Privacy policy
Last updated: 9 October 2026
1. Who processes your data
The data controller is Srce Sa Dušom. For any question about your data, write to kontakt@srcesadusom.com.
This is a translation. If the versions differ, the Serbian version applies.
2. What we collect
- account data: email and password (the password is stored only in encrypted form);
- delivery data: name, phone, address, city, postal code and country;
- orders and their status;
- the profile content you add: details of the deceased, life story, photos, videos and the grave's location;
- contact details of companies that ask about a partnership: company name, email and phone;
- technical data the server logs for security (IP address, time of access).
3. Why we process it
- to fulfil your order and provide the profile service (performance of a contract);
- to meet legal obligations, such as keeping accounting records;
- to protect the website against abuse (legitimate interest);
- to contact a company that asked about a partnership (your consent, which you can withdraw at any time).
4. Who we share it with
We do not sell data. We use these providers, who process it only on our instructions:
- Contabo — the server running the website and database (European Union);
- Amazon Web Services — storage for photos and videos (European Union);
- Brevo — sending emails (European Union);
- Cloudflare — network and protection of the website;
- courier services — delivering the plaque.
5. How long we keep it
We keep account data and profile content while the account exists. We keep order data as long as accounting rules require. After that we delete it. We keep the contact details of companies that ask about a partnership while we talk about working together, and at most two years after the last contact unless a partnership starts.
6. Your rights
You have the right to access, correct and delete your data, to restrict processing, to data portability and to object. Send requests to kontakt@srcesadusom.com. You may also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).
7. Data about the deceased
A profile is visible to anyone who has the link or scans the plaque. Please do not add sensitive data about living people to a profile.
8. Security
The website uses an encrypted connection (HTTPS), passwords are stored encrypted, and only authorised people can access the data.
9. Changes
We tell account owners about important changes to this policy by email.