Privacy Policy

Last updated: September 2, 2026

1. Data Controller

ITpedia.rs is an independent personal information and educational blog operated by an individual.

The data controller is the owner and administrator of the ITpedia.rs blog.

Website: https://itpedia.rs
Privacy contact: [email protected]

This Privacy Policy explains what personal data ITpedia.rs collects and processes, the purposes for which it is used, how long it is retained, with whom it may be shared, and the rights available to visitors.

The processing of personal data is governed primarily by the laws of the Republic of Serbia, including the Serbian Law on Personal Data Protection, and by the European Union General Data Protection Regulation (GDPR) where applicable.

2. Data Collected When You Visit the Website

When you access the website, the hosting infrastructure, Cloudflare, and security systems may automatically record certain technical information, including:

• IP address;
• date and time of access;
• page visited;
• referring page, where available;
• browser type and version;
• operating system and device type;
• browser language;
• approximate geographic location;
• request status and technical errors;
• information required to detect misuse, malicious traffic, and unauthorized access attempts.

This information is used to display the website, maintain its stability and security, resolve technical issues, prevent misuse, and produce aggregate visitor statistics.

The legal basis for this processing is ITpedia.rs’s legitimate interest in maintaining an accessible, stable, and secure website.

3. Comments

When a visitor submits a comment, we may collect:

• name or nickname;
• email address;
• website address, if voluntarily provided;
• comment content;
• IP address;
• browser information;
• date and time of submission.

The IP address, browser information, and comment content may be used for moderation, spam detection, prevention of misuse, and website security.

Once a comment has been approved, the submitted name or nickname and the comment itself will be displayed publicly. The email address will not be published.

A comment may be held for moderation or removed if it contains spam, offensive or unlawful material, malicious links, another person’s personal data, or content that violates the Terms of Use.

Comments and their associated metadata may be retained indefinitely to preserve the context of the discussion and recognize subsequent comments automatically. A user may request deletion of a comment unless there is a legal or other justified reason for retaining it.

The legal basis is ITpedia.rs’s legitimate interest in enabling public discussion, moderating comments, and protecting the website against misuse.

4. Gravatar

An anonymized string generated from your email address, known as a hash, may be sent to the Gravatar service to determine whether you use that service.

After your comment has been approved, the profile image associated with your Gravatar account may be displayed publicly next to your comment.

Gravatar is provided by Automattic. Additional information is available in the Automattic Privacy Policy.

5. Contact Form and Email Communication

When you contact us through a contact form or by email, we may process:

• your name, surname, or nickname;
• your email address;
• the subject and content of your message;
• any information you voluntarily provide;
• technical information required to submit and protect the form.

The information is used to respond to your inquiry, address a reported issue, maintain necessary communication, and prevent misuse.

Please do not send passwords, payment card information, identity documents, health information, or other sensitive data that is not necessary for the communication.

Correspondence is normally retained for up to 12 months after the communication has ended. It may be retained for longer where necessary to continue the communication, protect legal rights, resolve a dispute, or comply with a legal obligation.

The legal basis is taking action at the user’s request and ITpedia.rs’s legitimate interest in responding to inquiries and retaining necessary technical and administrative correspondence.

6. Newsletter

When you subscribe to the newsletter, we may process:

• your email address;
• the date and time of subscription;
• your subscription status;
• subscription confirmation information;
• your IP address, if it is recorded for the purpose of demonstrating consent.

The information is used to send notifications about new articles and other website content. The legal basis for this processing is the subscriber’s consent.

You may unsubscribe at any time by using the unsubscribe link included in an email or by sending a request to [email protected].

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Active subscription information is retained until the user unsubscribes. After unsubscribing, a minimal record may be retained to demonstrate that the request was completed and to prevent further unwanted messages.

Information may be processed through the hosting and email infrastructure used to deliver messages. Subscriber information is not sold or provided to third parties for their own advertising purposes.

7. Hosting

The website, its database, email services, and backups may be stored by a hosting service provider.

The hosting provider may process server logs, IP addresses, backups, and other technical information required to operate, maintain, and secure the server.

Server logs are retained according to the technical and security settings of the hosting environment and are periodically deleted or rotated. Information may be retained for longer where necessary to investigate a security incident, misuse, or technical problem.

8. Cloudflare

ITpedia.rs uses Cloudflare for:

• DNS services;
• content delivery and caching;
• website performance;
• protection against malicious traffic;
• mitigation of automated attacks;
• firewall and network protection;
• availability and performance monitoring.

Cloudflare may process IP addresses, device and browser information, website requests, and security event information.

Where necessary to protect the website, Cloudflare may set essential cookies such as __cf_bm or cf_clearance. These cookies are used to distinguish legitimate visitors from automated or malicious traffic.

Additional information is available in the Cloudflare Cookies documentation and the Cloudflare Privacy Policy.

Cloudflare Web Analytics

The website uses Cloudflare Web Analytics to obtain aggregate statistics about visits and page performance.

According to Cloudflare’s documentation, Cloudflare Web Analytics is not designed to collect visitors’ personal data and does not use cookies to track users across websites.

