Privacy Policy
This policy describes exactly what happens to the information you send us. It is written to be read, not to be skipped.
Last updated: 11 September 2026
Who is responsible
The controller of your personal data is:
Pavel Miroshkin PR Konsultantske Aktivnosti INTERMIRO Niš
Registration number 66479480
Cacanska 11, Niš (Palilula), 18000, Serbia
info@intermiroservice.com
For any question about your data, write to that address. A person reads it.
What we collect
What you send us through a form
Your name, your email address, the platform involved, the links you provide and your description of the situation. The form also carries two technical details: the address of the page you sent it from, and the address of the site that linked you to that page, if your browser reports it. That is how we know which page or channel brought an enquiry. You choose what to write. Please do not send documents or details you would not want stored in an email inbox — a short description is enough for an assessment, and we will tell you what else is needed.
What is recorded automatically
Our hosting provider records the technical data any web server records: IP address, browser type, requested page, date and time. This is used to serve the site and to protect it from attack and abuse.
Visit counting without cookies
Our hosting provider, Cloudflare, counts visits for us with Cloudflare Web Analytics: pages viewed, the referring site, country, browser and device type. It sets no cookie, stores nothing on your device, does not fingerprint your browser and does not identify you. Fonts are served from our own domain, not from Google.
Cookies
This site sets no cookies until you choose. When you first arrive you are asked, and Reject all is as easy as Accept all. If you reject, the scripts below are never loaded and no cookie is set — declining is not a preference we record and then ignore. You can change your mind at any time through the "Cookie settings" link in the footer; withdrawing deletes the cookies already set on our domain. We ask again after twelve months.
Analytics — Google Analytics. Tells us which pages are read and which channel brought the visit. Data collected: pages viewed, approximate location, browser and device type, the referring site. Processed by Google; Google Analytics does not log or store IP addresses. Google signals and advertising features are switched off, and we do not link analytics to anything you send us through a form.
Why we are allowed to use it
Under the GDPR, each purpose needs a legal basis. Ours are:
- Answering your enquiry and delivering the serviceArticle 6(1)(b) — steps taken at your request before and under a contract.
- Keeping the site available and secure, and counting visits without cookiesArticle 6(1)(f) — our legitimate interest in a working, non-abused website and in knowing which pages are read. Nothing is stored on your device for this.
- Analytics and advertising cookiesArticle 6(1)(a) — your consent in the cookie banner, one category at a time, withdrawable at any time.
- Sending you marketing emailArticle 6(1)(a) — your consent, given by ticking a box that is never pre-ticked. Nothing else you do on this site counts as consent to marketing.
- Meeting accounting and legal obligationsArticle 6(1)(c) — where the law requires us to keep records.
Two separate channels, on purpose
We keep automated email and case correspondence apart, and you should know which is which.
Automated and marketing email — the confirmation you receive after sending a form, and any newsletter you have opted into. These are sent through an email delivery provider and carry an unsubscribe link.
Correspondence about your case — replies written by a person about your specific matter. These are ordinary email, one to one.
You can unsubscribe from marketing at any time without affecting your case. Unsubscribing never stops us from replying to you about work in progress.
Who else touches your data
We use a small number of service providers. They process data on our instructions and for no purpose of their own:
- Cloudflare, Inc.Hosting, content delivery, DNS, email routing and cookieless visit counting. Processes technical data and forwards email sent to our address.
- FormSubmitDelivers the contents of the contact forms on this site to our inbox.
- Google LLCThe mailbox where enquiries arrive and are stored, and — only with your consent — website analytics.
- Brevo (Sendinblue SAS, France)Sends automated confirmations and, where you consented, marketing email.
We do not sell personal data, we do not share it for advertising, and we do not give it to anyone else except where the law requires it.
Where your data goes
We are established in Serbia. Some of the providers above are based in, or store data in, the United States. Those transfers rely on the safeguards in Chapter V of the GDPR, in practice the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
How long we keep it
Enquiries that do not become cases: up to 24 months, then deleted. Case correspondence and records: up to 5 years after the matter closes, to handle follow-up disputes and meet accounting rules. Marketing contacts: until you withdraw consent. Server logs: as retained by our hosting provider, typically days.
You can ask us to delete your data earlier and we will, unless a legal obligation requires us to keep a specific record.
Your rights
If the GDPR or Serbian data protection law applies to you, you have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time — withdrawing does not undo what was lawful before.
If you are in California, the CCPA as amended by the CPRA gives you the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information, and we do not use it for cross-context behavioural advertising, so there is no opt-out to exercise. We will not treat you differently for using any of these rights.
To use any right, write to info@intermiroservice.com. We answer within 30 days.
If you think we handled your data badly, you may complain to a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU, the authority where you live.
Security
The site is served over HTTPS only. Access to the mailbox holding enquiries is protected by two-factor authentication. We keep the number of people and services touching your data as small as we practically can — which is why this list of providers is short.
Children
This service is for businesses and adults. We do not knowingly collect data from anyone under 16. If you believe a child has sent us data, write to us and we will delete it.
Changes
If we change this policy we will change the date at the top. If a change materially affects how we use data you already gave us, we will tell you by email before it takes effect.