Privacy policy

17.10.2026.

This policy explains how Fondacija Braća Karić processes visitors’ personal data when they request a publication, send a message or use bogoljubkaric.com. The current forms ask for a full name and email address. We do not request phone numbers, send phone verification codes or subscribe visitors to promotional updates.

Controller and contact

The data controller is Fondacija Braća Karić (Karić Brothers Foundation), Vase Pelagića 23, 11040 Belgrade (Savski venac), Republic of Serbia, registration number 06015476, tax identification number 100421516. For privacy questions and requests to exercise your rights, email kf@karicfoundation.com or write to the postal address above. For help using the website: kontakt@bogoljubkaric.com.

Foundation manager (upravitelj): Ljubica Vukotić, as recorded in the Serbian Business Registers Agency’s register of endowments and foundations. Please use the institutional email and postal address above to contact the Foundation.

Publication requests

The form asks for your full name and email address to handle your request and communicate about it. We email a private link to the selected publication. The link is valid for 24 hours and can be redeemed once. Opening the page from the email does not itself redeem the link: you start the download by pressing “Download PDF”. After redemption, access to the publication in the same browser lasts 30 minutes.

We record the details entered, the publication title and language, request time and link delivery status. If you redeem the link and start PDF delivery, those actions are also recorded. The team receives a download-start notification. This does not prove that the file was saved to your device or read.

Using the private link shows access to a link sent to the address provided; it does not establish your identity. Please do not forward your private link.

Contact messages

We use your full name, email, enquiry category and message to handle and respond to your enquiry. Your message and contact details are sent to the official mailbox, kontakt@bogoljubkaric.com. A short automatic acknowledgment is sent to the email address entered, without including the private message body. The acknowledgment does not verify the email address or sender’s identity.

Do not send passwords, identity documents, personal identification numbers, health data or other sensitive information that is unnecessary for your enquiry.

Required fields and legal basis

Fields marked with an asterisk are technically required to use the forms; the form cannot be submitted without them. This is not a legal obligation for visitors to provide their details. You can read information pages without completing a form. You can also email kontakt@bogoljubkaric.com directly with an enquiry or a request for publication assistance.

We rely on legitimate interests to handle requested services and enquiries, respond and maintain website security, including proportionate abuse prevention. We use only information necessary for the specific purpose. You have the right to object. A required field does not constitute consent to other uses.

No marketing subscription

Downloading a book or sending a message does not subscribe you to news, promotions or campaigns. This version of the website has no promotional subscription feature. We do not use emails collected through these requests for advertising or to create a supporter database. If a separate subscription is introduced later, its choices and terms will be presented separately.

Security and technical information

Operating and protecting the website involves processing session identifiers, IP addresses and necessary browser, request and timing information. Application rate limits use pseudonymized IP or email identifiers rather than a public visitor list. Pseudonymized identifiers are not the same as anonymous data. Google reCAPTCHA helps identify unwanted or automated submissions. See the Cookie policy for details.

Automated security checks may temporarily reject a request; contact the team for assistance. We do not build political profiles of readers or make decisions about their rights based on the books requested.

Access and recipients

Access is limited to authorized Foundation personnel and service providers handling enquiries or maintaining the website, to the extent necessary for their work. Hosting, official email and backups are provided by UNLIMITED.RS (UNITED INTERNET DOO BEOGRAD). Your email provider also processes the information needed to deliver emails. For Google reCAPTCHA, Google processes technical information as a processor under the service terms and data processing addendum. Google reCAPTCHA loads automatically on the contact and publication-request forms, without a separate loading click.

The current forms do not use Unimatrix for code delivery or send it information from these requests. We do not sell personal data or publish download records. Information may be provided to a competent authority where there is a specific legal basis.

Processing locations

According to hosting support’s response of 12 October 2026, the main server is in Serbia and the backup service includes locations in Germany and the Netherlands. Google and the recipient’s email provider may process information outside Serbia under their applicable terms. Processing is therefore not necessarily confined to Serbia. Information about applicable safeguards for international transfers can be requested from the Foundation.

Retention and deletion

Publication-request records. Application records are configured for retention for 30 days from submission. Records older than this period are removed by the daily cleanup process. Opening a link or starting a download does not restart the retention period.

Website messages in the designated folder. New contact-form messages and download-start notifications are routed to the “Upiti sa sajta - 30 dana” folder in the official mailbox. Once a day, messages in that folder that are older than 30 days are permanently deleted automatically. Both receipt time and the message date are checked; if age cannot be reliably established, deletion may be delayed for review. This is not a promise of deletion at the exact moment the thirtieth day ends.

Other correspondence and copies. This automated deletion does not cover the entire email account: messages in other folders, earlier messages outside the designated folder, personal replies from team members and their copies are not deleted by this process. Retention for that correspondence is determined by the purpose of the specific enquiry, whether a response or clarification is still needed, and any applicable legal obligation. The Foundation is responsible for separately reviewing the need for retention and removing data when that need ends. Moving or copying a message does not, by itself, justify keeping it longer.

These periods are not consent to marketing and are separate from the publication link’s 24-hour validity and the 30-minute browser access period. The automatic link email and automatic contact acknowledgment remain part of handling your request. Only aggregate information that no longer identifies individuals may be retained for long-term statistics.

Specific data needed to meet a legal obligation or establish, exercise or defend a legal claim may have a separate retention period, with the reason documented. The 30-day period for the specified records and folder does not automatically determine retention for all technical logs, security identifiers or other providers’ data.

Hosting backups have a separate cycle: support states that backups cover the previous 50 days. Information removed from active records may therefore remain in an older backup for up to a further 50 days until rotation. Backups are not used as a regular visitor-contact database. Earlier deletions must be reapplied if a backup is restored. We cannot delete an email or PDF from your own mailbox or device for you.

Your rights

You may request access, correction, erasure or restriction, object to processing and, where the legal conditions apply, request data portability. Use the Foundation’s contact details above. If there are reasonable doubts about a requester’s identity, we may ask for proportionate additional information to protect the data.

We respond without undue delay, normally within 30 days; any legally permitted extension and its reasons will be explained. You may complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection: https://poverenik.rs. You can exercise these rights whether you use a form or email us directly.

Changes to this policy

If we change publication access, introduce phone verification, subscriptions or new services, we will update the information about data, purposes and your choices before introducing those changes.