Additional information is available in the Cloudflare Web Analytics documentation.

9. Google Analytics

ITpedia.rs uses Google Analytics 4 to understand how visitors use the website, including:

• pages visited;
• time and approximate duration of visits;
• interactions with content;
• device type;
• browser and operating system;
• approximate geographic location;
• the source from which a visitor arrived;
• a random user or session identifier.

Google Analytics is used exclusively for statistics, traffic analysis, and content improvement. ITpedia.rs does not use Google Analytics to display advertisements.

Google states that Google Analytics 4 uses an IP address when receiving a request to determine an approximate location but discards the address before the data is logged.

Google Analytics may use the following cookies:

• _ga — used to distinguish visitors;
• _ga_<identifier> — used to retain session state.

These cookies may normally remain on the device for up to two years.

Google Analytics is classified as Statistics in Cookiebot and is not activated until the visitor expressly accepts statistical cookies.

The default value of analytics_storage is set to denied. Analytics storage and cookies are activated only after the appropriate consent has been provided.

User-level and event-level information is retained according to the retention period configured in the Google Analytics account, up to the maximum period available for standard Google Analytics 4 accounts. Aggregate reports that do not directly identify an individual may remain available for longer.

Additional information is available in the Google Privacy Policy and How Google uses information from sites or apps that use its services.

10. Google Fonts

The website uses Google Fonts to display fonts.

When a page is loaded, the browser may connect to Google servers to download font files and related styles. During this request, Google may receive the visitor’s IP address and other technical information normally transmitted by a browser.

The processing performed by Google is governed by the Google Privacy Policy.

11. Cookiebot and Consent Management

ITpedia.rs uses the Cookiebot Consent Management Platform to:

• identify cookies and similar technologies;
• classify cookies according to their purpose;
• display the cookie consent notice;
• block cookies that are not essential;
• store visitors’ choices;
• record and demonstrate consent;
• allow visitors to change or withdraw consent.

Cookiebot is provided by:

Usercentrics A/S
Havnegade 39
1058 Copenhagen
Denmark

When a visitor accepts, rejects, or customizes cookie categories, Cookiebot may record:

• an anonymized IP address;
• the date and time of the choice;
• browser information;
• the URL from which consent was submitted;
• a random encrypted identifier;
• the selected cookie categories;
• the consent status.

This information is used to remember the visitor’s choice and demonstrate that consent was granted, rejected, changed, or withdrawn.

Cookiebot uses the essential CookieConsent cookie to retain the visitor’s choice for the itpedia.rs domain. This cookie normally remains valid for up to 12 months unless a shorter period is configured or the visitor’s browser applies a different restriction.

The legal basis for retaining proof of consent and using the essential Cookiebot cookie is compliance with consent-management obligations and the legitimate interest in remembering and respecting the visitor’s choice.

Cookiebot is configured to:

• use explicit consent;
• provide clearly available acceptance and rejection options;
• automatically block cookies that are not essential;
• prevent Google Analytics from activating before consent for statistical cookies;
• allow separate selection of cookie categories;
• retain evidence of the visitor’s choice.

Visitors may review, change, or withdraw their consent at any time through the Cookiebot privacy settings option available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Additional information is available in the Cookiebot Privacy Policy.

12. Types of Cookies

Essential Cookies

Essential cookies support the website’s basic operation, security, and storage of privacy choices. They may be used without consent when they are strictly necessary to provide a requested function.

This category may include:

• CookieConsent;
• technical WordPress cookies;
• Cloudflare security cookies;
• cookies required to protect forms and login functionality.

Preference Cookies

Preference cookies remember choices made by visitors, such as their preferred language and information they choose to retain for easier commenting.

The website may use the pll_language cookie to remember the selected language. This cookie may remain valid for up to one year.

When submitting a comment, visitors may choose to store their name, email address, and website in cookies for up to one year.

Statistical Cookies

Statistical cookies are used to measure traffic and understand how the website is used. Google Analytics cookies _ga and _ga_<identifier> are set only after consent for the Statistics category has been provided.

Marketing Cookies

ITpedia.rs does not currently display advertisements or use marketing cookies for advertising purposes.

The current list of identified cookies, their providers, purposes, and retention periods is available in the Cookiebot cookie declaration and cookie settings panel.

13. WordPress Cookies

When a visitor opens the login page, WordPress may set a temporary cookie to determine whether the browser accepts cookies. This cookie contains no personal data and is deleted when the browser is closed.

When a user logs in, WordPress sets cookies to retain login information and display preferences. Login cookies normally remain valid for two days, or up to two weeks if the user selects “Remember Me.” Display preference cookies may remain valid for up to one year.

If a logged-in user edits or publishes an article, WordPress may set an additional cookie containing the article identifier. This cookie normally expires after one day.

