Privacy Policy

This policy explains which personal data we collect through this website, why we use it and which rights you have. We process personal data in accordance with the Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia No. 87/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

Controller

Novaković Law Office (Advokatska kancelarija Novaković), attorney Dušan Novaković
Radnička 7, 21000 Novi Sad, Republic of Serbia
Email: [email protected]

Data we process

Contact form. When you send an enquiry, we process the data you enter: your full name, email address, phone number (optional), type of legal matter (optional) and the content of your message.

Abuse prevention. The form is protected by Cloudflare Turnstile, which processes technical data such as your IP address and browser characteristics to tell people apart from automated programs. To limit the number of enquiries, we temporarily store a one-way hashed value of your IP address rather than the address itself.

Technical data. When you visit the website, our hosting provider (Cloudflare) processes the technical data needed to deliver the site securely, such as IP address, time of access and browser type.

Visitor statistics. We measure website traffic with Umami Cloud, a tool that does not use cookies and does not build visitor profiles. Only aggregate data is recorded, such as pages visited, referring source, device and browser type and country; IP addresses are not stored. If your browser sends a “Do Not Track” signal, your visit is not recorded by Umami.

We also use Cloudflare Web Analytics, provided by our hosting provider, which likewise does not use cookies or track visitors across websites. It records aggregate visit data (pages visited, referring source, browser and device type, country) and page loading performance.

The website does not use cookies for tracking, analytics or advertising.

Purposes and legal bases

• Responding to your enquiry and arranging a consultation — based on your consent and on steps taken at your request before a possible engagement.
• Website security and abuse prevention — based on our legitimate interest in protecting the website and the form from misuse.
• Visitor statistics — based on our legitimate interest in understanding how the website is used and improving it, without identifying visitors.

You can withdraw your consent at any time by writing to the email address above. Withdrawal does not affect the lawfulness of processing carried out before it.

Recipients

We do not sell your data or share it with third parties for marketing purposes. Only the service providers that keep the website running have access, and only to the extent necessary:

• Cloudflare — website hosting, security and the Turnstile check;
• Resend — technical delivery of contact form messages to the office’s email address;
• Umami and Cloudflare Web Analytics — anonymous website visitor statistics;
• the office’s email service provider.

These providers may process data outside the Republic of Serbia, including in the United States. Such transfers rely on the safeguards required by law, such as standard contractual clauses.

Retention

Enquiries that do not lead to an engagement are kept for no longer than one year after our last communication and are then deleted. If you engage us, data is kept in line with the rules governing the legal profession. Hashed IP values used for rate limiting are deleted automatically within 24 hours.

Your rights

You have the right to request access to, correction or erasure of your data, restriction of processing and data portability, and the right to object. Send your request to [email protected].

You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).

Security

The website is served exclusively over an encrypted (HTTPS) connection. Contact form messages are not stored on the website’s server; they are forwarded directly to the office’s email address. We do not record the content of your messages in technical logs.

Changes

We may update this policy from time to time. The date of the latest change is shown at the top of this page.