Last updated: 8 November 2026
Who is responsible?
Gordan Grgić, Brussels, Belgium, is responsible for the personal data processed through this portfolio. For privacy questions or requests, use the contact form.
Messages you send
I use the name, email address, subject and message you provide to respond to your enquiry and continue the related conversation. Providing these details is voluntary, but I need an email address to reply. Please do not send sensitive personal data.
For general enquiries, processing is based on my legitimate interest in communicating about my work. For enquiries about a possible contract, it may be necessary to take steps at your request before entering into that contract.
Formspree receives and forwards submissions to my personal Gmail inbox. Formspree may also process technical information, including your IP address and browser information, to operate and protect the service.
The planned retention period for my correspondence is 12 months after the conversation ends, unless it is needed for ongoing cooperation, legal obligations or legal claims. This is not an automatic deletion setting or a confirmed retention period for providers’ logs and backups.
Optional analytics
Google Analytics starts only with your consent. It helps me understand visits and improve the website using information about pages viewed, interactions, browser, device, approximate location and cookie identifiers. I do not intentionally send names, email addresses or message contents to Analytics.
You can refuse analytics or withdraw consent through Cookie settings. Withdrawal does not affect the lawfulness of earlier processing. User and event retention is set to two months; new activity can restart the user retention period. Standard aggregated reports are not covered by that limit. Analytics cookies are configured for 180 days and may renew with use. Your consent choice is stored in your browser for up to 180 days.
Hosting and local preferences
Cloudflare delivers and protects the website. Technical request records can include time, IP address, country, path, HTTP method, response and cache status. Some records are available to me in its dashboard. The purpose is reliable and secure website operation, based on legitimate interests. Cloudflare Web Analytics is disabled for this project.
Cloudflare documents 31 days of history for the relevant HTTP and security analytics datasets on the Free plan. This does not establish a deletion deadline for every internal record or backup. Other provider retention periods depend on the data, purpose and legal requirements.
Fonts are served with the website, without contacting Google Fonts servers. Your theme preference stays in your browser until you change it or clear website data.
Providers and transfers
The services used are Cloudflare, Formspree and Google. Data may be processed outside the EEA, including in the US. Cloudflare’s standard terms incorporate a DPA with safeguards for applicable transfers, including standard contractual clauses. This notice does not claim that all providers process data under the same contractual terms.
Provider privacy information
Cloudflare · Formspree · Google
Your rights
Subject to the applicable conditions, you may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, or withdraw consent. Use the contact form; I may request reasonable identity verification. Requests are normally answered within one month. You may also complain to the competent data protection authority, including Belgium’s data protection authority.