Privacy policy.
Clear, with no small print.

This is an English translation provided for convenience. In case of any difference, the Serbian version is legally binding.

This privacy policy explains which data Prodaja sajtova collects when you use the website, how we use it and whom you can contact about your data. It applies to all pages on the prodajasajtova.com domain.

1. Who is the data controller

The data controller is Prodaja sajtova, based in Belgrade, part of the Izrada sajtova RS agency. For any privacy questions you can email us at [email protected] or call +381 61 147 65 14.

2. What data we collect

We collect personal data only when you provide it yourself:

• Contact form: name (optional), email address, phone (optional) and the content of your message.
• Website sale form: name or company (optional), email address, phone, the address of the website you are offering, asking price (optional) and a description of the offer.
• Website Host programme application: full name, business name (optional), line of business, town or city, phone, email address, existing website or social media (optional) and a message (optional).
• User account: first name, last name, email address, phone and, if you choose, your town or city, company name and preferred way of contact. We do not store your password itself, only its encrypted record (hash).
• Website applications from your account: the details of the website you enter (description, price, results, analytics), the images and videos you upload, and the data used to verify ownership of the website. This data is not public until we review the application and, by agreement with you, publish the website in the listings.

We do not collect payment data or special categories of data such as health, religious or political beliefs, and we ask you not to send them to us in the free text of a message either.

3. How we use your data

We use the data solely to reply to your enquiry, arrange the purchase or sale of a website, consider an application for the Website Host programme, run your account and website applications, or contact you about a listing you sent. To run your account we also send the necessary emails: confirming your email address, a link to set a new password and notifications about your application. We do not use the data to send advertising messages, and we do not pass it on to third parties for marketing purposes.

4. Cookies and technical data

The website uses only technically necessary session cookies: one is set when you send a form, to protect against fake submissions (CSRF protection), and the other keeps you signed in to your account until you sign out or after 12 hours of inactivity. These cookies do not track your behaviour on the website, are not passed to third parties and are deleted when the session expires. We do not currently use cookies for analytics or advertising; if that changes, this policy will be updated before such cookies are introduced.

Like any website, our server automatically records basic technical data about visits (IP address, time of access, browser type) in standard server logs, for security and troubleshooting. To prevent misuse of the forms and accounts, the IP address and email address linked to sending and sign-in attempts are kept temporarily, only in hashed form, for no more than two days, so that we can limit the number of attempts.

5. Do we share data with third parties

We store the data you enter in a database on the servers of our hosting provider, and we send messages through an email service (the hosting mail service). We do not sell or rent your data, and we do not share it with third parties except where required by law. When a website from your application is published in the listings, only the website details we have agreed together become public, not your personal contact details.

6. How long we keep data

Messages sent through the forms stay in our mailbox until we delete them — usually for as long as it takes to complete the agreement about a purchase, sale or enquiry. Account data is kept for as long as the account exists; you can delete website applications yourself in your account, together with their images and videos, and you can request deletion of your whole account or of a Website Host programme application by email. Links for confirming your email address and setting a new password are valid for 48 hours and one hour respectively. Technical records created to prevent misuse are deleted automatically, within two days at the latest.

7. Your rights

Under the Law on Personal Data Protection of the Republic of Serbia, you have the right to request access to, correction or deletion of your data, and to object to its processing. You can send a request to [email protected]. If you believe your rights have been violated, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

8. Changes to this policy

We may update the privacy policy from time to time, for example when we add a new feature to the website. The date of the last change is always shown at the bottom of this page.

Last updated: 24 October 2026