Privacy Policy

This document explains what data we collect through malva.rs, why we process it, how long we keep it and how you can exercise your rights.

Last updated: July 2026.

Who processes your data

The data controller is Anton Alekseenko PR, Đure Jakšića 1, Belgrade, Republic of Serbia. Company number 67056060, tax number 113749404. For any question about your data, write to antonalekseenkopr@gmail.com.

We process data in accordance with the Personal Data Protection Act of the Republic of Serbia.

What we collect

Through the forms on this site we collect only what you enter yourself:

• your name and the name of your venue or company
• the contact you give us: Telegram, WhatsApp, phone number or email
• business details you choose to share: city, industry, average check, number of locations, the goal of your enquiry
• the language of the page the enquiry was sent from

The calculators run inside your browser. The figures you type into them are never sent to us and are not stored anywhere — they disappear when you close the page. We ask for contact details only when you request a personal plan.

The server automatically records technical details of visits: IP address, time, page address and browser type. This is a standard web server log, needed for security and for the site to work correctly.

Why we process data, and on what basis

Data from the forms is used solely to answer your enquiry, prepare a calculation or a plan and arrange a meeting. The legal basis is your consent, given when you submit the form, and steps taken at your request before entering into a contract.

Server logs are processed on the basis of our legitimate interest in keeping the site secure and stable.

We do not use your data for marketing messages you did not ask for, and we never sell it.

Who the data is shared with

Enquiries reach our server and are forwarded to our business email. Our email runs on Google services, which means the message passes through Google's infrastructure.

Fonts, images and the core scripts are hosted on our own server. The only external service is Google Analytics, and it loads only with your consent.

Beyond the above, we do not pass data to third parties, unless required by law or by a competent authority.

How long we keep it

Enquiries are kept for 24 months after our last exchange, so that we can pick up the conversation if you come back to us. After that they are deleted. If you become a client, data is kept for the duration of the contract and for the periods required by tax and accounting law.

Server logs are kept for up to 15 days.

Cookies

This site uses Google Analytics to understand how many people visit, where they come from and which pages they read. The tool writes cookies to your browser and sends details of the visit to Google.

We look at the statistics in aggregate and do not try to identify individual visitors. Analytics is enabled only after you give consent through the notice shown on your first visit. You may withdraw consent at any time by clearing cookies in your browser.

Your language choice and similar settings are stored locally in your browser and are not sent to us.

Your rights

At any time you may request:

• access to the data we hold about you, and a copy of it
• correction of inaccurate data
• deletion of your data
• restriction of processing, or objection to it
• transfer of your data to another controller
• withdrawal of consent — this does not affect processing carried out beforehand

Simply write to antonalekseenkopr@gmail.com. We reply within 30 days at the latest.

If you believe your rights have been breached, you may complain to the Commissioner for Information of Public Importance and Personal Data Protection — poverenik.rs.

Security

The site runs over an encrypted connection. Access to enquiries is limited to the people who need it for their work. Should a breach occur that could affect your rights, we will notify you and the supervisory authority within the statutory deadline.

Changes

We may amend this policy when the way the site works changes, or when the law does. The date of the last change is shown at the top of this page.

The client dashboard at malva.rs/app/ works differently: the guest data processed there is handled on behalf of the venue, under a service contract.