Your data, handled with care.

01Who is responsible

This site belongs to Damjan Vlastevski, an independent software developer based in Skopje, North Macedonia. I decide what happens to the personal data collected here, so I am the data controller under North Macedonia's Law on Personal Data Protection and, for visitors in the EU, the GDPR.

For anything about your data, email me at vlastevskid@gmail.com. I reply personally.

02What I collect

Only what you send me, plus what every web server records:

• The contact form. Your name, email address and message, and, if you fill them in, your company and the type of project.
• Emails you send me. Your address and whatever you write.
• Server logs. When a page loads, the server notes your IP address, the time, the address requested and your browser's name. This is how sites spot attacks and fix errors.
• Visit statistics. Which page you opened, which site or app sent you, your device and browser type, and your timezone. Your IP address is only used to tell visitors apart within a day and is not stored, so these counts can't be traced back to you. Details are in the cookie policy.
• Spam protection. The contact form accepts a few messages per IP address per hour. Your IP address is counted in temporary storage and the count expires within the hour.

There are no accounts, no advertising, and no tracking across other sites. I don't buy or sell data.

03Why I use it

• To answer your enquiry and, if we work together, to scope, price and deliver the project. The legal basis is taking steps you asked for before a contract, and then the contract itself.
• To keep the site secure and working. The basis is my legitimate interest in a site that isn't abused or broken.
• To count visits anonymously, so I know which pages are useful and where visitors come from. The basis is my legitimate interest in understanding my own site. You can switch it off at any time in the cookie settings.

04Who else sees it

A few services help run the site. Each sees only what it needs:

• Email. The message that tells me about your enquiry goes out from the vlastevski.com mail server and arrives in my Gmail inbox, which Google hosts.
• My hosting provider stores the site, its database and the server logs.
• Google Fonts serves the typeface. Your browser downloads it from Google, which therefore sees your IP address. See Google's privacy policy.

The LinkedIn link takes you to LinkedIn, where LinkedIn's own policy applies. I only pass your data to anyone else if the law requires it.

05How long I keep it

• Enquiries that don't lead to a project are deleted within two years of our last contact, or sooner if you ask.
• Client correspondence is kept for as long as accounting and tax law require.
• Visit statistics contain nothing that identifies you, and are kept as counts.
• Server logs are kept for a short period by the hosting provider, then deleted automatically.

06Where it is processed

Google, for the fonts and my inbox, may process data in the United States, under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

07Your rights

You can ask me to:

• show you the data I hold about you, and give you a copy;
• correct it, or delete it;
• stop or limit using it, or object to how it is used;
• withdraw a consent you gave, without affecting what happened before.

Email vlastevskid@gmail.com and I'll answer within a month. If you think I've handled your data wrongly, you can complain to North Macedonia's Personal Data Protection Agency or to the data protection authority where you live.

08Cookies

The site sets no tracking cookies. What it does store, and how to change your choice, is in the cookie policy.

09Changes to this policy

If the site starts collecting something new, this page changes first and the date at the top moves. Significant changes also bring the cookie banner back, so you can choose again.