Privacy policy.
Who processes your data, which data, why and for how long. In force from 26 October 2026.
Who I am
The controller of your data is Stefan Sivčević (Sivke), a photographer from Kragujevac, Serbia. For any question about your data: phone and WhatsApp +381 69 417 87 47, Instagram @sivkefoto.
What I collect
When you send an enquiry through the form: your name, phone or Instagram, what you are celebrating, the date, whether you want photos, video or both, your message and the package if you chose one, plus the language and the page the enquiry was sent from. If you get in touch by phone, WhatsApp or Instagram, I use what you send there in the same way; those apps also have their own privacy rules.
Why
Only to call you back, answer your enquiry and arrange the shoot. The legal basis is your request, that is, steps taken before a contract (Serbian Personal Data Protection Act, Article 12(1)(2)). Server logs and the short-lived IP record keep the site and the form safe from abuse; the basis is legitimate interest. I do not sell enquiry data and do not use it for advertising.
Who else sees them
The enquiry is received and stored by Cloudflare, Inc. (USA), which delivers this website and handles the form. On the Contact page, Cloudflare Turnstile checks that the form is sent by a person, not a bot; for this check Cloudflare processes your IP address and browser data. The website runs on a server of Hetzner Online GmbH in Germany. A copy of the enquiry is sent by e-mail, through the mail server of the site's hosting and maintenance provider, straight to my own mailbox (Gmail, Google). I give your data to no one else unless the law requires it.
Transfers outside Europe
Cloudflare and Google are US companies and may process data outside Serbia and the European Union as well. Such transfers rely on those companies' standard contractual clauses and on the EU-U.S. Data Privacy Framework.
How long
An enquiry from the website is kept for at most 12 months and then deletes itself. The sender’s IP address is kept for at most one hour, only to protect the form from abuse. Server logs (IP address, time, page requested) are deleted after 14 days. The copy of the enquiry in my mailbox stays until I delete it; I delete it at your request.
Cookies
The site uses one necessary cookie, sivke_pristanak, which remembers your choice in the cookie notice for 180 days. I do not currently use cookies for measuring visits or for ads. If I ever add them, they will be listed here and will only load if you choose “Accept all”.
Photos
The site shows photos from celebrations I have shot. If you or your child appear in one of them and you want it removed, get in touch and I will take it down.
Your rights
You have the right to request access to your data, correction, deletion, restriction of processing and data portability, and to object. Any consent you gave can be withdrawn at any time. Send your request by phone, WhatsApp or Instagram; I answer without delay and within 30 days at the latest. If you believe your data has been processed unlawfully, you can lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection, poverenik.rs.
Children
The site is not aimed at children under 15. An enquiry for a child's birthday or a christening is sent by a parent or guardian.
Security
The site only works over an encrypted connection (HTTPS). Only I and authorised staff of the site's hosting and maintenance provider can access enquiries.
Changes
If these rules change, the new version will be on this page, with a new date. Last updated: 26.10.2026.
