Last updated: 8 September 2026. This policy describes the current pre-launch version of Serbia Unpacked. It covers ordinary browsing, correspondence and the technical operation of the website.
Who is responsible for your data?
DYEZ, 1 rue de Belle Île, 35340 La Bouëxière, France (SIREN 808 487 607), is the controller for the personal data described here. Contact [email protected] for privacy questions or requests. Further company information appears in our legal notice.
Information processed and why
- When you browse, the hosting and security systems process technical connection data, such as your IP address, requested URL, date and time, response status, browser information and referring page. This supports delivery, availability, troubleshooting and protection against abuse. The legal basis is our legitimate interest in operating and protecting the website.
- If you email us, we receive your email address, the contents of your message and any information you choose to include. We use this to respond, investigate a correction or handle your request, based on our legitimate interest in managing correspondence. Where a message concerns a data-protection right, processing also supports our legal obligations.
- Access to the editorial administration requires authentication. Account details, login cookies and security records support authorised access and protect the publishing system. Public account registration and comments are disabled.
You do not need to provide your name or email address simply to read the website. An email address and enough information to understand your request are needed if you ask us to reply. Avoid sending sensitive documents that are not relevant to your request.
Cookies, analytics and embedded content
The site runs no advertising pixels, no affiliate tracking scripts and no third-party media embeds. Fonts and images are served from our own website. It does use one audience-measurement tool, Google Analytics 4, and only if you agree to it.
Strictly necessary cookies may be used for editorial login or by Cloudflare when a security check is required. They serve authentication and security purposes. You can control cookies in your browser; blocking necessary cookies can prevent a security check or login from working. See Cloudflare’s cookie documentation for its security cookies.
Google Analytics counts visits and shows us which pages are read. It is not loaded when a page opens: no measurement script is fetched, and no analytics cookie is written, until you press Agree in the banner. If you agree, Google Analytics sets its own cookies in your browser, named _ga and _ga_ followed by our property identifier, which Google documents as lasting up to two years, and it sends your IP address, the pages you open and technical details of your browser to Google. The legal basis is your consent, under article 6.1.a of the GDPR and article 82 of the French Data Protection Act.
If you press No thanks, nothing is loaded and nothing is measured. Either way we store one small cookie of our own, unpacked_consent, which records your answer for six months so we stop asking; it is required to respect your choice and is not used for anything else. You can change your mind at any time through the Cookie choices button at the bottom of every page, and refusing is one click, exactly like agreeing. Following a link to another website takes you to that provider’s separate privacy practices.
Who receives the information?
Information may be accessed by authorised DYEZ personnel and technical providers as needed for their services: OVHcloud for hosting infrastructure, SYAZEN for technical administration, Cloudflare for delivery and security, and Google for the contact email service and, where you have agreed to it, for audience measurement. Information may also be disclosed where an applicable legal obligation requires it.
International processing
Cloudflare and Google operate internationally, so some processing may take place outside the European Economic Area, including in the United States. Their data-processing terms describe the safeguards available for these transfers, including European Commission standard contractual clauses where applicable. Details are available in the Cloudflare data-processing terms and the Google Cloud Data Processing Addendum. Contact us to request information about safeguards applicable to your data.
How long is information retained?
Correspondence is kept for the time needed to deal with the request and any related follow-up. Relevant records may be kept longer where needed to meet an applicable legal obligation or establish, exercise or defend a legal claim. These needs, the completion of the request and any ongoing dispute determine the retention period.
Infrastructure logs record the technical connection data described above and are used for security and troubleshooting. We checked how long they are actually kept rather than stating an intention: no automatic deletion is applied to them today, so they accumulate. A rotation rule is being put in place with our infrastructure provider, and this paragraph will state the period once it is the period actually applied. Analytics data, where you have agreed to it, is held by Google under the retention setting of our measurement property and we keep no separate copy of it.
The website also has operational backups. The documented automated schedule retains seven daily and 26 weekly recovery points. This describes the backup rotation, not a general deletion deadline for all records or manually created backups.
Your rights
Depending on the processing and the applicable conditions, you may request access, correction, deletion or restriction of your personal data, object to processing based on legitimate interests, and request data portability where that right applies. Send your request to [email protected]. We may ask for proportionate information to verify your identity; we do not request identity documents by default.
We respond within one month. If a permitted extension is needed, we notify you within that first month and explain why. You may also complain to the French supervisory authority, the CNIL, or to your competent local supervisory authority.
The current website does not make automated decisions about readers that produce legal or similarly significant effects. Any material change to the processing described here will be reflected in an updated policy.