Last updated: 7 October 2026
1.Who is responsible for your data
The controller of personal data collected through this website is Marko Miskeljin, a private individual operating under the name Mardan Software.
For any privacy question or to exercise your rights, write to privatnost@mardansoftware.com.
2.What data we collect
Contact form data
- name;
- business email address;
- company name;
- the service you are interested in and your timeline;
- your description of the current situation and the outcome you want;
- an estimated budget, if you choose to provide one.
Please do not include sensitive data (such as health information) or other people's personal data that is not needed for the inquiry.
Technical data
- IP address — used to limit the number of requests and prevent abuse. Our server keeps it only in working memory, for at most 10 minutes.
- Browser and device signals that Cloudflare Turnstile uses to check that the form is sent by a person.
- Server logs kept by the hosting provider: IP address, time of access, requested page and browser type.
The website does not set its own cookies and does not use analytics, tracking or advertising tools.
3.Purpose and legal basis
- Replying to your inquiry and preparing a proposal — processing is necessary to take steps at your request before entering into a contract.
- Protecting the website from spam and abuse — our legitimate interest in keeping the site and contact channel secure and available.
We do not use your data for promotional messages without your separate consent, and we do not make decisions based solely on automated processing, including profiling.
Providing data is voluntary, but without the required form fields we cannot reply to your inquiry.
4.Who has access to your data
We do not sell data or share it with third parties for marketing. Only Marko Miskeljin and the service providers (processors) below have access, solely to provide their service. We may also disclose data to public authorities when the law requires it.
- Vercel Inc.Website hosting and server logsUSA, global network
- ResendDelivering contact-form inquiries and confirmation emailsUSA
- Zoho Corporation (Zoho Mail)Business mailbox where inquiries are received and answeredEuropean Union (Zoho EU data centres)
- Cloudflare, Inc. (Turnstile)Spam and bot protection for the contact formUSA, global network
5.Transfers outside Serbia
The providers listed above may process data outside the Republic of Serbia, including in the United States. Such transfers rely on appropriate safeguards provided for by law, such as the standard contractual clauses those providers apply. Our business mailbox (Zoho Mail) is hosted in the European Union.
6.How long we keep data
- Inquiries and related correspondence — up to 6 months after our last communication if no cooperation follows. If we start working together, we keep data as long as needed to perform the contract and as required by law (for example, accounting rules).
- IP address for request limiting — at most 10 minutes, in server memory only.
- Server logs and sent-message records — according to the hosting and email providers' rules, usually short-term.
After these periods, data is deleted or permanently anonymised.
7.Your rights
Under the Serbian Law on Personal Data Protection (Official Gazette of RS, No. 87/2018) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:
- know whether we process your data and access it;
- have inaccurate data corrected or incomplete data completed;
- have your data deleted;
- restrict processing;
- receive your data in a structured, machine-readable format (portability);
- object to processing based on legitimate interest.
Send your request to privatnost@mardansoftware.com. We will reply without undue delay and within 30 days at the latest.
If you believe the processing is unlawful, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, Belgrade — poverenik.rs. If you live in the EU/EEA, you can also contact your local data protection authority.
8.Security
The site is served only over encrypted HTTPS. Submitted data is validated on the server, API keys for external services are stored only on the server, the number of requests is limited and only Marko Miskeljin has access to received inquiries. No measure guarantees absolute security, but we monitor and improve protection regularly.
9.Changes to this policy
We may update this policy from time to time, for example when we change a service provider. The current version is always published on this page with the date of the last update.