Last updated: 27 August 2026
This Privacy Policy explains how personal data is processed in connection with the website gnezdo.press (the Website) and related communications and services operated by:
ELENA OLENCHENKO PR Specijalizovana reklamna agencija STAGEONE Novi Sad
JANKA VESELINOVIĆA 2, sprat: 6, broj stana: 48, 21000, Novi Sad, Srbija
PIB: 113870978
Matični broj (MB): 67147090
Email: hello@genzdo.press
In this Policy, the business above is referred to as Gnezdo, we, us, or the Controller.
1. Applicable data-protection law
As a Serbian entrepreneur, we process personal data primarily under the Law on Personal Data Protection of the Republic of Serbia (Zakon o zaštiti podataka o ličnosti, "Official Gazette of the Republic of Serbia" No. 87/2018).
The EU General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR) also applies to particular processing activities when its territorial-scope rules are met, including in circumstances described in GDPR Article 3. References in this Policy to GDPR rights or requirements apply only to the extent GDPR applies to the relevant processing.
2. Scope of this Policy
This Policy applies to personal data processed when you:
- visit or use the Website;
- subscribe to a newsletter or other email communications;
- contact us by form or email;
- send a story proposal, editorial pitch, request for specialist participation, or another submission;
- request information about accompaniment, consulting, advertising, partnership, or other services;
- interact with consent, security, analytics, or similar Website functionality.
Separate contracts, notices, or consent forms may apply to particular paid services, editorial collaborations, events, research, or other activities. If a separate notice conflicts with this Policy for a specific processing activity, the more specific notice governs that activity to the extent permitted by law.
3. What personal data we may process
Depending on how you use the Website, we may process the following categories.
3.1 Data you provide directly
This may include:
- name and surname;
- email address and other contact details you choose to provide;
- the content of your message, question, request, application, story, proposal, or other submission;
- professional information you provide when contacting us as a specialist, author, partner, advertiser, or service provider;
- information needed to discuss or perform a service you request;
- preferences and consent choices.
Please avoid sending sensitive personal data unless it is genuinely necessary and we have asked you to provide it through an appropriate channel.
3.2 Editorial submissions and information about other people
A story or editorial submission may contain information about family members, children, specialists, or other people. If you provide personal data about another person, you are responsible for having an appropriate legal basis or permission to provide it to us. Publication of identifiable stories, photographs, recordings, or other personal material may require a separate editorial review and consent or another lawful basis.
3.3 Technical and usage data
When you access the Website, our servers and technical providers may process data such as:
- IP address;
- browser and device type;
- operating system and language settings;
- date and time of requests;
- requested pages and referring page;
- technical identifiers necessary for security, session management, or consent management;
- security, diagnostic, error, and anti-abuse logs.
Whether analytics or advertising data is processed depends on the technologies actually enabled on the Website and your consent where consent is required.
3.4 Cookies and similar technologies
We may use cookies, local storage, pixels, tags, or similar technologies. Strictly necessary technologies may be used when required to deliver a service you expressly request or to provide essential security/functionality. Optional technologies are not activated until the required consent has been obtained. See the Cookie Policy and the Website's cookie settings for details.
4. Why we process personal data and our legal bases
We process personal data only when there is a valid legal basis under applicable law. Depending on the context, processing may be based on one or more of the following.
4.1 Operating, securing, and maintaining the Website
We process limited technical data to deliver pages, maintain security, prevent abuse, diagnose failures, and protect our systems and users. The legal basis is our legitimate interest in operating a secure and reliable Website, and, where applicable, performance of a service you request.
4.2 Responding to messages and requests
If you contact us, we process your contact details and message to respond, manage correspondence, and take requested pre-contractual steps where relevant. The basis may be steps taken at your request before entering a contract, performance of a contract, or our legitimate interest in managing communications.
4.3 Newsletter and direct electronic communications
We use your email for a newsletter or similar promotional/editorial mailing when we have the consent required by applicable law or another lawful basis that clearly permits the communication. Where consent is the basis, you can withdraw it at any time by using the unsubscribe mechanism or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
4.4 Editorial submissions and collaboration
If you submit a story, article idea, photograph, specialist profile, or similar material, we process it to assess the proposal, communicate with you, conduct editorial review, verify rights/permissions, and, if agreed, prepare and publish content. The legal basis may be your request, a contract or pre-contractual steps, consent for particular uses, our legitimate editorial/business interests, or another basis permitted by law depending on the circumstances.
4.5 Service, partnership, and advertising inquiries
We process information supplied in business or service inquiries to evaluate the request, prepare an offer, communicate, perform a contract if concluded, administer the relationship, and establish or defend legal claims when necessary.
4.6 Analytics, preferences, and advertising technologies
Where non-essential analytics, personalization, advertising, or similar terminal-storage technologies require consent, we activate them only after valid consent. You can refuse or withdraw consent through the cookie settings.
4.7 Legal obligations and legal claims
We may process and retain data where necessary to comply with Serbian or other applicable law, respond to lawful requests from competent authorities, keep required business records, or establish, exercise, or defend legal claims.
5. When providing data is required
Most Website browsing does not require you to identify yourself. If a field is necessary to respond to a request, enter a service arrangement, meet a legal requirement, or complete a requested function, we will indicate that where practical. If you do not provide necessary data, we may be unable to respond or provide the requested service.
