WEB This privacy policy explains what personal data Web majstor (we) collects through the webmajstor.rs website (the Website), why we process it, how long we keep it and what rights you have. We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of the RS, No. 87/2018; the LPDP) and, to the extent it applies, the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
1. Data controller
The controller is Web majstor, Belgrade, Serbia.
- Email: kontakt@webmajstor.rs
- Phone: +381 62 107 6297
2. What data we process
Contact form
When you fill in the questionnaire on the Contact page, we process the data you enter yourself: your name, email address, phone number, company name, line of business, the service you are interested in and your message.
Website cost calculator
If you request a quote from the calculator, we process your name, email address, an optional message and the options you selected in the calculator (together with the resulting price estimate).
User account for the free tools
When you register, we process your username, email address and password (stored only in hashed form). If you sign in with your Google account (“Sign in with Google”), Google shares only your name, email address and Google account identifier with us. For signed-in users, the account also stores how many generations you have used within the current daily limit.
Free tools
The tools (Image to PDF, Image Converter, Invoice Generator, Contract and NDA Generator, Privacy Policy Generator, QR Code Generator, Website Cost Calculator) run in your browser. The images, files and data you enter into documents are not sent to our server and we have no access to them. Unfinished drafts may be kept only in your browser's local storage.
To enforce daily usage limits, the server records only the number of generations, linked to a one-way hash (an encrypted fingerprint) of your IP address that is automatically deleted after 24 hours. The IP address itself is not stored.
Tool ratings
If you rate a tool, we store the rating, an optional comment and an optional email address (if you would like a reply), together with a hash of your IP address that prevents repeated voting. A 5-star rating may direct you to Google reviews, where Google's privacy rules apply.
Internal tool usage statistics
We keep aggregate counters on the server (for example, how many documents were generated in a day and how far visitors get in the questionnaire). These counters contain no personal data, use no cookies and do not allow anyone to be identified. They are necessary to maintain and develop the tools, so they cannot be switched off.
Analytics and advertising (only with your consent)
With your consent, we use Google Analytics 4 (to measure traffic) and Google Ads (to measure ad performance and show ads again to visitors). You give or refuse consent in the cookie banner and can change it at any time through the “Cookie settings” link at the bottom of every page.
The Website uses Google Consent Mode v2: until you give consent, Google tools do not set or read cookies and do not use advertising identifiers. Google receives only basic cookieless signals (for example, that a page has loaded), which it uses in aggregated, modelled form. See the Cookie Policy for details.
Technical server data
Like any web server, our hosting keeps technical access logs (IP address, time, requested page, browser type) for security and troubleshooting.
3. Purpose and legal basis of processing
- Replying to your enquiry and preparing a quote (contact form, calculator): steps taken at your request before entering into a contract, and our legitimate interest in replying (Art. 12(1)(2) and (6) LPDP; Art. 6(1)(b) and (f) GDPR).
- User account: performance of the agreement on the use of the tools (Art. 12(1)(2) LPDP; Art. 6(1)(b) GDPR).
- Tool limits, abuse prevention, security, internal statistics and ratings: our legitimate interest in keeping the Website and the free tools reliable and free from abuse (Art. 12(1)(6) LPDP; Art. 6(1)(f) GDPR).
- Analytics and marketing (Google Analytics 4, Google Ads): your consent (Art. 12(1)(1) LPDP; Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of earlier processing.
4. How long we keep data
- Enquiries from the contact form and the calculator: up to 24 months from our last contact, unless the law (for example, accounting rules when a deal is concluded) requires longer retention.
- User account: until you delete it or ask us to delete it.
- IP address hash for tool limits: 24 hours.
- Ratings and comments: for as long as they are relevant to improving the tools, and no longer than 24 months.
- Google Analytics 4: according to the data retention setting of the Google Analytics account; cookies according to the table in the Cookie Policy.
5. Who has access to the data
Only Web majstor has access to the data. We do not sell or rent data, and we do not share it with third parties for their marketing purposes. We use the following processors:
- Hosting and email: Web Hosting Srbija, on servers of Hetzner Online GmbH in Finland (EU).
- Google (Google Ireland Limited / Google LLC): Google Analytics 4 and Google Ads (only with your consent) and Sign in with Google (only if you choose to use it).
6. Transfers of data outside Serbia
Data on our hosting is stored in Finland, an EU member state that provides an adequate level of protection. Google may also process data in the United States; Google bases such transfers on standard contractual clauses and the EU-U.S. Data Privacy Framework.
7. Your rights
Under the LPDP and the GDPR, you have the right to:
- request access to the data we hold about you and a copy of it;
- request the correction of inaccurate data or the completion of incomplete data;
- request the deletion of your data;
- request the restriction of processing;
- receive your data in a structured, machine-readable format (data portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time (for cookies, through the “Cookie settings” link at the bottom of the page);
- lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of Serbia (poverenik.rs).
Send your requests to kontakt@webmajstor.rs. We reply without undue delay and within 30 days at the latest.
8. Security
All traffic between your device and the Website is encrypted (HTTPS/TLS). We store passwords and IP addresses only in hashed form, access to the administration is protected, and the content you process in the tools never leaves your device.
9. Cookies
The cookies we use and how to switch them on or off are described in the Cookie Policy.
10. Minors
The Website and the tools are not intended for persons under 15. We do not knowingly collect their data; if we learn that we have received it, we delete it.
11. Changes to this policy
We may change this policy when the Website, the tools or the regulations change. The current version is always published on this page with the date of the last update. See also our Terms of Use.
Last updated: 25 September 2026.