# Privacy notice

> How OCTRA uses personal data on inspectedbymarko.com: what is collected, why, for how long, and your rights.

- Canonical page: https://inspectedbymarko.com/privacy/
- Site: Inspected by Marko (https://inspectedbymarko.com/)
- Last updated: 26 October 2026

How OCTRA uses personal data on inspectedbymarko.com.

Version 1.0 · (date to be confirmed). Draft: still under lawyer review.

**Summary**
- Your email address gets the free skills. The newsletter goes out only if you tick the box and confirm.
- Call requests are used to reply, book the work and send the invoice. They are not added to any mailing list.
- The site remembers which pages you read only if you say yes through a link I email you, and forgets them when you ask.
- Analytics load only if you accept them.
- You can see, correct or delete your data at any time.

## 01 Who controls your data

This site is run by OCTRA, my company in Serbia. OCTRA decides how personal data is used here, which makes it the controller. In this notice, “we” means OCTRA.

|  | OCTRA company details |
| --- | --- |
| Registered name | OneCodeToRuleAll d.o.o. |
| Seat | Sinđelićeva 6, 19000 Zaječar, Serbia |
| Registration number | 21564516, Serbian Business Registers Agency |
| Tax ID | 111898813 |
| Privacy email | [marko@inspectedbymarko.com](mailto:marko@inspectedbymarko.com) |

The Serbian Law on Personal Data Protection (Official Gazette of the Republic of Serbia, No. 87/2018) applies to everything we do here, because we are established in Serbia. The GDPR applies when we offer our services or send the newsletter to people in the European Economic Area, or measure how they use this site, and the UK GDPR does the same for the United Kingdom. We give everyone the same protection, wherever they are. The site is for adults: we do not knowingly collect personal data from anyone under 16.

## 02 What we collect, and why

### Visiting the site

- **What:** your IP address, browser and device type, the pages you request and the time. A short link from a video, or a link in a video description, adds a tag that names the video, and the site notes the site that sent you. We keep these only if you then send a form.
- **Why:** to deliver the site, keep it secure, and see which videos bring people here.

### The free skills and newsletter forms

- **What:** your email address, which form and page you used, the free skills you asked for and when, whether you ticked the newsletter box and when, the wording of the box you saw, the video or page that sent you, the country and time zone your connection comes from and your browser’s language (not your IP address), and whether and when you confirmed your address. When you download the file, the site host logs the request.
- **Why:** to send the free skills, to send the newsletter only if you ticked the box and confirmed, at a sensible hour and in your language, and to see which videos and pages bring people here.

Kit records the click on the button in the delivery email, which confirms your address and starts the download. If you subscribe to the newsletter, Kit also records which newsletters you open and which links you click, as the newsletter box says. If you ask for the skills again after losing the email, Resend sends the link once more. Right after you subscribe, the form asks whether the site may remember the pages you read (below). Saying nothing is no.

### Pages you read, if you say yes

- **What:** which pages of this site you open, how many times, and when you first and last opened each; the site or video tag that sent you; and when you were last here. All of it next to your email address. It starts only if you ask for it in the note the form shows after you subscribe, then open the link I email you and say yes. A cookie in the browser where you say yes holds a random key, so the site knows it is you; other browsers and devices are not recognized. Nothing is kept until Kit has confirmed your newsletter subscription.
- **Why:** to send you the issues, skills and offers that fit what you read, and to leave out what you already have.

Saying nothing is no. Switch it off any time with Forget my visits in section 03, or write to me: the pages remembered are deleted at once. Unsubscribing from the newsletter ends it too.

### The call request form, on the call page and Work with me

- **What:** what you need, whether your app has paying users, what is coming and when, what it is built with, your name and work email, and, if you give them, your company, its size and anything you add; with the source of your visit and what the page showed you next. If we agree on work, the details the invoice needs follow by email.
- **Why:** to reply, to show you the calendar or the right next step, to book the work, send the invoice and keep the records accounting and tax law require. Personal data inside your repository is not covered by this notice: we handle it only for your company, under section 11 of the audit terms.

### The call booking

- **What:** your name, email, the time you pick and anything you write in the booking. Calendly collects this when the calendar opens after the call request form, with the source of your visit.
- **Why:** to hold the call you booked.

### Emails you send me

- **What:** your messages and my replies.
- **Why:** to answer you.

