Privacy Policy
This page explains what this website collects about you, why, who receives it and what you can do about it. The short version: the site collects very little, and nothing for advertising.
Effective date: November 10, 2026
Who is responsible
The person responsible for your data (the “data controller”) is the person who runs this website.
Legal information
- Name
- Nikola Malenovic
- Trading as
- Your Online Department
- Country
- Serbia
- Contact about your data
- nikola@youronlinedepartment.com
What I collect and why
For each kind of data, this is what is collected, why, and the legal basis for it.
The contact form
If you send the form on the Contact page, I receive what you enter: your name, email address, business name, phone number (if you give one), your website or Google listing link (if you give one), what you are interested in, the days and times that suit you, and anything else you write. I use it only to reply to you and arrange a meeting.
Legal basis: Taking steps at your request before a possible contract, and my legitimate interest in replying to business inquiries.
Analytics
This site does not use analytics. No analytics cookies are set and nothing about your visit is sent to an analytics service.
Security and spam protection
When the contact form is sent, the site turns your IP address into a scrambled code (a keyed hash) and keeps that code for about an hour, to stop the form being flooded. The IP address itself is not stored by the site.
Legal basis: My legitimate interest in keeping the form free of abuse.
Hosting
The company that hosts this website processes technical data, such as your IP address, browser type and the time of your visit, in its server logs. This is needed to deliver the pages to you and keep the service secure.
Legal basis: My legitimate interest in running a working, secure website.
Who receives data
These companies process data for me so the site can work. Each one is listed only if it is in use.
| Company | What it does | What it receives | Privacy policy |
|---|---|---|---|
| Netlify | Hosting. Delivers the website to your browser. | Technical data needed to deliver a page, such as your IP address, browser type and the time of the request, in server logs. | Privacy policy (opens in a new tab) |
| GoDaddy Professional Email, powered by Titan | Email. Delivers contact-form messages to my mailbox and stores my email. | Everything you enter in the contact form, and any emails we exchange. | Privacy policy (opens in a new tab) |
I never sell personal data, and I never use it or share it for advertising. Apart from the companies above, I do not allow other parties to collect information about your activity on this site.
International transfers
I am based in Serbia, and some of the companies above may process data outside your country, including in the United States. They use the transfer safeguards described in their own terms.
How long data is kept
- Contact form messages are kept for as long as needed to reply to you. If no work follows, they are deleted within 12 months.
- If we work together, what I keep is covered by our written agreement.
- The scrambled code used for spam protection expires after about an hour.
Cookies and similar technologies
This site sets no cookies and stores nothing in your browser. It does not use analytics cookies.
Your rights
Data-protection law gives you rights over your personal data. You can ask me to:
- give you a copy of the data I hold about you (access)
- correct data that is wrong (correction)
- delete your data (deletion)
- limit how I use it (restriction)
- stop using it, where I rely on legitimate interest (objection)
- give you your data in a form you can pass to someone else (data portability)
- stop relying on your consent, at any time. This does not affect what was done before you withdrew it.
To use any of these rights, or to ask for a change to the data I hold about you, email me at nikola@youronlinedepartment.com. I will reply without undue delay, and within one month at the latest.
If you are unhappy with how I have handled your data, please tell me first. I will acknowledge your complaint within 30 days. You also have the right to complain to a data-protection authority:
Other things you should know
- Giving your details through the contact form is voluntary, but I need them to reply to you.
- I do not make automated decisions about you, and I do not build profiles.
- This site is meant for businesses. It is not directed at children, and I do not knowingly collect data from them.
- Do Not Track: the site does not respond in a special way to a “Do Not Track” signal, because it does no tracking.
- Changes to this policy: when this policy changes, the new version is published on this page with a new effective date.