Privacy policy

The controller is [—— full company name], [—— address]. For anything about your data, write to [—— data protection email].

Account data: your name, email address, your password in hashed form, and — if you enter one — a phone number with its country dialling code.

Grave data: the name of the deceased, the cemetery, the plot and grave reference, and any notes you add yourself.

Photographs from the field, before and after each visit, and the field worker's note on what was done.

To perform the service you contracted — performance of a contract is the legal basis. Payment records are processed to meet our statutory bookkeeping obligations.

We use your email address for messages about the service. Marketing messages are sent only with your separate consent, and you can unsubscribe at any time.

With Stripe, which processes payments and is itself a controller of card data; with our hosting and email providers; and with our field workers, to the extent they need it to find the grave.

We do not sell your data or pass it to third parties for marketing.

We photograph the grave solely to report back to you. We do not publish those photographs or use them promotionally without your explicit, separately given consent.

Account data is kept while the account exists and for [——] after it is deleted. Invoices and accounting records are kept for as long as tax law requires.

You have the right of access to your data, and rights to rectification, erasure, restriction of processing, portability and objection. Send requests to [—— email]; we answer within 30 days.

If you live in the European Union you hold the same rights under the GDPR. You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to the supervisory authority in your own country.

The cookie that keeps you signed in is necessary for the portal to work and cannot be switched off.

With your explicit consent we measure traffic using Google Analytics (Google Ireland Limited) — which pages are read, where visitors come from and on what device. Until you agree, nothing is loaded from Google's servers and no such cookie is set. Your IP address is truncated before processing.

Your answer is kept locally in your browser, not on our servers. You can withdraw consent at any time with one click on “Cookies” at the foot of every page — exactly as easily as you gave it.