14. Security and Antivirus Protection

Appropriate technical and organizational measures are used to protect the website, its information, and its visitors. These measures may include:

• encrypted HTTPS connections;
• Cloudflare network and firewall protection;
• the Wordfence firewall;
• security and malware scanning;
• antivirus protection;
• detection of modified or malicious files;
• protection against automated attacks;
• login attempt limitations;
• administrator access controls;
• regular updates to WordPress, the theme, and plugins;
• backups;
• monitoring of security events and server logs.

Wordfence may process IP addresses, access attempts, requested URLs, login information, and other technical data required to identify and block threats.

Additional information is available in the Wordfence Privacy Policy.

Security systems may automatically and temporarily restrict or block access when they identify a pattern indicating an attack or misuse. Such decisions are made to protect the website and do not produce legal or similarly significant effects for the visitor.

Although reasonable safeguards are applied, no method of transmitting or storing information over the internet can guarantee absolute security.

15. Purposes and Legal Bases of Processing

Personal data may be processed for the following purposes:

• displaying and operating the website;
• security, antivirus protection, and prevention of misuse;
• comment moderation;
• responding to messages and requests;
• sending newsletters with consent;
• statistical analysis with consent;
• remembering language and cookie choices;
• resolving technical issues;
• complying with legal obligations;
• establishing, exercising, or defending legal claims.

The applicable legal bases may include:

• the visitor’s consent;
• taking action at the visitor’s request;
• the legitimate interest in operating, protecting, and improving the website;
• compliance with a legal obligation.

Where processing is based on consent, that consent may be withdrawn at any time.

16. Recipients of Personal Data

Personal data may be made available to the following recipients or categories of recipients, only to the extent required to provide the relevant service:

• the hosting and email service provider;
• Cloudflare;
• Google;
• Usercentrics A/S, which provides Cookiebot;
• Defiant, which provides Wordfence;
• Automattic, when Gravatar is used;
• technical service providers maintaining the website where access is necessary;
• competent public authorities where disclosure is legally required.

ITpedia.rs does not sell personal data or provide it to third parties for their independent advertising purposes.

17. International Data Transfers

Some service providers operate internationally, and personal data may therefore be processed outside the Republic of Serbia or the European Economic Area.

This may apply in particular to Cloudflare, Google, Automattic, and Defiant.

Where applicable, service providers use contractual, organizational, and technical safeguards, including Standard Contractual Clauses or another legally permitted transfer mechanism.

Usercentrics A/S, the provider of Cookiebot, is established in Denmark, a member state of the European Union.

Additional information about international transfers and safeguards is available in the privacy policies of the relevant providers.

18. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected:

• comments and their associated metadata may be retained indefinitely;
• contact-form messages are normally retained for up to 12 months after the communication has ended;
• newsletter subscriber information is retained until the user unsubscribes;
• Cookiebot consent records are normally retained for up to 12 months;
• Google Analytics information is retained according to the Analytics account settings;
• technical and security logs are retained according to the hosting, Cloudflare, and Wordfence configurations;
• backups may contain personal data until the relevant automatic deletion cycle is completed;
• information connected with an incident, dispute, or legal claim may be retained until the matter is resolved or the relevant limitation period expires.

After the applicable period has expired, the information is deleted, anonymized, or retained only in aggregate form that does not permit identification of an individual.

19. Your Rights

Subject to applicable law, you may have the right to request:

• confirmation of whether your personal data is being processed;
• access to your personal data;
• a copy of your personal data;
• correction of inaccurate information;
• completion of incomplete information;
• deletion of personal data where the legal requirements are met;
• restriction of processing;
• data portability where applicable;
• withdrawal of consent;
• objection to processing;
• information about recipients and international transfers;
• the right to submit a complaint to the competent supervisory authority.

Requests may be sent to [email protected].

Before acting on a request, we may ask for additional information necessary to verify the requester’s identity and prevent unauthorized disclosure or deletion of personal data.

If you believe that your rights have been infringed, you may contact the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

20. External Links and Embedded Content

Articles may contain links to external websites. When you follow such a link, you leave ITpedia.rs, and further processing is governed by the privacy policy of the relevant external website.

ITpedia.rs does not control external websites and is not responsible for their content, availability, security, or data-processing practices.

ITpedia.rs does not currently display advertisements or use embedded YouTube videos.

If new services that may process visitors’ information are introduced in the future, this Privacy Policy and the Cookiebot declaration will be updated accordingly.

21. Children

The website is not specifically directed at children, and ITpedia.rs does not knowingly collect personal data from children without an appropriate legal basis or the consent of a parent or legal guardian.

If you believe that a child has provided personal data without the appropriate authorization, please contact us so that the matter can be reviewed and the information deleted where appropriate.

22. Changes to This Privacy Policy

This Privacy Policy may be amended to reflect changes in applicable law, website functionality, security measures, or service providers.

A new version becomes effective on the date it is published. The date of the most recent update will be displayed at the beginning of the document.

Where a change materially affects data processing or previously provided consent, visitors will be notified and Cookiebot will request renewed consent where required.

23. Contact

For questions, requests, or complaints concerning privacy and the processing of personal data, please contact:

Email: [email protected]
Website: https://itpedia.rs