This page explains what data kavon.dev collects, why, how long it is kept and what you can ask for in relation to it. It is written to be read, not skipped.

The data controller is Kavon, a software studio based in Sjenica, Serbia.

For anything concerning your data, including the requests described in the rights section below, write to office@kavon.dev. No data protection officer has been appointed, as the scale of processing does not require one.

Contact form. Your name, email address and the message you write. The legal basis is your consent, given by ticking the box before sending. The data is used solely to reply to your enquiry. If the exchange leads to a working relationship, further processing rests on performance of a contract.

Analytics. If you consent, Google Analytics records which pages were visited, approximate city-level location, device type and how you reached the site. IP addresses are anonymised. The legal basis is your consent. The data is statistical and is not used to identify an individual.

Server logs. The hosting, like any other, records access to the site — IP address, time and the address requested. This is necessary for the operation and security of the server and happens independently of your visit here.

Without your consent the site sets no cookies and sends no request to Google. Until you click “Accept”, analytics is not loaded at all.

Providing data is neither a statutory nor a contractual requirement. The only consequence of not providing it is that your enquiry cannot be answered.

There is no automated decision-making and no profiling.

The site itself uses no cookies to function. The only cookies that can appear are those set by Google Analytics, and only after you consent to them.

Your choice — accept or reject — is stored locally in your browser so that you are not asked on every visit. That record never leaves your device, is sent to nobody, and is used for nothing else. It requires no consent of its own, as it exists solely to honour your decision.

You may withdraw consent at any time: clear the site data in your browser settings and the banner will ask again. Withdrawal does not affect the lawfulness of processing carried out before it.

The site and email run on servers in Serbia.

If you consent to analytics, that data is processed within Google’s infrastructure, which may involve transfer outside Serbia and outside the European Union, principally to the United States. For such transfers Google relies on the mechanisms provided by data protection law, including the EU–US data transfer framework and standard contractual clauses.

If you do not consent to analytics, no transfer outside the country takes place.

Correspondence from the contact form is kept for as long as the conversation about the work continues, and at most two years from the last message. After that it is deleted.

The exception is correspondence that led to a contract — that is kept for as long as business and tax record-keeping rules require.

Analytics data is retained in Google Analytics for at most 14 months, after which Google deletes it.

Messages from the form are not written into any database — they exist only as email. Deleting the message from the mailbox removes the data.

Unlimited.rs — the hosting the site and email run on. Servers are in Serbia.

Google Ireland Limited — Google Analytics, only if you consented to it.

Beyond those, the data is shared with nobody. It is not sold, not exchanged and not used for advertising.

In relation to your data you have the right to:

access — to learn whether your data is being processed and to receive a copy;
rectification — to have inaccurate data corrected and incomplete data completed;
erasure — to have data deleted once there is no longer a basis for processing it;
restriction — to have processing paused while, for example, the accuracy of the data is checked;
objection — to object to the processing;
portability — to receive the data you provided in a common electronic format;
withdrawal of consent — at any time, without giving reasons.

Requests go to office@kavon.dev and are free of charge. A reply comes within 30 days, usually much sooner.

If you believe your data is being processed contrary to the rules, you may lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia — poverenik.rs.

If you are in the European Union, you may also lodge a complaint with the supervisory authority in the country where you reside.

The site runs exclusively over an encrypted connection (HTTPS). Access to the mailbox that receives enquiries is password-protected and available only to the controller.

Form data is not written to any database, so there is no store that could be compromised — a message exists only in the mailbox.

If the way data is processed changes, this text will change with it, and the last-updated date at the top of the page will be revised. Material changes will not be applied retroactively to data collected under earlier terms.