Open to senior rolesBook a call

Privacy policy

What this site collects, why, and what you can do about it. It's short, because the site does very little.

Who is responsible

This site is run by Veljko Barnić, based in Belgrade, Serbia. I am the data controller for anything described here. You can reach me at consulting@veljkobarnic.com.

Serbia's Law on Personal Data Protection applies, and because this site is aimed at companies in the EU and UK, so does the GDPR and UK GDPR.

What the site collects

When you just read

My hosting provider records standard server logs - your IP address, browser, the page you requested and when. Every request also passes through Cloudflare, which sits in front of the site for caching and security. This is needed to serve pages and to spot abuse. Legal basis: legitimate interest in running a working, secure site. The provider does not publish a fixed retention period: logs are kept for as long as they are needed for operational, security and legal purposes, and deleted after that. Site backups, which contain the same data, can be restored from the previous 60 days and are kept for up to one month after the hosting account ends.

When you use the calculators

Nothing is collected. All six tools run entirely in your browser. The numbers you type are never sent to me, to a server, or to anyone else, and they are gone when you close the tab. There is no sign-up and no email wall, which is the whole point of them.

Your theme choice

If you switch between light and dark mode, that preference is saved in your browser's local storage so the site remembers it next time. It never leaves your device and I cannot see it. Clearing your browser data removes it.

When you email me

The contact links open your own email client - there is no form on this site, so nothing is submitted to me through the web page. If you do email me, I keep the message and your address so I can reply and keep track of the conversation. Legal basis: legitimate interest in responding to an enquiry, or steps towards a contract if we end up working together. I keep enquiries for 24 months unless we start working together, in which case normal business records apply.

When you book a call

Booking runs through Cal.com, a third party. What you enter goes to them under their own privacy policy, and they pass me your name, email and chosen time.

Analytics

I use Google Analytics 4, loaded through Google Tag Manager, to see which pages and tools people find useful. It measures pages viewed, roughly where in the world you are, and what kind of device and browser you used. It does not attempt to identify you.

Nothing from Google loads until you accept. Before you choose, and if you decline, your browser makes no request to Google at all: no script, no cookie, no measurement. If you accept, Google Tag Manager and Google Analytics load and set analytics cookies.

Legal basis: your consent. You can change your mind at any time. The Cookie settings link in the footer clears your choice and asks again. If you withdraw, the analytics cookies are deleted and nothing more is sent.

Your choice is remembered in your browser's local storage, not in a cookie, so the question does not come back on every page.

Advertising storage and personalization are switched off permanently, not just until you consent. There is no advertising on this site and no reason to ask for it. Data is retained by Google for 2 months. Some processing happens in the United States, under the EU-US Data Privacy Framework.

Separately, Cloudflare Web Analytics counts page views on every page. It sets no cookies, stores nothing on your device and does not identify you. It tells me how many people visit, not who they are. Legal basis: my legitimate interest in knowing how much the site is used.

What I do not do

  • No advertising, remarketing or ad pixels of any kind
  • No selling or sharing of data with anyone, ever
  • No profiling and no automated decisions about you
  • No newsletter and no mailing list, so no list you can end up on
  • No embedded social media trackers on the pages themselves

Others who touch the data

  • UNITED INTERNET DOO BEOGRAD (NOVI BEOGRAD), trading as Unlimited.rs, Milutina Milankovića 1c, 11073 Beograd, Serbia (registration number 21133710, tax number 109154021) - hosts the site and stores its server logs. Servers are in Serbia.
  • Cloudflare, Inc. (United States) - sits in front of the site as its network, security and caching layer, and provides the cookieless visit count described above. Every request to the site, including your IP address, passes through Cloudflare's global network. Transfers to the United States rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.
  • Cal.com - booking, only if you book
  • Google Ireland Limited (and Google LLC in the United States) — analytics, only after you accept. Google acts as a processor under its Data Processing Terms; transfers to the United States rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.

Fonts are served from this site's own domain, not from a third-party CDN, so loading a page sends your IP address only to Cloudflare, which sits in front of the site, and to my host.

Where your data is processed

Data is processed in Serbia, which is outside the EEA and is not covered by a European Commission adequacy decision, and passes through Cloudflare's global network. The site collects very little - server logs, a cookieless visit count, analytics only if you accept, and any email you choose to send me - and no advertising or profiling data is involved.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict how I use it, or object to it entirely. Where I rely on consent, you can withdraw it at any time. Email consulting@veljkobarnic.com and I'll respond within 30 days. There is no charge.

If you think I've handled your data badly, you can complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection, or to your own national data protection authority if you're in the EU or UK. I'd rather you told me first, but it's your call.

Changes

If this policy changes in a way that matters, I'll update the date below. There's no version history to dig through - the current version is the one on this page.

Last updated: 2026-09-29