Privacy Policy

Website: https://vbcherepanov.com Data controller: Vitalii Cherepanov PR Novi Sad, Železnička 20, Novi Sad, Serbia Email: vitalii@vbcherepanov.com Last update: 3 October 2026

1. In short

The site counts visits with Google Analytics only if you accept in the cookie banner. Until then no analytics script loads and no cookie is set. Nothing is used for advertising, and nothing is sold or shared. You can change your choice at any time with Cookie settings in the footer.

2. What we collect

2.1. Server logs

The web server records the IP address, browser (User-Agent), requested URL, referrer and time of each request. They are used for security and troubleshooting only and are deleted after 14 days.

2.2. Google Analytics 4 (only with your consent)

If you accept analytics, the site loads Google Analytics 4 (measurement ID G-RYVFLXMC6F), which processes:

• a pseudonymous browser identifier stored in the _ga and _ga_RYVFLXMC6F cookies;
• pages viewed, time on page, scrolls, outbound link clicks and file downloads;
• referrer and campaign parameters, browser, operating system, device type, screen size and language;
• approximate location (country, region, city) derived from the IP address. Google Analytics 4 does not log or store IP addresses.

Google signals and ad personalization are switched off: the data is not linked to Google accounts and is not used for advertising.

If you click Reject, or your browser sends a Global Privacy Control signal, Google Analytics does not load. Your choice is stored in your browser (localStorage, key analytics-consent) for 12 months, after which we ask again.

2.3. Email

If you write to us, we receive your address and your message and use them only to reply.

3. What we do not collect

Names, phone numbers, payment data, accounts, form submissions, advertising or cross-site tracking data.

4. Legal basis

• Consent — GDPR Art. 6(1)(a) and Art. 5(3) ePrivacy Directive, and the equivalent rules of UK GDPR, the Swiss FADP and the Serbian Law on Personal Data Protection (ZZPL): Google Analytics.
• Legitimate interest — GDPR Art. 6(1)(f): server logs for security.
• Steps before a contract / legitimate interest — GDPR Art. 6(1)(b)/(f): replying to your email.

You can withdraw consent at any time; this does not affect processing before the withdrawal.

5. Processors and international transfers

• Google Ireland Limited (visitors from the EEA, UK and Switzerland) and Google LLC (elsewhere) — analytics, under Google’s data processing terms. Data may be transferred to the USA; Google LLC is certified under the EU–US Data Privacy Framework and its UK and Swiss extensions and also relies on Standard Contractual Clauses.
• Hetzner Online GmbH (Germany) — hosting.

6. Retention

• Google Analytics event data: 14 months at most, then deleted automatically.
• Server logs: 14 days.
• Email: up to 24 months after the last message, longer only where tax or contract law requires.

7. Your rights

EEA, UK, Switzerland, Serbia: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and a complaint to your data protection authority (in Serbia: the Commissioner for Information of Public Importance and Personal Data Protection).

US states (California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others): the right to know, access, correct and delete personal information and to opt out of its sale, sharing for cross-context behavioural advertising, and targeted advertising. We do not sell or share personal information and do not use it for targeted advertising. We honour Global Privacy Control as an opt-out. We do not process sensitive personal information and will not discriminate against you for using your rights. You may act through an authorised agent.

Other countries (Canada — PIPEDA, Brazil — LGPD, Australia — Privacy Act 1988, Japan, South Korea, India and others): comparable rights of access, correction, deletion and withdrawal of consent.

To use any right, email vitalii@vbcherepanov.com. We answer within 30 days, or sooner where your law requires.

8. Children

The site is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

When this policy changes, the date above is updated.