6. Who may receive personal data
We do not sell personal data.
We may disclose or provide access to personal data only as reasonably necessary to:
- hosting, infrastructure, CDN, security, backup, or technical service providers;
- email/newsletter and communications providers;
- analytics or advertising providers, but only if actually used and only after required consent for optional technologies;
- contractors or professional advisers who need access for accounting, legal, technical, editorial, design, or operational support and are subject to appropriate obligations;
- banks, payment providers, or other transaction providers if a paid transaction is introduced and requires them;
- public authorities, regulators, courts, law-enforcement bodies, or other persons where disclosure is required or permitted by law;
- a successor or counterparty in a genuine business reorganization or transfer, subject to applicable data-protection safeguards.
The actual production provider list must match the technologies used by the Website. We do not name providers in this Policy unless their use has been verified.
7. International transfers
Some service providers may process data outside Serbia. We will use international transfers only when permitted under the Serbian Law on Personal Data Protection and, where GDPR applies, under the GDPR transfer rules. Depending on the destination and circumstances, safeguards may include an applicable adequacy decision, standard contractual clauses, other approved safeguards, or a legally available exception.
We assess the transfer mechanism in light of the actual provider and destination; we do not assume that a transfer is lawful merely because a provider is commonly used.
8. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, while accounting for legal obligations and legitimate legal-claim needs.
In particular:
- ordinary inquiries are retained for the time reasonably necessary to answer and manage follow-up, and longer where required for a contract, statutory record, or legal claim;
- newsletter contact data is retained while the subscription is active and, where necessary, a minimal suppression record may be kept to honor an unsubscribe request;
- editorial submissions are retained for review and, if accepted, for the period reasonably necessary to document publication rights, editorial history, and legal claims;
- security and technical logs are kept for a limited period appropriate to security and troubleshooting needs, unless a longer period is required to investigate an incident;
- legal, accounting, or transaction records are kept for the periods required by applicable law;
- cookie/storage durations are shown in the current cookie inventory/settings and depend on the technology actually used.
We do not set arbitrary retention periods in this Policy where the underlying legal or operational schedule depends on the specific processing activity.
9. Your rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- obtain information about processing and access your personal data;
- request correction or completion of inaccurate or incomplete data;
- request deletion of personal data;
- request restriction of processing;
- receive data in a portable format and transmit it to another controller where the legal conditions for portability are met;
- object to processing based on legitimate interests, including relevant profiling;
- withdraw consent at any time where processing is based on consent;
- not be subject, in the circumstances protected by law, to a decision based solely on automated processing that produces legal or similarly significant effects;
- lodge a complaint with the competent supervisory authority.
To exercise a right, contact hello@genzdo.press and describe your request. We may ask for information reasonably necessary to verify your identity and protect data against unauthorized disclosure.
Under Serbian law, the Controller generally must inform you about action on a request without delay and no later than 30 days after receipt, subject to extensions permitted by law. Where GDPR applies, the GDPR's corresponding response deadlines apply.
10. Complaints and supervisory authority
For Serbian data-protection matters, you may complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti). Current contact and complaint information is available at poverenik.rs.
Where GDPR applies, you may also have the right to complain to an EU/EEA supervisory authority competent under the GDPR.
We encourage you to contact us first if you believe a privacy issue can be resolved directly, but doing so does not limit your statutory rights.
11. Children and family-related information
Gnezdo publishes information for families, but the Website is not designed for children to independently submit personal data for commercial or newsletter purposes. A parent, guardian, or other legally authorized adult should handle requests that require the personal data of a minor unless a specific lawful process is provided.
If we become aware that personal data of a child has been submitted without an appropriate legal basis or authorization, we may delete it or take other steps required by law.
Editorial publication involving a child requires particular care and may be subject to additional consent, safeguarding, privacy, and media-law requirements.
12. Automated decision-making
We do not intend to make decisions about Website users based solely on automated processing that produce legal effects or similarly significantly affect them. If this changes for a particular service, we will provide the information and safeguards required by applicable law before such processing begins.
13. Security
We use technical and organizational measures appropriate to the nature of the data and reasonably foreseeable risks. Measures may include access control, least-privilege administration, transport encryption, secure development and patching practices, backups, monitoring, and provider due diligence where appropriate.
No internet service can guarantee absolute security. If a personal-data breach occurs, we will assess and handle notification obligations under applicable law.
14. External websites and embedded services
The Website may link to or embed services operated by third parties. Their processing is governed by their own privacy terms to the extent they act as independent controllers. Optional embedded services that involve non-essential storage or tracking should not be activated before the required consent.
15. Changes to this Policy
We may update this Policy when our processing, technologies, services, or legal obligations change. The current version and update date will be published on this page. If a change materially affects a processing activity that relies on consent, we will obtain new consent where the law requires it.
16. Contact
For privacy questions or requests:
ELENA OLENCHENKO PR Specijalizovana reklamna agencija STAGEONE Novi Sad
JANKA VESELINOVIĆA 2, sprat: 6, broj stana: 48, 21000, Novi Sad, Srbija
Email: hello@genzdo.press