Privacy policy
This policy describes how the office processes personal data of site visitors, in accordance with the Serbian Personal Data Protection Act (ZZPL) and the EU GDPR, where applicable.
Data controller
Miković-Bosilj Law Office, Vojvode Radomira Putnika 21, 26000 Pančevo, Republic of Serbia.
Contact: mikovic.bosilj@gmail.com · +381 13 / 353-381.
Data we collect
Data you voluntarily provide through the contact form (name, email, optional phone, selected practice area, message).
Technical data collected automatically (hashed IP address, time and device type) — used solely for security and to prevent abuse of the form.
Analytics data (Google Analytics 4) — only if you consent via the cookie banner. Anonymised IP, page views, traffic sources.
Purpose and legal basis
To reply to your message and provide legal assistance — legal basis: legitimate interest (and, where applicable, performance of a contract).
Site security and abuse prevention — legal basis: legitimate interest.
Analytics and content improvement — legal basis: consent, which you can withdraw at any time.
Recipients
Google LLC and Google Ireland Limited — as processors for Firebase (hosting, database, authentication) and Google Analytics 4. Transfers to the US rely on EC Standard Contractual Clauses and the Data Privacy Framework.
Vercel Inc. — as processor for hosting (region: Frankfurt, EU).
Personal data is never shared with third parties for marketing purposes.
Retention
Contact-form messages — at most 24 months after receipt, then automatically deleted.
Analytics data — at most 14 months (default GA4 retention).
Hashed IP data — at most 12 months, for security purposes only.
Your rights
You have the right to: access, rectification, erasure, restriction of processing, objection, and data portability.
You may withdraw consent at any time — via the “Cookie preferences” button in the footer, or by written request to the office.
You have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).
Cookies
Necessary cookies — always on. Remember language choice (sr/en), site theme, and your session (only if you're signed into the CMS).
Analytics cookies (Google Analytics 4) — set only with your consent. They do not collect personal data such as name or address; the IP address is anonymised.
Policy changes
We may update this policy from time to time due to legal or service changes. The last-updated date is shown at the top. Material changes will be highlighted on the site.