers, limited access to data.

9. Data retention

Contact form data is retained for up to 12 months from the last communication, after which it is automatically deleted, unless the law requires longer retention.

10. Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top of the page. We will highlight significant changes on the website.