Privacy Policy
This policy describes what data Dijaspora may process, the legal basis for that processing, and how you can exercise your rights.
Data controller
The controller for the processing described in this policy is Desymphony EOOD (Bulgaria), UIC 208083785, ul. Balgarska Morava 114, 1303 Sofia, Bulgaria.
Privacy contact: [email protected]
What we process and why
Dijaspora is largely a static site. We do not run user accounts and do not store personal data about you on our server. Processing is limited to:
- NEXT_LOCALE cookie — remembers your selected language (sr/de/en) between visits. It is stored in your browser and is not shared with third parties.
- Technical logs and Cloudflare protection — IP address, request time and User-Agent may be retained briefly for attack mitigation and availability monitoring.
- Cloudflare Web Analytics (optional) — aggregated, anonymous traffic metrics with no cookies. Activated only if a token is configured; otherwise the script is not loaded.
Legal basis
The legal basis is legitimate interest (Art. 6(1)(f) GDPR and Art. 12 ZZPL): operating the site, providing language support and basic security. Because we do not profile visitors and do not run targeted advertising, consent is not required.
Cookies
We currently set one first-party cookie: NEXT_LOCALE. Cloudflare may set its short-lived __cf_bm cookie (Bot Management) for a brief period to protect against automated attacks. A full breakdown is provided in the dedicated cookie policy.
Retention
When you open a page, our web server records your IP address, browser identifier (user agent), the referring page, the address requested, the time and a Cloudflare request ID in log files. The files are rotated daily and deleted automatically after 15 days at most. We do not receive or keep Cloudflare's request logs. This data is not used to identify individual visitors and is not combined with other data sources. Aggregated analytics (when active) contain no personal identifiers.
Data stored in your browser (NEXT_LOCALE cookie, any localStorage entries) persists until you clear it through your browser settings.
Third parties
The site is delivered via Cloudflare (CDN and protection). External links and affiliate partners have their own privacy policies — once you click such a link, your data is governed by that service's rules.
We do not embed social plug-ins (Facebook Pixel, LinkedIn Insight, etc.) and do not share data with advertising networks.
The site is delivered through the network of Cloudflare, Inc. (USA). In doing so, Cloudflare processes the connection data each request needs, including your IP address. For delivery (CDN), security and bot protection, Cloudflare acts as our processor (Art. 28 GDPR) under its data processing addendum (Cloudflare Customer DPA). Transfers to the US rely on the EU-U.S. Data Privacy Framework, in which Cloudflare participates; where it does not apply, the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) apply.
Your rights
Under the GDPR (Arts. 15–22) and ZZPL (Arts. 26–43), as a visitor you have the following rights:
- The right to access data relating to you
- The right to rectification of inaccurate data
- The right to erasure (the right to be forgotten)
- The right to restrict processing
- The right to data portability
- The right to object to processing based on legitimate interest
Because we do not currently keep personal profiles about you on our server, most such requests reduce to questions about server logs or external partners. Send your request to [email protected] and we will respond within a reasonable time.
Supervisory authorities
Lead supervisory authority for the controller (Art. 56 GDPR): Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), Sofia (cpdp.bg)
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live or work or where the alleged infringement took place (Art. 77 GDPR), for example:
- Serbia — Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) poverenik.rs
- In Germany, these are the data protection supervisory authorities of the federal states; the authority of your state is usually the competent one.
- Austria — Datenschutzbehörde (dsb.gv.at) dsb.gv.at
- Switzerland — Federal Data Protection and Information Commissioner (edoeb.admin.ch) edoeb.admin.ch
Contact
For any privacy questions, write to [email protected]. We aim to respond within 7 business days.
Changes to this policy
We may update this policy occasionally to reflect legal or technical changes. The last-updated date is shown at the top of the page.