Legal

Privacy Policy & Legal Notice

Last updated: 22 July 2026

This Privacy Policy explains how Marko Spasojević PR Blackline Creative Studio Šabac (“Blackline”, “we”, “us”) collects, uses and protects your personal data when you visit blacklinecreativestudio.com or contact us. We respect your privacy and process your data in accordance with the EU General Data Protection Regulation (GDPR), the Serbian Law on Personal Data Protection (ZZPL), and the UAE Personal Data Protection Law (PDPL), as applicable.

1. Who we are (Data Controller)

The controller responsible for your personal data is:

For any question about this policy or your data, contact us at info@blacklinecreativestudio.com.

2. What data we collect

a) Information you give us

When you use our contact form, request a free audit, or email us, we collect the data you provide — typically your name, email address, and the content of your message (which may include details about your business or project).

b) Information collected automatically

If you consent to analytics cookies, we collect standard usage data such as pages viewed, approximate location (country/city), device and browser type, and how you interact with the site. This is collected through Google Analytics 4 (measurement ID G-C23FE7SWBK). Analytics are disabled by default until you accept via our cookie banner.

3. Why we use your data (legal bases)

• To respond to your enquiries and provide quotes/services — legal basis: your request / steps prior to a contract, and our legitimate interest in answering you.
• To provide our services to clients — legal basis: performance of a contract.
• To measure and improve the website via analytics — legal basis: your consent (which you can withdraw at any time).
• To comply with legal and tax obligations (e.g. invoicing) — legal basis: legal obligation.

4. Cookies & analytics

We use two categories of cookies:

• Essential cookies — required for the site to function and to remember your cookie choice. Always active.
• Analytics cookies — set only after you click “Accept”. Used by Google Analytics to understand site usage.

You can change or withdraw your choice at any time via the Cookie settings link in the footer, or by clearing cookies in your browser. We use Google Consent Mode v2, so no analytics or advertising storage is used before you consent.

5. Who we share data with

We do not sell your personal data. We share it only with trusted service providers (processors) who help us run our business, under appropriate data-processing terms:

• Google Ireland/LLC — website analytics (Google Analytics 4).
• Vercel Inc. — website hosting and delivery.
• Our email provider — to receive and reply to your messages.

We may also disclose data where required by law or to protect our legal rights.

6. International data transfers

Some of our providers are located outside Serbia and the EU (e.g. in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or adequacy mechanisms provided by those companies.

7. How long we keep your data

We keep enquiry and contact data only as long as needed to handle your request and for a reasonable period afterwards for follow-up. Client and accounting records are kept for as long as required by applicable tax and commercial law. Analytics data is retained according to our Google Analytics configuration.

8. Your rights

Depending on your location, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data (“right to be forgotten”);
• restrict or object to processing;
• data portability;
• withdraw consent at any time (without affecting prior lawful processing).

To exercise any of these rights, email info@blacklinecreativestudio.com. You also have the right to lodge a complaint with a supervisory authority:

• Serbia: Commissioner for Information of Public Importance and Personal Data Protection (Poverenik) — poverenik.rs.
• EU: your national data protection authority.
• UAE: the UAE Data Office.

9. Data security

We use appropriate technical and organisational measures — including encrypted (HTTPS) transmission and limited access — to protect your data against loss, misuse or unauthorised access.

10. Children

Our website and services are intended for businesses and adults. We do not knowingly collect data from children under 16.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version. If we introduce new tools (for example, advertising pixels such as the Meta Pixel), we will update this policy accordingly before activating them.

12. Legal notice / Impressum

Information pursuant to applicable e-commerce and media law (incl. § 5 German DDG):