Privacy Policy

Last updated: September 27, 2026

Version 2.0

Privacy Policy: Grandma’s Cookies, but GDPR Grew Up

Let’s be honest: almost nobody wakes up excited to read a privacy policy.

Still, if you are one of the brave few who made it here, I owe you a clear explanation of what happens with your data when you visit Vujosevic.com.

Here is the short version:

• I collect as little personal data as reasonably possible.
• If you contact me, I use your details to answer you and, where relevant, discuss or provide services.
• Necessary cookies keep the website working.
• Optional statistics are activated only if you consent to them.
• I use website analytics to understand things like how visitors enter the site, which pages they visit, what they click and where they leave.
• I do not sell personal data.
• I do not rent personal data.
• I do not have a secret underground database where marketers trade your email for Bitcoin.
• If you have a legitimate privacy request, you can contact me.

That is the human version.

The more serious version starts below.

1. Who controls your data?

The controller responsible for personal data processed through this website is:

Miljan Vujosevic Budva, Montenegro Email: miljan@vujosevic.com Website: vujosevic.com

For privacy-related questions or requests, email me using the address above.

Vujosevic.com is a professional website through which I publish content and provide information about digital marketing, SEO, PPC, content, email marketing, web development and related services.

2. What personal data may be collected?

Depending on how you use the website, I may process:

Information you provide directly

This may include:

• your name;
• email address;
• phone number, if you provide it;
• company or organisation name;
• information contained in your message;
• information necessary to discuss or provide a requested service.

If you simply browse the site without contacting me, I generally do not need to know who you are.

Technical and usage information

When you visit the website, certain technical information may be processed automatically, including:

• IP address where technically required for server operation or security;
• browser and device information;
• requested pages;
• date and time of requests;
• referral source;
• server logs;
• cookie preferences.

If you consent to statistical cookies, analytics may additionally include information such as:

• the page through which you entered the website;
• pages visited during the session;
• links or elements clicked;
• the page from which you left;
• approximate city and country;
• aggregated information about website usage.

I use this information to understand whether the website is useful, not to sit behind a dashboard wondering what one specific visitor had for breakfast.

3. Why I process personal data

Personal data are processed only where there is a valid reason for doing so.

Contact and enquiries

If you contact me, I may process your contact information and message in order to:

• respond to your enquiry;
• answer questions;
• prepare an offer;
• discuss potential cooperation;
• take steps requested before entering into a contract.

The legal basis may be taking steps before entering into a contract and/or my legitimate interest in responding to legitimate business enquiries.

Client relationships

If we work together, I may process information necessary to:

• perform our agreement;
• communicate about the project;
• issue invoices;
• maintain required business and accounting records;
• establish, exercise or defend legal claims.

The legal basis may include performance of a contract and compliance with applicable legal obligations.

Website security

Technical logs may be processed to:

• keep the website secure;
• detect abuse;
• investigate technical problems;
• prevent attacks, spam and malicious activity.

The legal basis is my legitimate interest in protecting the website, infrastructure and users.

Website statistics

Optional analytics are used to understand how visitors use the website and to improve:

• navigation;
• content;
• usability;
• performance;
• conversion paths;
• website structure.

Where consent is legally required, statistical tracking is activated only after consent.

4. Cookies

Yes, cookies.

Sadly, not the kind your grandmother makes.

Vujosevic.com may use several categories of cookies or similar technologies.

Necessary cookies

These are required for the website to function properly and may include things such as security, session management and storing your privacy choices.

They do not require consent where they are strictly necessary for the operation of the website.

Functional cookies

These may remember preferences or enable optional website functions.

Where required, they are activated only after consent.

Statistics cookies

These help me understand how visitors use the website.

They may collect information about navigation, visited pages, clicks and approximate geographic information.

These are activated only after the appropriate consent where consent is required.

Marketing and external media

If the website uses marketing technologies or embeds content from third-party platforms that require tracking, those services should remain disabled until the appropriate consent has been provided.

You can change or withdraw your cookie choices through the cookie settings available on the website.

Withdrawal of consent does not affect processing that was lawful before the consent was withdrawn.

5. My analytics

I use my own website analytics system to understand how Vujosevic.com is used.

