Privacy notice
Last updated: 6 May 2026
Serbian Travel ("we", "us", "the site") publishes travel guides about Serbia at serbian.travel. This policy explains what data we collect when you visit, why we collect it, who we share it with, and what rights you have. By using the site you agree to the practices described here. If you do not agree, please stop using the site.
Who we are
Serbian Travel is operated by Rocky Consulting GmbH, Switzerland. Editorial contributors work on the ground in Serbia. For privacy questions, use the contact form on our contact page. We act as the data controller for personal data collected on this site within the meaning of the EU General Data Protection Regulation (GDPR).
What we collect
We collect three categories of data. First, technical data your browser sends automatically when you load any page: IP address, user agent, referrer, and the URL you requested. This is logged for security and to keep the site running. Second, contact data you give us voluntarily through forms or email — your name, email address, and the contents of your message. Third, aggregate analytics — anonymised counts of which pages get viewed and from which countries, used to improve the guides.
Cookies
We use a single session cookie required for the site to work. We do not use advertising cookies, cross-site tracking pixels, or third-party social media widgets that load before consent. If we ever add analytics that store identifiers (for example a self-hosted analytics tool), we will request your consent before any non-essential cookie is set, in line with the EU ePrivacy Directive.
Third parties
When the site shows an embedded map, video, or affiliate link, the third party may set its own cookies and see your IP address. The relevant providers are typically OpenStreetMap, YouTube, and major booking platforms. Their privacy policies apply to data collected on their domains. We never sell your data and we do not share contact data outside the small team running the site, except when required by law.
Your rights
Under GDPR you have the right to access the personal data we hold about you, correct it, ask us to delete it, restrict its processing, or receive a copy in a portable format. You also have the right to object to processing and to lodge a complaint with your national data protection authority. To exercise any of these rights, use the contact form. We will respond within 30 days.
How long we keep data
Server access logs are kept for up to 30 days for security analysis and then deleted. Contact form messages are kept for as long as needed to handle your request and for up to 24 months afterwards as a record. Aggregate analytics are kept indefinitely because they contain no personal data.
Changes to this policy
We may update this policy when laws change or when we add new features that affect privacy. The "last updated" date at the top will reflect the latest revision. Material changes will be flagged on the homepage for at least 14 days.
