Privacy & Cookie Policy
Last updated: October 2026
This Privacy & Cookie Policy explains how VDigital collects, uses, and protects your personal data and how cookies and trackers are managed in compliance with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and the Law on Personal Data Protection of the Republic of Serbia (ZZPL). Zero non-essential cookies or third-party trackers load until you explicitly grant consent.
1. Data Controller
The data controller responsible for processing your personal data is VDigital (Veljko Petković, Niš, Republic of Serbia). For any privacy or data protection inquiries, contact us directly at hello@vdigital.dev or +381 65 913 1103.
2. Personal Data We Collect
• Contact Form Data: When you submit an inquiry via our contact form, we collect the details you voluntarily provide: your full name, email address or phone number/messenger handle, your industry or field of work, and your message.
• Technical & Analytics Data (Only With Prior Consent): When you first visit vdigital.dev, no non-essential cookies or third-party scripts are loaded. Only if you explicitly accept the "Analytics" or "Marketing" categories in our consent banner do we collect anonymized usage statistics (pages visited, referrer URL, browser/device type, and IP address processed by analytics providers). All fonts and images are self-hosted on vdigital.dev so no third-party font or image CDNs receive your IP address on page load.
3. Purposes and Legal Basis for Processing
• Strictly Necessary Operations (GDPR Art. 6(1)(f) / Serbian ZZPL Art. 12(1)(6) & ePrivacy Art. 5(3)): Storing your cookie consent decision (cc_cookie) and language preference (vd_lang_choice) is strictly necessary to provide the website in the language and privacy configuration you requested.
• Responding to Inquiries & Pre-Contractual Steps (GDPR Art. 6(1)(b) & (a) / ZZPL Art. 12(1)(1) & (2)): Processing contact form submissions to reply to your message, schedule a call, and prepare a collaboration proposal.
• Analytics & Marketing Embeds (GDPR Art. 6(1)(a) / ZZPL Art. 12(1)(1)): Loading Google Analytics 4 (with Google Consent Mode v2), Yandex Metrica, Ahrefs Analytics, Cal.com booking widgets, or YouTube-nocookie embeds occurs strictly on the basis of your prior, freely given opt-in consent.
4. Third-Party Recipients & International Data Transfers
Depending on the features you use and the consent categories you accept, data may be processed by:
• Vercel Inc. (USA / EU Edge Network) - Website hosting and serverless API execution, protected under Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
• Vercel Web Analytics (cookieless, Vercel Inc., USA, EU-US DPF) - Anonymous, privacy-friendly website performance and traffic analytics without cookies or cross-site tracking.
• Web3Forms (USA / EU) - Processes contact form data solely when you click "Send inquiry" to deliver your message to hello@vdigital.dev.
• Google Ireland Limited / Google LLC (Ireland / USA) - Google Analytics 4 (gated behind "Analytics" consent; IP anonymization enabled; Google Consent Mode v2 defaults all storage to denied).
• Yandex LLC (Russian Federation) - Yandex Metrica (strictly gated behind "Analytics" consent; zero data is sent to Russian servers unless you explicitly accept Analytics cookies pursuant to GDPR Art. 49(1)(a) / ZZPL).
• Ahrefs Pte. Ltd. (Singapore / EU) - Cookieless web analytics (strictly gated behind "Analytics" consent).
• Cal.com, Inc. (USA) - Interactive call booking calendar on the Contact page (gated behind consent or explicit click-to-load action).
5. Data Retention
Contact form inquiries are retained for up to 12 months from our last communication unless you request earlier deletion or we enter into a service contract. Your cookie consent choice (cc_cookie) is stored for 6 months (182 days), after which you will be asked to renew your preference.
6. Your Rights Under GDPR & Serbian ZZPL
Under the GDPR and the Serbian Law on Personal Data Protection (ZZPL), you have the right to: (a) request access to and a copy of your personal data; (b) request rectification of inaccurate data; (c) request erasure ("right to be forgotten"); (d) restrict or object to processing; (e) request data portability; and (f) withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, email hello@vdigital.dev. You also have the right to lodge a complaint with the Serbian Supervisory Authority - the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia, www.poverenik.rs, office@poverenik.rs) - or with the data protection authority in your EU/EEA member state of residence.
7. How to Change or Withdraw Cookie Consent
You can review, change, or withdraw your cookie consent at any time by clicking the "Manage Cookie Preferences" button below or the "Cookie settings" link in the footer of every page. When you withdraw consent, non-essential cookies (_ga, _gid, _ym_*, etc.) are immediately deleted from your browser and analytics scripts are stopped.
Complete List of Cookies & Trackers
| Name | Provider / Country | Purpose | Duration | Category |
|---|---|---|---|---|
| cc_cookie | vdigital.dev (First-party) | Stores your cookie consent preferences (necessary, analytics, marketing) so we do not re-ask on every visit. | 6 months (182 days) | Necessary |
| vd_lang_choice, vd_lang_banner_dismissed | vdigital.dev (localStorage) | Remembers your selected interface language (SR / EN / RU) and whether you dismissed the language suggestion bar. | Persistent (local browser storage) | Necessary |
| _ga, _ga_NNXZ378TYV | Google Ireland Ltd / Google LLC (EU / USA) | Google Analytics 4 cookies used to distinguish unique users and measure session interactions (loaded only after Analytics consent). | 2 years | Analytics |
| _gid, _gat | Google Ireland Ltd / Google LLC (EU / USA) | Google Analytics 4 cookies used to distinguish short-term sessions and throttle request rate (loaded only after Analytics consent). | 24 hours / 1 minute | Analytics |
| _ym_uid, _ym_d | Yandex LLC (Russian Federation) | Yandex Metrica anonymous visitor ID and first-visit timestamp for site usage statistics (loaded only after Analytics consent). | 1 year | Analytics |
| _ym_isad, _ym_visorc | Yandex LLC (Russian Federation) | Yandex Metrica ad-blocker detection and session metrics (loaded only after Analytics consent; Webvisor session replay is disabled). | 2 days / 30 minutes | Analytics |
| Ahrefs Web Analytics (script) | Ahrefs Pte. Ltd. (Singapore / EU) | Cookieless traffic measurement script (loaded only after Analytics consent). | Session (no cookies set) | Analytics |
| Cal.com Embed & YouTube-nocookie | Cal.com Inc. (USA) / Google LLC (USA) | Interactive call scheduling calendar and privacy-enhanced video player (loaded only after Marketing consent or explicit click-to-load). | Session | Marketing |