Privacy policy

This site does not use cookies, does not track you and has no forms or accounts. It shows design work and gives you an email address to get in touch. This policy explains the small amount of personal data that is still processed, why, and what you can do about it.

The controller is the business listed under Company details at the bottom of this page. For any privacy question, email hello@matijadesign.com.

Last updated: 14.10.2026.

Visiting the site. Like every website, the server receives technical data with each request: your IP address, browser and device type, the page requested, the referring page and the time. This is needed to deliver the page and to protect the site against abuse.

Visitor statistics. Visits are counted with Cloudflare Web Analytics, which is built to work without cookies and without building a profile of you. It reports totals only, such as page views, referring sites, country and browser type. No individual visitor can be picked out.

Email. If you write to hello@matijadesign.com, your name, email address, the content of your message and anything you choose to attach are received. If we go on to work together, project correspondence and the billing details needed to invoice you are processed as well.

No special categories of data (such as health, beliefs or biometrics) are requested or intentionally collected. Please do not send them.

Delivering and securing the site relies on legitimate interest: a website cannot be served or protected without processing request data.

Visitor statistics rely on legitimate interest in understanding, in aggregate, which pages are useful. Because no cookies or identifiers are used, no consent banner is needed.

Replying to your email relies on steps taken at your request before a possible contract, and on legitimate interest in answering enquiries. Running a project relies on the contract itself.

Invoicing and bookkeeping rely on legal obligations under Serbian accounting and tax law.

Your data is never sold, never used for advertising and never used for automated decision-making or profiling.

Data is shared only with service providers who process it on this business’s behalf and under their own data protection terms:

Cloudflare, Inc. hosts the site, delivers it through its global network, protects it from attacks and provides the visitor statistics.

Zoho Corporation provides the email service. Mail is hosted in Zoho’s EU data centres.

An accountant and the tax authorities receive invoicing data where the law requires it.

Transfers outside Serbia. Cloudflare is a US company and may process request data outside Serbia and the EU. It participates in the EU-U.S. Data Privacy Framework and uses standard contractual clauses for such transfers.

Server and security logs are kept by Cloudflare for a short period and then deleted or anonymised.

Visitor statistics are aggregated and contain no personal data.

Emails are kept for as long as the conversation or project is active, and up to two years after the last contact so earlier discussions can be referred back to, unless you ask for them to be deleted sooner.

Invoices and accounting records are kept for the periods required by Serbian law.

No cookies are set by this site. Fonts, scripts, images and video are all served from this domain, so no third party such as Google sees your visit, and nothing from another site is embedded.

The site keeps a few small flags in your browser’s session storage so the intro animation and page transitions do not replay on every page. They hold no personal data, never leave your device and are cleared when you close the tab.

Under the Serbian Law on Personal Data Protection, and the GDPR where it applies to you, you have the right to:

access the data held about you and receive a copy · correct inaccurate data · delete data that is no longer needed · restrict how it is used · object to processing based on legitimate interest · receive data you provided in a portable format.

To use any of these rights, email hello@matijadesign.com. You will get an answer within 30 days. There is no charge.

If you believe your data has been handled unlawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia, or with the data protection authority in the EU country where you live.

Security. The site is served only over encrypted HTTPS connections, and only the minimum data needed is collected in the first place.

Children. This site is aimed at businesses and is not directed at children.

Changes. If this policy changes, the new version is published on this page with an updated date.