Privacy Policy

Who is responsible for your data

The controller of your personal data is Miloš Mazinjanin PR Agencija za konsalting ARAGONIT DIGITAL Sombor, Slaviše Vajnera Čiče 3, 25101 Sombor, Serbia, registration number 67789580, tax ID 114704402. We work under the name Aragonit Digital. All details are on the Company info page.

For anything about your data, write to info@aragonitdigital.com or call +381 69 424 54 23.

We follow the Serbian Law on Personal Data Protection (Službeni glasnik RS 87/2018). For visitors in the European Union we also follow the EU General Data Protection Regulation (GDPR).

What we collect and why

Here is everything the site collects, grouped by what you do on it.

When you open any page

Server. Like every website, our server receives what your browser sends with each request: your IP address, the date and time, the address of the page, the page you came from, and the type of browser and device. Our hosting provider records this in server logs. We use this only to deliver the site, find errors and protect it from attacks. Legal basis: our legitimate interest in a working and safe site.

Fonts. Our pages load fonts from Google Fonts, so your browser connects to Google, and Google receives your IP address, the address of our site and your browser type. Google says it sets no cookies for this and does not use the data for ads. Legal basis: our legitimate interest in the site looking the same on every device.

Language and cookie choice. These are kept only in your browser and we do not receive them. See the Cookie Policy.

Analytics, only if you allow it

If you choose analytics in the cookie bar, we use Google Analytics 4. It records the pages you open (address and title), the page you came from, your approximate location (country and city, which Google estimates from your IP address), your device, browser, screen and language, and what you do on the site: how far you scroll, which parts of a page you see, which questions you open, which buttons, links, menus and tabs you click, which tool you use, when you copy something or download a file (only the file type), how fast the page loads and technical errors.

Events from the tools contain the name of the tool and which buttons you used, never the text, numbers or files you enter, and never your email address. The only place your input can appear is the page address: when you open the QR code generator from the UTM Builder, the link you built is part of that address.

Google Analytics shows us statistics and a random ID for your browser, not your name. We use it to see which pages and tools help people and what to improve. Legal basis: your consent.

Marketing, only if you allow it

If you choose marketing, the site also loads the Google Ads tag, the Meta Pixel and the TikTok Pixel. They tell these companies that your browser visited our site, which pages and tools it used, and when someone clicked our email address, phone number or WhatsApp link, or signed up for our monthly email. We use this to measure our ads and to show ads to people who have visited the site.

Google, Meta and TikTok can connect this with what they already know about you, for example when you are logged in to their services, and use it for their own purposes under their own privacy policies (see who receives your data). For visitors in the EU, Meta (Meta Platforms Ireland Limited) and TikTok (TikTok Technology Limited and TikTok Information Technologies UK Limited) are jointly responsible with us for collecting this data on our site and sending it to them, and TikTok also for measuring our ads. After that, they alone are responsible for what they do with it, and you can use your rights directly with them (Meta's privacy policy, TikTok's privacy policy for the EEA).

We have not set up these tools to receive your email address, your phone number or anything you type into our tools. Legal basis: your consent.

Meta also gets the same events from our server, through the Meta Conversions API, and only if you allow marketing. Our server sends Meta the name and ID of the event, the time, the address of the page without the part after the question mark, your IP address and browser type, and the two Meta cookies described in the Cookie Policy (_fbp and _fbc). Both copies of an event have the same ID, so Meta counts it only once. We do this so that our ad measurement still works when the pixel does not load, for example because of a browser setting. Our server does not keep these events. Legal basis: your consent.

If you allow analytics but not marketing, the same Google tag also sends Google Ads basic signals without cookies. In that case, under Google's consent mode, no advertising cookies are written or read, ad click IDs are removed and Google Ads shortens your IP address. If you allow neither, nothing is loaded from Google, Meta or TikTok, apart from the fonts.

Monthly email

If you sign up, we receive your email address, the language of the page and the place where you signed up (for example the home page or a tool). Brevo first sends you an email with a confirmation link, and only after you click it are you added to the list.

We send at most one email a month, about what changed on Meta, Google and TikTok and about new tools. Brevo tells us whether each email was delivered and opened and which links were clicked, using a small invisible image and links that pass through Brevo. We use this only to see which topics are useful.

You can unsubscribe with one click in any of these emails, or by writing to us. After that we keep your address only on a list of addresses we do not email, so that nothing reaches you by mistake, unless you ask us to delete it completely. Legal basis: your consent.

Tool result by email

In five tools (ad budget, break even ROAS, lead value, readiness quiz and checklists) you can ask for your result by email. We then send your email address, the name of the tool and the result the tool put together (field names, your numbers and the results) to Brevo, which sends you the email.

We use the address only for that one email. You get the monthly email only if you also tick that box. We do not keep a copy of the result on our server. Brevo keeps a record that the email was sent and whether it was delivered, opened or clicked. We have set Brevo to delete this record after one month. Legal basis: your request, because we send what you asked for.

