Privacy and data protection policy
What data the Serbian Assembly in the Diaspora collects, why and for how long, which services process it, and what your rights are
Who we are
The Serbian Assembly in the Diaspora (“Skupština u rasejanju”) is an informal, volunteer initiative of members of the diaspora. For questions about privacy, write to zdravo@skupstinaurasejanju.org.
What data we collect
We collect only the data necessary for our work and communication:
- Name and surname, email address (where needed: institution/position, country/city).
- Participation in initiatives (e.g. signing an appeal/petition, short comments in a survey).
- Note on sensitive data: signing an appeal may reveal a political opinion; we process such data only with your explicit consent.
Purposes of processing
We use your data only for:
- carrying out initiatives/petitions (record of signatures, information about the outcome),
- communication with you,
- keeping our communication channels secure and working.
We do not use the data for marketing purposes and we do not sell it to third parties.
The website and its forms
The website has three forms. Contact and Become a member send your first name, surname, email address, subject and message, with your consent, as an email to zdravo@skupstinaurasejanju.org. The newsletter sign-up sends only your email address, as an email to info@skupstinaurasejanju.org, from where it is transferred to the newsletter list (Zoho Campaigns). The website does not store anything you enter: the form passes through a program on Cloudflare (a Worker) that only forwards the message and records nothing; to limit the number of messages, it briefly counts submissions by a fingerprint of the IP address, not by the address itself.
On pages with a form, your browser loads the Cloudflare Turnstile script (protection against automated messages) when the page opens, and the check itself starts as soon as you begin entering data in the form — even if you do not send it.
Services that process data
- Cloudflare — hosting of the website and the program that forwards the forms; data from the forms passes through it and is not stored.
- Cloudflare Turnstile — protects the forms against automated messages; Cloudflare processes data about the browser and device in accordance with the Turnstile Privacy Addendum.
- Cloudflare Email Routing — delivers the message from the form to our mailbox; for each message sent, Cloudflare keeps the sender, recipient, subject and message ID for up to 31 days, but not its content.
- Zoho Mail — the zdravo@ and info@ mailboxes, where the messages from the forms remain. Zoho Campaigns — the list of newsletter subscribers. In the newsletter, Zoho Campaigns records whether a message was opened and which links were clicked, so that we know how much the newsletter is read; we do not use this data for advertising. You can cancel your subscription at any time with the unsubscribe link in the newsletter. Zoho stores the data in a data centre in Australia, i.e. outside the European Union.
- YouTube (youtube-nocookie.com) and Vimeo (“do not track” setting) — a video loads only when you click “Play”; before that your browser does not contact these services, and after the click their rules apply.
- Cloudflare Web Analytics — from the launch of the website, counts visits without cookies.
The form for applying to vote abroad (formular.skupstinaurasejanju.org) works only in your browser: the data and the images of documents are not sent to anyone and are not stored anywhere, and the PDF of the application is created on your device and you send it to the embassy or consulate yourself.
Public disclosure of names
We publish lists of signatories only if you explicitly allow it (with a checkbox/statement in the form). Otherwise, your name remains only in our internal records.
Authors of texts
With texts we publish the author's details — name and surname, a short description and, if the author wishes, a biography, photo and links — only with the person's written consent. Consent is withdrawn by writing to zdravo@skupstinaurasejanju.org: we then remove the author's details, photo and the author's name from posts, so that once the change is published they are no longer on the website or in the website's search. The photo and text remain in the history of changes to the website (a private repository, accessible only to the team), and search engines and internet archives may show the old version for some time.
Cookies and analytics
Our website does not set cookies and does not store anything in your browser — neither on pages with a form nor on pages with a video. Turnstile (on pages with a form) and YouTube or Vimeo (only after you click “Play”) run in their own frame on the page; their own rules apply to them. We count visits with Cloudflare Web Analytics, without cookies. We do not track visitors on the website and we do not carry out marketing tracking.
Retention period
- Data on signatures and participation in initiatives: until the end of the initiative + 12 months, or until consent is withdrawn (whichever comes first).
- Messages from the contact form: 12 months after the last message.
- Membership applications: for as long as the membership lasts or until consent is withdrawn.
- Newsletter subscriptions: until you unsubscribe.
Your rights
You can at any time request access to, correction or deletion of your data, or withdraw your consent. Send your request to zdravo@skupstinaurasejanju.org and we will reply within a reasonable time.
Security
Access to the data is limited to a small number of authorised persons in the Serbian Assembly in the Diaspora. We apply reasonable data protection measures that are relevant for an organisation of this kind.
Minors
Our activities are not aimed at persons under 16. If we unintentionally collect data from a minor without the appropriate consent, we will delete it.
Changes to this policy
We update this Policy from time to time. A new version applies from the day it is published on this page.
This version applies from 30 October 2026.