Goran Štimac Goran Štimac
Menu

Legal

Privacy & Data Protection Policy

This policy explains how personal data is handled on the production website at goranstimac.com. The site is intentionally lightweight and does not use a public account system or comments. Google Analytics 4 is used only when a visitor gives consent through the cookie banner.

Last updated: July 20, 2026

Data controller

The data controller for this website is Goran Stimac, operating the website at goranstimac.com.

If you have questions about this policy or your personal data, you can contact:

What this website collects

The website is designed to minimize data collection. In normal browsing, it does not require an account, does not offer comments, and does not intentionally collect more information than is needed to deliver pages and respond to direct enquiries.

Browsing the site

When you browse the site, the hosting infrastructure and network layer may process technical data such as:

  • IP address
  • browser and device information
  • requested pages and timestamps
  • referrer information
  • log data needed for security, troubleshooting, and abuse prevention

Direct contact by email

If you contact me directly by email, I may process the information you choose to share, such as your name, email address, company name, phone number, project details, and any other information included in your message.

That data is used only to:

  • respond to your enquiry
  • prepare a proposal or continue a business discussion
  • keep a record of the communication where necessary for legitimate business purposes

Cookies and analytics

Google Analytics 4

This website uses Google Analytics 4 (G-60CVZQ33DY) to understand aggregate traffic and page usage, such as which pages are visited, how visitors reach the site, and which devices or browsers are used. The reporting is intended to provide anonymized, aggregated traffic insights; it is not used to directly identify individual visitors.

When enabled, Google Analytics may process technical and usage data, including:

  • page views, navigation events, and approximate engagement information
  • approximate device and browser information
  • IP-based location approximation and related technical metadata
  • referrer and traffic source information

Google Analytics may use cookies or similar identifiers. Google can process this information in accordance with its own privacy documentation and applicable data-transfer safeguards. More information is available in Google’s Privacy Policy.

Google Analytics is not loaded until you choose Accept analytics in the cookie banner. Consent is the legal basis for this optional analytics processing.

You can choose Reject analytics and continue using the website. If you reject analytics, the Google Analytics script will not load. Your choice is stored in your browser for one year so the banner does not repeatedly interrupt your visits. You can change or withdraw your choice at any time through the cookie banner; withdrawing consent stops future analytics loading from that browser.

Some essential cookies or browser storage may still be used by the hosting platform or network infrastructure to deliver the site securely and reliably. These are separate from optional analytics cookies.

Depending on the situation, the legal basis for processing may be:

  • your consent for optional Google Analytics processing and where you actively contact me or use an external service that asks for it
  • legitimate interests, for example to operate the website securely, respond to enquiries, or maintain business records
  • legal obligation, when records must be kept under applicable law

Third-party services

This website includes links to third-party services such as social networks, GitHub, YouTube, SoundCloud, Google Maps, Google Reviews, and the newsletter provider.

Those services are independent controllers. If you follow one of those links or use their services, their own privacy and cookie policies apply.

Newsletter and embedded third-party actions

The site may link to a newsletter signup service. If you subscribe there, your data is processed by that provider under its own privacy terms.

The website does not embed a large amount of third-party content by default. If embedded media or tracking-enabled services are introduced later, that will be reflected in this policy.

Data retention

Retention periods

Retention depends on the context:

  • email enquiries are kept for as long as needed to handle the enquiry, continue a business discussion, or keep relevant records
  • technical logs are retained for a limited period needed for security, reliability, and troubleshooting
  • Google Analytics data is retained according to the data-retention controls configured for the Google Analytics property and Google’s applicable policies
  • newsletter data is retained according to the provider’s retention and unsubscribe process

When data is no longer needed, it should be deleted or anonymized where practical.

Your rights

User rights

Subject to applicable law, you may have the right to:

  • access your personal data
  • correct inaccurate or incomplete data
  • delete your data
  • restrict or object to processing
  • request portability where applicable
  • withdraw consent where processing is based on consent

If you believe your rights have been violated, you may also have the right to contact your local data protection authority.

Children

This website is intended for professional and business-related visitors and is not directed at children.

Security

Reasonable technical and organizational measures are used to keep the site lightweight and reduce unnecessary data collection. No system is completely risk-free, but the website is maintained with a low-data, low-complexity approach.

Changes to this policy

This policy may be updated if the website, hosting setup, analytics approach, or legal requirements change. The most recent version should always be available on this page.

Important notice

This policy is general information about the website’s current data-handling practices. It is not legal advice and does not replace a review by a qualified legal or data-protection professional where one is needed.