Privacy policy

Who processes your data

Tarik Smajlović is responsible for data collected through this site. Any question about processing goes to him, by phone or through the form on the contact page.

What data I collect

I receive data in two ways: when you send it to me through the form, and through my own visit measurement, which cannot identify you.

• From the free analysis form: your website address, what you do, city, name, phone or email, and a message if you write one. The enquiry arrives in my email and is kept there.
• Context travels with the enquiry: which page it was sent from, in which language and for which market, which answers you picked in the calculator, and the order in which you opened pages during that visit. That order lives only in your tab's memory and is sent only if you send the enquiry yourself; if you do not, it is kept nowhere.
• From visit measurement: which page was opened and when, the domain of the site you came from, the campaign name if there is one, the device type and the screen width class. There is no marker that could join two visits into the same person, there are no cookies, nothing is written to your device, and your IP address is neither read nor stored for measurement.
• A technical server record on every visit: IP address, time, requested address and browser details. Every web server does this, and it is used for security and troubleshooting. The same address is also used to limit how many messages can be sent through the form in a short time, as a one-way check value that is never written to disk.
• Your theme choice, dark or light, which stays in your browser's memory. That value never leaves your device and never reaches me.
• From the assistant on this site: a question you type in your own words, with up to ten earlier messages of the same conversation, is sent for processing so the assistant can compose an answer. Topics you pick by clicking never leave your browser. I do not store the conversation or link it to the form or to visit measurement.
• From usage measurement: the click position as a share of screen width and page height, how far the page was scrolled, and how long each section was on screen, and which step of the analysis form was reached. What you clicked and what you typed into a field are not recorded, and an individual click is not kept but added straight into a shared counter.
• An enquiry you send through the form is also kept in my own panel, on the same server the site runs on: name, contact, message, the answers from the calculator, and the order of pages you opened during that visit. The record also carries a status and my note, so I know whether I have replied. The panel is locked and only I see it.

Why I collect it, and on what basis

Every item of data has one purpose. Nothing is collected in case it might be useful later.

• To answer your enquiry and prepare the audit you asked for. The basis is your consent, given by ticking the box in the form.
• To prepare a quote and a contract if we agree to work together. The basis is preparing and performing a contract.
• To keep the site running and secure. The basis is the legitimate interest in keeping the server available and protected from abuse.
• So the assistant can answer a question you wrote to it yourself. The basis is your request, since you send the question yourself, and the legitimate interest of giving you an answer straight away.

How long I keep it

Data is not kept indefinitely. The period depends on what came of the enquiry, and measurement data has its own retention period.

• An enquiry that does not lead to work: 12 months
• Data for a client with whom work was agreed: as long as tax and accounting rules require
• Server record: 30 days
• Individual measurement record: 90 days, then deleted
• Aggregate visit counts: no limit, because they describe a page rather than a person and nobody can be identified from them
• Aggregate click and scroll figures: no time limit, because they are counters per page from the outset and are never written as an individual record
• Enquiry in the panel: the same retention period as the copy kept in email, and it is deleted automatically when the limit passes, not from memory

Who else sees it

I do not sell or trade your data. It reaches only the companies without which the site and email cannot run, and only to the extent that requires.

• The hosting provider the site runs on
• The email provider your enquiry arrives through
• A public authority, where the law requires it.
• Anthropic (USA), the provider of the Claude model, when you type a question to the assistant in your own words. Under its commercial terms it does not use that data to train models.

Cookies and measurement

This site sets no cookies and uses neither Google Analytics nor advertising pixels. I measure visits myself, on my own server, and that measurement leaves nothing on your device and cannot recognise you, so there is no consent banner either. What actually stays in your browser, and how to clear it, is listed on the cookies page. I also record how the page is used: the point on the page where a click occurred, how far the page was scrolled, and how long each section stayed on screen. These are counters per page and screen-width class, not records of a single visit: an individual click is never stored, it only increases the shared number for that spot.

Your rights

You have rights over the data you sent me, and you can exercise them at any time, without giving a reason and without a fee.

• To ask what data I hold about you.
• To ask for an incorrect detail to be corrected.
• To ask for your data to be deleted.
• To withdraw consent, which stops any further processing based on it.
• To complain to the competent data protection authority.

Changes to this policy

When the way data is handled changes, this text changes with it, and the last updated date at the top of the page shows when. Older versions are not kept online, so if you need proof of the wording in force at a given moment, ask for it at the address below.