Tools that connect to other services

Most tools work only in your browser. Images and files you choose are processed on your device and are not uploaded anywhere. These three are the exception, and only when you use them:

• Email deliverability check (and the quick check on the home page): your browser asks Google Public DNS (dns.google) for the public DNS records of the domain you enter, so Google receives that domain and your IP address. Google says it deletes the logs that contain IP addresses within 24 to 48 hours, unless it needs them against abuse (Google Public DNS privacy). Nothing goes to us.
• Tracking Checker: when you check an address, your browser sends it to our server, which opens that public page and returns its code to your browser for the analysis. We do not save the addresses you check or the results. If you paste code instead, nothing is sent.
• NBS IPS QR code: only if you click the button that sends the code to NBS for a check, the text of your QR code (account, names and addresses of the payee and the payer, amount, payment code, purpose and reference number) goes from your browser to the validation service of the National Bank of Serbia. NBS handles it under its own rules. Without that click, the tool works only in your browser.

Protection against abuse

To stop bots and abuse of the email forms, the Tracking Checker and the events our server passes to Meta, our server counts requests. For that it keeps a short code calculated from your IP address and, for the email forms, from the email address, never the addresses themselves. These codes expire after 2 minutes to 24 hours, depending on the form, and are then deleted. Legal basis: our legitimate interest in protecting the site and the people who use it.

When you contact us

When you write to us by email or on WhatsApp, or call us, we use your name, your contact details and what you tell us to answer you and, if we agree to work together, to prepare an offer. WhatsApp messages go through WhatsApp, under its own rules. Legal basis: steps you asked for before a possible contract, and our legitimate interest in answering messages.

Links to social networks

Links to Instagram, Facebook, LinkedIn and other sites are plain links. Nothing is sent to these networks until you click, and after that their own rules apply.

Legal bases

We process personal data only on one of these legal bases, from Article 12 of the Serbian Law on Personal Data Protection and Article 6 of the GDPR:

• Consent: analytics, marketing cookies and the monthly email. You can withdraw it at any time, and that does not change what was done before.
• Your request or a contract: sending a tool result you asked for, answering your inquiry and preparing an offer.
• Legitimate interest: running and protecting the site, server logs, protection against abuse, fonts, and keeping your address on the do not email list after you unsubscribe. You can object to this at any time.
• Legal obligation: keeping business records when you become a client.

Who receives your data

We do not sell or rent your data. We give it to state authorities only when the law requires it.

Data outside Serbia

Brevo keeps data on servers in the European Union (France and Belgium). EU countries are on the Serbian Government's list of countries that provide an adequate level of personal data protection.

Google, Meta, TikTok and WhatsApp may process data in the United States and other countries. For data from the EU, the European Commission decided in 2023 that US companies taking part in the EU-US Data Privacy Framework provide an adequate level of protection (EU adequacy decisions). The Serbian list mentions the United States only under the earlier Privacy Shield framework, which no longer applies. These companies transfer data under their own terms (links in the table above). Apart from the fonts, they receive data only if you allow analytics or marketing, use a tool that needs them or write to us on WhatsApp.

How long we keep data

Your rights

You have the right to:

• know whether we process your data and get a copy of it;
• have wrong data corrected and incomplete data completed;
• have your data deleted;
• have processing restricted in some cases;
• get the data you gave us in a common machine readable format and pass it on to someone else;
• object to processing based on our legitimate interest, and object at any time to the use of your data for direct marketing;
• withdraw your consent at any time: with Cookie settings, with the unsubscribe link or by writing to us;
• not be subject to a decision based only on automated processing. We do not make such decisions.

To use a right, write to info@aragonitdigital.com. We answer without delay, within 30 days of receiving your request at the latest (for visitors in the EU, within one month). If a request is complex or there are many requests, this can be extended by another 60 days under Serbian law, or by two months under the GDPR, and we tell you why within the first deadline. We may ask you to confirm that the request really comes from you.

If you think we handle your data unlawfully, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), Bulevar kralja Aleksandra 15, 11120 Belgrade, office@poverenik.rs. If you live in the EU, you can also complain to the data protection authority in your country (list of authorities). We would be glad if you wrote to us first, so we can put it right.

Children

Our site is meant for business owners and marketers. If you are under 15, or in the EU under the age your country sets (between 13 and 16), please do not sign up for our emails or send us your data without a parent's consent.

Security

The site works over an encrypted connection (HTTPS). The keys for Brevo and other services are kept only on our server and never reach your browser. Only our team and the services listed above have access to the data.

Changes to this policy

When something changes, for example a new tool that sends data somewhere, we update this page and the date at the top.

Sources: Law on Personal Data Protection (Službeni glasnik RS 87/2018), Articles 12, 15, 16, 21, 23, 26 to 38, 64 and 82; Government decision on the list of countries with adequate protection (Službeni glasnik RS 55/2019); GDPR, Articles 6, 7, 8, 12, 13, 15 to 22 and 77; EU adequacy decisions; Google, how Google uses information from sites that use its services; Meta, Business Tools Terms and Controller Addendum; TikTok, Jurisdiction Specific Terms; Brevo privacy policy and data processing agreement; Google Public DNS privacy; Google Fonts FAQ; National Bank of Serbia, terms of use of the IPS QR generator and validator. Checked in October 2026.