Skip to content
Dušan D. Petrović Painter SR

Dušan D. Petrović

Privacy Policy

Last updated: 23 May 2026.

1. Who we are

Dušan D. Petrović, painter (member of ULUS).

Address: Belgrade, Serbia.

Phone: +381 63 167 39 18 (call / Viber / WhatsApp).

2. What data we collect

Via the contact form on the site:

  • name
  • email address
  • phone number (optional)
  • message text
  • communication language (SR or EN)

Automatically (for security only):

  • IP address (for rate-limit protection, deleted after 1 hour)
  • User agent (browser information)

We do not use tracking cookies. The site uses only technical session data necessary for operation.

3. Why we collect this data

  • To respond to your inquiry
  • To prevent spam and bot abuse (rate-limit, Cloudflare Turnstile)

Legal basis: Your consent (by submitting the form) + our legitimate interest (preventing abuse).

4. Where data is stored

  • Cloudflare D1 — database, server in the European Union
  • Resend — email notification provider, USA, under Standard Contractual Clauses (SCC)
  • Cloudflare Workers — edge infrastructure worldwide

5. Retention periods

  • Your messages: up to 12 months from last communication, or immediately upon deletion request
  • IP addresses in rate-limit cache: 1 hour (automatic deletion)
  • Audit log of admin actions: 24 months (for legal purposes)

6. Sharing

We do not share. Your data stays with us and is never forwarded to third parties for marketing. Resend processes only email forwarding (as a “processor”, not “controller”).

7. Your rights

Under the Serbian Personal Data Protection Act (“ZZPL”) and the EU General Data Protection Regulation (“GDPR”), you have the right to:

  • access the data we hold about you
  • rectification of inaccurate or incomplete data
  • erasure (“right to be forgotten”)
  • restriction of processing
  • data portability in a machine-readable format
  • object to processing

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs).

8. How to exercise your rights

Send a request via one of the following:

We respond within 2 to 3 business days.

9. Security

Technical and organisational measures we apply:

  • HTTPS / TLS 1.3 on all pages
  • Cloudflare Turnstile bot protection
  • Rate-limiting against automated attacks
  • Admin access only via Cloudflare Access (Google account + 2FA)
  • Encrypted data transmission and storage

10. Minors

The site is not intended for children under 16. We do not knowingly collect data about minors. If we discover that we have accidentally collected such data, we delete it.

11. Changes to this policy

We may occasionally update this policy to comply with legal requirements or changes in how the site operates. The date of last update is shown at the top of the page. Significant changes will be highlighted on the site.