Depending on your consent settings, it may record information such as:

• entry page;
• navigation path;
• visited pages;
• clicked links;
• exit page;
• approximate city and country.

The system is intended for statistical analysis and website improvement rather than identifying individual visitors.

Where possible, analytics information is minimised and used in aggregate.

I intentionally avoid collecting more information than I need simply because technology makes it possible.

Being able to collect something is not the same thing as having a good reason to collect it.

6. Spam and unsolicited commercial email

My inbox receives its fair share of miraculous SEO offers, guaranteed first-place Google rankings and business opportunities that somehow always expire in the next 17 minutes.

Unsolicited messages may be retained where reasonably necessary for:

• spam prevention;
• security;
• abuse prevention;
• maintaining suppression records;
• establishing or defending legal claims.

I may also discuss patterns of unsolicited commercial outreach for commentary, education or criticism.

However, where such material involves identifiable natural persons, personal email addresses, phone numbers and other unnecessary personal identifiers should be removed or obscured unless there is another lawful basis for publishing them.

In other words: bad marketing may become an example. Your private phone number does not need to become part of the lesson.

7. Who receives personal data?

I do not sell your personal data.

I may, however, use service providers necessary to operate the website and my business, such as:

• website hosting providers;
• email providers;
• infrastructure and security providers;
• backup services;
• professional advisers;
• accounting or administrative providers;
• analytics or technical service providers.

These providers may process information only to the extent required for their role and subject to applicable contractual and legal protections.

Information may also be disclosed where required by law, court order or a competent public authority.

8. International data transfers

Some technology providers may process or store information outside Montenegro or the European Economic Area.

Where personal data are transferred internationally and data protection law requires additional safeguards, appropriate mechanisms are used where applicable, such as:

• an adequacy decision;
• Standard Contractual Clauses;
• other legally recognised safeguards.

I try not to send personal data on unnecessary world tours.

9. How long is information kept?

Personal data are not kept indefinitely simply because storage is cheap.

As a general rule:

• ordinary enquiries may be retained for up to 24 months after the last meaningful communication;
• information relating to an active client relationship may be retained for the duration of the relationship;
• contracts, invoices and business records may be retained for the period required by applicable accounting, tax and other laws;
• security and technical logs are kept only for as long as reasonably required for security and troubleshooting;
• analytics information is periodically deleted or aggregated;
• marketing consent remains valid until it is withdrawn or the information is no longer reasonably required.

Information may be retained longer where necessary to establish, exercise or defend legal claims or where another legal obligation requires retention.

10. Your privacy rights

Depending on the applicable law and circumstances, you may have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive eligible data in a portable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with the competent data protection authority.

These rights are not always absolute.

For example, I may need to retain certain information because of accounting requirements, contractual obligations, fraud prevention or legal claims.

To exercise a privacy right, contact:

miljan@vujosevic.com

I may request reasonable information to confirm that the request relates to you before disclosing or deleting personal data.

No apology, ceremonial sacrifice or handwritten letter is required.

11. Complaints

If you believe your personal data have been processed unlawfully, you may contact me first so the issue can be investigated.

You also have the right, where applicable, to lodge a complaint with the competent supervisory authority.

For processing subject to Montenegrin law, this may include the competent Montenegrin personal data protection authority.

Where the GDPR applies, you may also have the right to contact the competent supervisory authority in the relevant EU/EEA jurisdiction.

12. Automated decision-making

Vujosevic.com does not currently use personal data collected through this website to make decisions about individuals solely by automated means that produce legal or similarly significant effects.

If that changes, this policy will be updated accordingly.

13. Security

Reasonable technical and organisational measures are used to protect information against:

• unauthorised access;
• accidental loss;
• destruction;
• misuse;
• alteration;
• disclosure.

That does not mean I can promise that the internet will suddenly become perfectly safe.

I built this website with security in mind, but no website, server or network connected to the internet can honestly guarantee absolute security.

Anyone promising 100% security probably also has a guaranteed #1 Google ranking to sell you.

14. Changes to this policy

Privacy, technology and laws change.

This page may therefore be updated from time to time.

When material changes are made, the “Last updated” date and version number at the top of this page will be changed.

I recommend checking this page occasionally if privacy policies are your idea of light weekend reading.