LEGAL INFORMATION
Cookie & telemetry policy
This policy covers browser storage, security records and the optional external map. It complements the Privacy policy and describes what this website actually loads.
Company details
BALKANSKA KIBER KORPORACIJA DOO
- Registration number (MB)
- 22332864
- Registered office
- Jurija Gagarina 23111073 Novi Beograd, BelgradeSerbia
- office@bkk.rs
- Website
- www.bkk.rs
1. Your choice
We use necessary storage for functions you request. All optional map requests are blocked until you select “Allow external map”. “Reject optional” is available with equal prominence. Browsing, scrolling, closing the notice or sending the contact form is not consent. There are no preselected optional categories and no cookie wall.
This approach reflects Article 160 of Serbia’s Electronic Communications Law (Official Gazette RS 35/2023) and the prior-consent rule and strictly necessary exception in Article 5(3) of the EU ePrivacy Directive, as implemented in applicable national law. Where personal data is involved, Serbian data protection law and GDPR where applicable also govern processing.
2. First-party cookie inventory
These cookies use the current site’s domain and path /. They do not contain your message or contact details.
| Cookie | Purpose and trigger | Lifetime |
|---|---|---|
| PHPSESSID | Necessary contact-form session: CSRF protection, one-time status messages and restoring submitted fields after an error. Started on contact/form submission pages only. HttpOnly; Secure on HTTPS; SameSite=Lax. | Browser session. Server-side session expiry and cleanup are configured by the host. |
| bkk_lang | Necessary to carry an explicitly selected language across the site. It is not created merely because a language is inferred from your browser. HttpOnly; Secure on HTTPS; SameSite=Lax. | Browser session; legacy persistent language cookies are converted to session cookies. |
| bkk_privacy | Necessary record of your choice: policy version, allow/refuse map and time of choice. Set only when you choose. No unique visitor identifier. Secure on HTTPS; SameSite=Lax. | 180 days from the choice, then a new choice is needed. |
| bkk_cookie_consent (legacy) | The former acknowledgement is deleted and never treated as consent to the map. | Deleted when the new privacy controls run. |
3. Optional map and other external services
The optional office map uses locally hosted Leaflet code and OpenStreetMap image tiles from tile.openstreetmap.org. Requests send your IP address, requested tiles, time, browser information and this website’s origin to the OpenStreetMap Foundation and its delivery infrastructure. The referrer excludes the page path and query string. Images may enter your normal browser cache; the BKK integration itself does not create a tracking cookie. See OpenStreetMap Privacy Notice for the provider’s processing and retention.
Fonts, icons and phone-selector assets are served locally. We load no analytics pixels, advertising tags, session replay, fingerprinting tools or marketing SDKs, and use no localStorage or sessionStorage for tracking. The listed server security records are not behavioural analytics.
Links such as “Open in maps” navigate to another provider only when you choose to open them. That provider’s policies apply after navigation. The address and contact form remain usable without the embedded map or JavaScript.
4. Change or withdraw consent
Open Cookie settings from the footer of any page. Choose “Reject optional” to unload an active map and stop further map loading. Withdrawing is as easy as allowing it and does not affect earlier lawful processing. It cannot recall requests already received by the provider or clear that provider’s existing records.
Your choice applies to this browser on this site. Another device, browser, deletion of cookies or expiry may require a new choice. You may also block or delete cookies through browser settings; blocking the necessary session cookie can prevent the form from working. If a choice cannot be stored, it lasts only for the current page. With JavaScript disabled, the external map stays blocked.
5. Telemetry, retention and contact
For security, availability and fault diagnosis, the application records page and form requests on the server, including IP addresses, UTC timestamps, page paths without queries, browser information and request outcomes. Our hosting server sends the visitor’s public IP address over HTTPS to IPWhois (ipwho.is) to obtain approximate location and network information; it does not send the visitor’s user agent, website paths, form data or cookies. This creates no tracking cookies or persistent visitor identifiers and collects no clicks, scrolling or keystrokes through JavaScript. Logs use a rolling window of 30 UTC calendar days. Cleanup is triggered by subsequent website requests, at most hourly; without traffic, deletion waits for a later request. The 128 MiB aggregate storage limit may shorten retention. Successful lookups are cached for seven days with a maximum of 1,000 entries, subject to the same traffic-dependent cleanup. Hosting and email infrastructure may also process technical access and error information. The application separately uses a 15-minute hashed-IP rate limiter and minimal mail-failure diagnostics. The full data categories, recipient information and retention arrangements appear in Privacy policy. These records may be personal data; they are not anonymous or marketing analytics.
Questions about cookies or privacy can be sent to office@bkk.rs. If we introduce another optional purpose or provider, we will update this inventory and request the necessary fresh consent before enabling it.