Privacy Policy

Last updated: 31 October 2026

This policy explains which personal data the e-Statistika website collects, why it collects them, whom it shares them with, how long it keeps them and what rights you have regarding them. It applies in accordance with the Law on Personal Data Protection of the Republic of Serbia.

Data controller

The data controller is MIODRAG ŠLJUKIĆ PREDUZETNIK AGENCIJA ZA SOFTVERSKI INŽENJERING E-STATISTIKA SOFT SOMBOR, Valjevska 8a, 25000 Sombor, Serbia, registration number 64883283, tax ID 110508813 (hereinafter: e-Statistika). For any question about personal data, please contact us through the Contact page, choosing the reason “Personal data protection”.

What data we collect and why

• Account: email address, first name, last name, country, password (stored only in encrypted form), language and, if you set one, an avatar. Used to create the account, sign in and use the knowledge tests.
• Subscription and payment: the chosen plan, price, payment reference, payment method, transaction number, fiscal receipt and a record of each payment step (request, bank confirmation, activation, sending of the receipt). Used for charging, activating the subscription, issuing the fiscal receipt and resolving any payment issues. The website never receives payment card data.
• Knowledge tests: your answers, results and progress statistics. Used so that you can track your knowledge and so that we can improve the questions.
• Comments, ratings and contact messages: the text you send, the name you provide and the IP address of the device the message was sent from (to protect against abuse).
• Sign-ins and visits: sign-in time and IP address, visits to articles and glossary terms (time, account if you are signed in, referring page). Used for account security and for readership statistics.
• Country by IP address: we determine the country you are visiting from by your IP address in order to show the appropriate language, price and payment method. The IP address is not stored for this purpose.

Legal basis for processing

• Contract: account, subscription, payment and knowledge tests - without these data we cannot provide the service you have chosen.
• Legal obligation: fiscal receipts and payment data, which we must keep under tax and accounting regulations.
• Consent: analytics and marketing cookies (Google Analytics and Meta Pixel). You can withdraw your consent at any time.
• Legitimate interest: protecting the website and accounts against abuse (IP addresses, sign-in records).

Signing in with Google or Facebook

If you sign in or register with a Google or Facebook account, we receive from that network only your email address, first and last name and the identifier of your account on that network, so that we can recognise you the next time you sign in. We do not receive your password, friend list or any other data, and we never post anything on your profile. You can remove the connection at any time in your Google or Facebook account settings or by requesting deletion of your data.

Payment and fiscal receipt

Card and IPS payments are made on the bank's secure page, and customers outside Serbia pay through Lemon Squeezy, which acts as the seller (merchant of record) in that purchase. You enter card details only with them, and they process them under their own rules; e-Statistika only receives a confirmation that the payment succeeded. We issue the fiscal receipt through an authorised electronic fiscalisation service and send it to your account's email address.

Cookies

The website uses strictly necessary cookies, without which sign-in, language selection and remembering your cookie choice do not work. We set analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) only if you choose “Accept” in the cookie banner. If you choose “Decline”, the website works the same, just without those cookies. You can change your choice by deleting the cookies in your browser, after which the banner is shown again.

Whom we share data with

We do not sell data or share it for advertising. We share it only to the extent necessary to provide the service:

• Google (analytics with consent, protection of forms against automated submission - reCAPTCHA, sign-in with Google);
• Meta (Meta Pixel with consent, sign-in with Facebook);
• the bank (card payments, IPS payments and bank transfers) and Lemon Squeezy (payments from abroad);
• the fiscal receipt service;
• the website hosting and email delivery provider;
• public authorities, where required by law.

Google, Meta and Lemon Squeezy also process data outside Serbia (in the European Union and the United States), with the safeguards provided for in their privacy policies and applicable regulations.

How long we keep data

• account data and test results - for as long as the account exists;
• payment data and fiscal receipts - for as long as tax and accounting regulations require, also after the account is deleted;
• comments - while they are published or until you ask us to remove them;
• contact messages - for as long as needed to reply and resolve the matter;
• visits - individual visits for as long as the account exists, and in aggregate form (number of visits per day, not linked to any account) for five years.

Your rights

You have the right to request access to your data, its rectification, erasure, restriction of processing and transfer in a machine-readable format, to object to processing and to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. Send your request through the Contact page; we will reply within 30 days at the latest. If you believe that we process your data unlawfully, you may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs).

Data deletion

You can request deletion of your account and all your personal data, including data received through Google or Facebook sign-in, as follows:

1. open the Contact page;
2. choose the reason “Personal data protection” and state your account's email address and that you are requesting deletion of your data;
3. to protect against false requests, we will send a confirmation to your account's email address.

We delete the data within 30 days of the confirmation at the latest and notify you when it is done. We keep only payment data and fiscal receipts, which we are required by law to retain.

Comments and mini-poll

We publish a comment you leave on an article or glossary term, together with the name you provided, if it matches the topic and the website's editorial policy. We will remove it at your request. Voting in the mini-poll is anonymous; we publish only aggregate results.

Minors

If you are under 15, you may create an account only with the consent of a parent or guardian.

Changes to this privacy policy

The date of the last update is shown at the top of this page. We notify registered users of significant changes by email before they take effect.