Skip to main content
Žarko Dimitrić

Privacy Policy

Last updated: 2 October 2026

This policy explains what personal data I collect through zarkodimitric.com, why I collect it, how long I keep it and what rights you have. I've kept it short and in plain language. If anything is unclear, email me at hello@zarkodimitric.com.

1. Who is responsible for your data

The controller of your personal data is Design by Žarko, a sole proprietorship registered in Serbia and run by me, Žarko Dimitrić.

Design by Žarko
Registered name: Žarko Dimitrić PR, računarsko programiranje Design by Žarko
Zrenjanin, Serbia
Email: hello@zarkodimitric.com

I work alone, so any question about your data comes straight to me.

2. Which laws apply

I'm based in Serbia, so the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti) applies to everything I do. Because I offer my services to clients in the European Union and the European Economic Area, the EU General Data Protection Regulation (GDPR) applies when you're located there. I apply the same standard to everyone, wherever you are, including the United Kingdom, the United States, Australia and elsewhere.

3. What I collect and why

When you send me a brief through the contact form

  • Data: your name, email address, budget range, timeline and your message, plus anything you choose to include in it (for example a link to a Figma file).
  • Purpose: to reply to you, understand your project and, if it's a fit, prepare a proposal.
  • Legal basis: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)), and my legitimate interest in replying to business inquiries (Art. 6(1)(f)).

When you email me directly

  • Data: your email address, name and whatever you write in your message.
  • Purpose and legal basis: the same as for the contact form.

When you book a call

  • Data: your name, email address, the time you choose, your time zone and any notes you add. During the call itself, the video provider processes the technical data needed to connect you. I don't record calls without asking you first.
  • Purpose: to schedule the call, send you the invitation and a video link, and prepare for the conversation.
  • Legal basis: steps at your request before a contract (Art. 6(1)(b)).

Spam and bot protection

  • Data: technical signals from your browser, such as your IP address, browser type (user agent) and similar device information.
  • Purpose: to keep automated spam out of the contact form.
  • Legal basis: my legitimate interest in keeping the site and inbox secure (Art. 6(1)(f)).

Website statistics

  • Data: aggregated information about visits, such as pages viewed, the website that referred you, your country and your browser and device type. I use Cloudflare Web Analytics, which doesn't use cookies or similar technologies, doesn't store anything on your device and doesn't track you across websites or build a profile of you.
  • Purpose: to understand which parts of the site are useful and how people find it.
  • Legal basis: my legitimate interest in understanding how the site is used and improving it (Art. 6(1)(f)).

When you simply visit the site

  • Data: technical information your browser sends automatically, such as your IP address, browser type, the page requested and the date and time of the visit. This is processed by the hosting and content delivery providers that serve the site.
  • Purpose: to deliver the website to you, keep it secure and fix technical problems.
  • Legal basis: my legitimate interest in running a working, secure website (Art. 6(1)(f)).

If we work together

If you become a client, I also process the contact and billing details needed to carry out our agreement and invoice you (Art. 6(1)(b)), and keep records that tax and accounting laws require me to keep (Art. 6(1)(c)).

I don't sell your data, I don't use it for advertising, and I don't make decisions about you by automated means. I won't add you to a mailing list. Anything you send me is used only for the purposes above.

4. How long I keep it

  • Inquiries, emails and call bookings that don't lead to a project: up to 24 months after our last contact, so I have the context if you get back in touch. After that I delete them.
  • Client project communication and contract data: for the duration of our work together and up to 5 years afterward, for support and to protect legal claims.
  • Invoices and accounting records: as long as Serbian tax and accounting laws require.
  • Website statistics: kept only as aggregated numbers that don't identify you.
  • Technical and security logs: for the short periods set by the hosting and security providers listed below.

You can ask me to delete your data earlier (see section 8).

5. Who else processes your data

I use a small number of trusted service providers to run the site and my work. They process data on my behalf and only for the purposes described here:

  • Webflow, Inc. (USA): website hosting and contact form submissions.
  • Cloudflare, Inc. (USA): content delivery, website statistics (Cloudflare Web Analytics) and Turnstile spam protection on the contact form. Cloudflare also uses Turnstile data to improve its bot detection, as an independent controller under its own Turnstile privacy addendum.
  • Google Ireland Limited (Ireland) and Google LLC (USA): Google Meet for video calls.
  • Cal.com, Inc. (USA): call scheduling and Cal Video calls.
  • Zoom Communications, Inc. (USA): video calls, if we use Zoom.
  • GoDaddy and Titan Solution Ltd (Cayman Islands): email hosting for hello@zarkodimitric.com.
  • jsDelivr and unpkg: public content delivery networks that serve some of the open-source code the site uses. They receive your IP address when your browser loads the files.

Which video tool we use depends on what suits you. You'll see it in the calendar invitation.

I may also disclose data where the law requires it, for example to tax authorities or in response to a valid court order.

6. International transfers

I'm based in Serbia, and some of the providers above are based outside the EU/EEA and Serbia, mainly in the United States. When your data is transferred there, it's protected by recognized safeguards, such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, where the provider participates in it. You can ask me for more information about these safeguards.

7. Cookies

Cookies are small files a website stores in your browser. This site doesn't use advertising, tracking or analytics cookies, so there's no cookie banner. The only cookies it uses are strictly necessary for features you choose to use:

  • Turnstile cookies (Cloudflare): tell people and bots apart on the contact form. Short-lived.
  • Cal.com cookies (Cal.com): make the booking calendar work. Session or short-lived.

Strictly necessary cookies don't require consent, because the feature you're using can't work without them. You can block or delete cookies in your browser settings, but the contact form or booking calendar may then not work.

8. Your rights

Wherever you are, you can ask me to:

  • access the personal data I hold about you and get a copy of it;
  • correct data that is wrong or incomplete;
  • delete your data;
  • restrict how I use your data;
  • transfer the data you gave me to you or to someone else, in a common format;
  • object to processing based on my legitimate interests;

To use any of these rights, email me at hello@zarkodimitric.com. I'll reply within one month. I may ask you to confirm your identity before I act on a request. There's no charge.

You also have the right to complain to a data protection authority. In Serbia, that's the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs). In the EU/EEA, you can complain to the authority in the country where you live or work. I'd appreciate the chance to sort out any concern with you first.

9. How I protect your data

The site is served only over an encrypted (HTTPS) connection. I keep access to my accounts protected with strong, unique passwords and two-factor authentication, and I use only reputable providers with their own security measures. No system is completely secure, but I take reasonable steps to protect your data.

10. Children

This site and my services are meant for businesses. I don't knowingly collect data from anyone under 16.

11. Links to other websites

The site links to other websites, such as client projects and LinkedIn. Their own privacy policies apply once you leave this site.

12. Changes to this policy

If I change how I handle personal data, I'll update this page and the date at the top.

13. Contact

Questions or requests about your data: hello@zarkodimitric.com