Goran Stimac
Menu

Legal

Privacy and Data Protection Policy

This policy explains how personal data is handled on the production website at goranstimac.com. The site is intentionally lightweight and does not use a public account system, comments, or a marketing tracker stack by default.

Data controller

The data controller for this website is Goran Stimac, operating the website at goranstimac.com.

If you have questions about this policy or your personal data, you can contact:

What this website collects

The website is designed to minimize data collection. In normal browsing, it does not require an account, does not offer comments, and does not intentionally collect more information than is needed to deliver pages and respond to direct enquiries.

Browsing the site

When you browse the site, the hosting infrastructure and network layer may process technical data such as:

  • IP address
  • browser and device information
  • requested pages and timestamps
  • referrer information
  • log data needed for security, troubleshooting, and abuse prevention

Direct contact by email

If you contact me directly by email, I may process the information you choose to share, such as your name, email address, company name, phone number, project details, and any other information included in your message.

That data is used only to:

  • respond to your enquiry
  • prepare a proposal or continue a business discussion
  • keep a record of the communication where necessary for legitimate business purposes

Cookies and analytics

Current production setup

As of the current production setup, this website does not use a third-party marketing tracker stack or a non-essential analytics platform in the page code.

Future analytics changes

If a future analytics tool is added, this policy will be updated to explain:

  • which provider is used
  • what data is collected
  • the legal basis for processing
  • whether cookies or similar identifiers are involved

Some essential cookies or browser storage may still be used by the hosting platform or network infrastructure to deliver the site securely and reliably.

Depending on the situation, the legal basis for processing may be:

  • your consent, when you actively contact me or use an external service that asks for it
  • legitimate interests, for example to operate the website securely, respond to enquiries, or maintain business records
  • legal obligation, when records must be kept under applicable law

Third-party services

This website includes links to third-party services such as social networks, GitHub, YouTube, SoundCloud, Google Maps, Google Reviews, and the newsletter provider.

Those services are independent controllers. If you follow one of those links or use their services, their own privacy and cookie policies apply.

Newsletter and embedded third-party actions

The site may link to a newsletter signup service. If you subscribe there, your data is processed by that provider under its own privacy terms.

The website does not embed a large amount of third-party content by default. If embedded media or tracking-enabled services are introduced later, that will be reflected in this policy.

Data retention

Retention periods

Retention depends on the context:

  • email enquiries are kept for as long as needed to handle the enquiry, continue a business discussion, or keep relevant records
  • technical logs are retained for a limited period needed for security, reliability, and troubleshooting
  • newsletter data is retained according to the provider’s retention and unsubscribe process

When data is no longer needed, it should be deleted or anonymized where practical.

Your rights

User rights

Subject to applicable law, you may have the right to:

  • access your personal data
  • correct inaccurate or incomplete data
  • delete your data
  • restrict or object to processing
  • request portability where applicable
  • withdraw consent where processing is based on consent

If you believe your rights have been violated, you may also have the right to contact your local data protection authority.

Children

This website is intended for professional and business-related visitors and is not directed at children.

Security

Reasonable technical and organizational measures are used to keep the site lightweight and reduce unnecessary data collection. No system is completely risk-free, but the website is maintained with a low-data, low-complexity approach.

Changes to this policy

This policy may be updated if the website, hosting setup, analytics approach, or legal requirements change. The most recent version should always be available on this page.