### Legal bases

| Purpose | Legal basis |
| --- | --- |
| Free skills | Contract: sending what you asked for |
| Newsletter | Consent |
| Pages you read | Consent |
| Bookings, calls and invoices | Steps you ask for before a contract, then the contract; legal obligations for accounting and tax records |
| Site and security logs, the source of a visit, a booking noted on your subscription, emails | Legitimate interests |

## 03 Analytics and your choice

We use Google Analytics 4 to count visits and see which videos bring people here. It loads only if you accept analytics. If you refuse, nothing loads and nothing is stored. Google Analytics does not store your IP address, Google signals and advertising features are off, and we keep analytics data for 14 months. Its two cookies last up to 13 months, and the prompt asks again after 12 months. The site sets cookies of its own only for remembering the pages you read, and only after you ask for it. Opening the link in my email sets one for an hour, which carries the link to the button below. Saying yes there sets two more: one holds a random key that no script on the page can read, the other tells the page the memory is on. Both last 13 months, and Forget my visits below deletes them. The call booking path loads Calendly’s calendar, which sets its own cookies and asks before it sets any it does not need.

## 04 Tools that process data for us

| Tool | What it does | Where |
| --- | --- | --- |
| Kit | Sends the free skills and the newsletter. | United States |
| Calendly | Books calls, when the calendar opens after your call request. | United States |
| Web3Forms | Delivers call requests to my inbox. | United States |
| Cloudflare | Hosts the site, runs its forms, logs requests and keeps the subscriber records (Cloudflare D1). | Global network, United States company; subscriber records stored in the European Union |
| Anthropic | AI assistant that helps me draft and summarize my own email, under business terms that exclude training. | United States |

We also share personal data with our bank and our accountant in Serbia, to receive payments and keep our books; with our lawyers and advisers when we need their advice; and with authorities when the law requires it. **We do not sell personal data.**

## 05 Transfers outside Serbia

We are established in Serbia. Neither the European Commission nor the United Kingdom has recognized Serbia as providing adequate protection. When you give us personal data directly, the GDPR or the UK GDPR still protects it, because those laws apply to us directly.

Kit, Calendly, Web3Forms, Cloudflare, Resend and Anthropic process data in the United States and other countries. Where the destination is not recognized as adequate, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum in their data processing terms, or on the EU-U.S. Data Privacy Framework and its UK Extension for certified providers, and for transfers under Serbian law on (to be confirmed: the route counsel confirms under Articles 64 and 65 of the Serbian Law on Personal Data Protection). For a copy of the safeguards, write to [marko@inspectedbymarko.com](mailto:marko@inspectedbymarko.com).

## 06 How long we keep data

| Data | Kept for |
| --- | --- |
| Site and security logs | Generally no longer than 30 days |
| Free skills email, if you did not subscribe | 30 days after we send the skills |
| Newsletter signup you never confirmed | 30 days |
| Newsletter subscription | Until you unsubscribe |
| Pages you read, if you said yes | Until you switch it off or unsubscribe; each single visit 90 days |
| Consent record | Up to 3 years after you unsubscribe |
| Suppression list | For as long as we send email |
| Call request, if no work follows | 12 months after our last contact |
| Contract records | 5 years after the inspection |
| Accounting records | 5 and 10 years from the end of the business year, as Serbian accounting law requires |
| Call bookings | 12 months after the call, unless we work together |
| Emails | 3 years after the conversation ends |

## 07 Your rights

**Your right to object to marketing.** You can object at any time, free of charge, to our use of your data for the newsletter, and to the site remembering the pages you read. Use the unsubscribe link in any newsletter, Forget my visits in section 03, reply “stop”, or write to [marko@inspectedbymarko.com](mailto:marko@inspectedbymarko.com), and we stop at once.

You can see, correct or delete your data at any time. You can also object to uses based on our legitimate interests, ask us to limit how we use it, take a copy, and withdraw consent without affecting what we did before. Write to [marko@inspectedbymarko.com](mailto:marko@inspectedbymarko.com). We may ask you to confirm who you are. We answer within one month, free of charge, and tell you within that month if a complex request needs up to two more.

You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection in Serbia ([poverenik.rs](https://www.poverenik.rs/)), to the data protection authority where you live or work in the European Economic Area, or to the Information Commissioner’s Office in the United Kingdom ([ico.org.uk](https://ico.org.uk/)). Please write to us first, so we can fix it.

We make no decisions about you by automated means alone. If you are in the United States, you have the same rights wherever you live.

## 08 Changes

When this notice changes, the version and date at the top change too. If a change affects how we use your email, I tell you by email first.

---

Provider and data controller: OneCodeToRuleAll d.o.o. (OCTRA) · Seat: Sinđelićeva 6, 19000 Zaječar, Serbia · Registered with the Serbian Business Registers Agency, no. 21564516 · Tax ID (PIB) 111898813 · marko@inspectedbymarko.com