Privacy & Cookie Policy

Last updated: 8 December 2025

1. Who we are

This Privacy & Cookie Policy explains how we collect, use, and protect personal data when you visit bayadzhan.com (the “Website”) or interact with us.

The data controller is:

ANDREY BAYADZHAN PR BEOGRAD (PALILULA)
VIŠNjIČKA 30, 11060 Beograd (Palilula), Serbia
Email: contact@bayadzhan.com

This Policy is intended to comply with applicable data protection laws, including the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), and comparable legislation in other jurisdictions where our clients are based (including the US, Hong Kong, Singapore, and the United Arab Emirates).

2. What data we collect

2.1. Information you provide directly

  • Contact by email: when you email us at contact@bayadzhan.com, we receive your email address, the content of your message, and any other information you choose to include.
  • Scheduling a call via Calendly: when you use our scheduling page (schedule-a-call.html), you are interacting with Calendly, which collects contact details, availability information, and other data you choose to share through its form. We receive the details necessary to schedule and prepare the call (for example your name, email address, and meeting notes).
  • Client communications and documents: if you become a client, we may process additional personal data needed to perform advisory work (for example contact details of your team, billing information, and project-related information). These processing activities are governed primarily by our engagement terms rather than this Website Policy.

2.2. Information collected automatically

When you visit the Website, certain technical data are collected automatically:

  • Server logs: standard web server logs (e.g. IP address, browser type, operating system, referral URL, date and time of access, and pages visited) for security, debugging, and operational purposes.
  • Cookie-free analytics: we use privacy-focused, cookie-free analytics services (LiteAnalytics and Cloudflare Web Analytics) to understand aggregated traffic patterns without using tracking cookies or cross-site identifiers. These services process limited technical data such as page URLs, browser information, and approximate location based on IP address.
  • Optional analytics and Session Replay: with your consent, we use Google Analytics and Amplitude, including Amplitude Session Replay, to better understand how visitors use our Website (see Section 4).

3. How we use personal data

We process personal data for the following purposes and under the following legal bases:

  • Operating the Website and ensuring security (server logs, basic technical data): our legitimate interest in maintaining and improving a secure, stable Website.
  • Responding to inquiries and scheduling calls (email correspondence, Calendly bookings): performance of a contract or pre-contractual measures at your request, and our legitimate interest in managing our advisory practice.
  • Providing advisory services (client communications, project documents): performance of a contract (engagement with clients and partners) and compliance with legal obligations (e.g. accounting rules).
  • Cookie-free analytics via LiteAnalytics and Cloudflare Web Analytics: our legitimate interest in understanding aggregated traffic. These tools operate without using tracking cookies or building cross-site profiles.
  • Optional analytics and Session Replay via Google Analytics and Amplitude: your consent through our cookie banner.
  • Legal compliance and protection of rights: complying with legal obligations, responding to lawful requests from authorities, and protecting our rights and the rights of others.

4. Cookies, consent and similar technologies

4.1. Consent manager (Silktide)

We use the Silktide Consent Manager to display a cookie banner and manage preferences. When you first visit the Website, you can accept or reject non-essential categories of cookies and similar technologies. Your choices are stored in your browser’s localStorage (keys such as silktideCookieChoice_analytics) and can be changed at any time via the cookie icon displayed on the page. The consent manager itself does not use tracking cookies and is designed to be privacy-friendly.

4.2. Cookie categories used on this Website

In the banner and preferences panel, you will see the following categories:

  • Necessary (required): essential functionality and security of the Website, including hosting, basic security, and cookie-less analytics (LiteAnalytics, Cloudflare Web Analytics). These services do not set tracking cookies or build cross-site profiles, but they do process limited technical data to provide aggregated statistics. This category cannot be disabled because the Website would not function correctly without it.
  • Functional (Calendly scheduling): enables the embedded Calendly scheduling widget on the “Schedule a call” page. Calendly uses cookies and similar technologies to provide the booking service and may transfer data outside your country of residence (for example to the US). You can still contact us by email if you prefer not to enable this category.
  • Analytics (Google Analytics, Amplitude & Session Replay): with your consent, we use:
    • Google Analytics to understand how visitors use our Website. Google Analytics uses cookies and other identifiers and may transfer data to the US.
    • Amplitude Analytics and Amplitude Session Replay to understand product usage and user journeys. After initialization, the Amplitude Browser SDK may set cookies and use local storage to track visits and sessions. Session Replay can capture a visual representation of your interaction with the site, subject to masking settings configured in our Amplitude account.
    These tools are activated only if you consent to the “Analytics” category in the cookie banner.

4.3. Changing your preferences

You can change your cookie and consent preferences at any time by clicking the cookie icon (usually displayed in the bottom corner of the screen). Your previous choices will then be updated and respected for future visits, until you delete your browser data or update your preferences again.

5. Third-party services we use

We use the following key third-party services:

  • LiteAnalytics – privacy-based, cookie-free analytics hosted in the EU, used to measure aggregated traffic without cookies.
  • Cloudflare Web Analytics – privacy-first, cookie-free analytics provided by Cloudflare; does not use cookies or localStorage for analytics purposes. Cloudflare may use separate cookies for security on its own services.
  • Google Analytics – analytics service from Google; cookies and other identifiers are used to generate statistics and may involve transfers of data to the US.
  • Amplitude (including Session Replay) – analytics and session replay tools that use first-party cookies and local storage to track visits, sessions, and events.
  • Calendly – online scheduling service; collects contact data and uses cookies when you interact with the embedded booking widget.

Each provider processes data under its own privacy policy and (where relevant) data processing agreement. Where legally required, we enter into appropriate data processing and international transfer agreements (for example Standard Contractual Clauses).

6. International data transfers

Our advisory practice works with clients and partners across Europe, Switzerland, the United Kingdom, the United States, Hong Kong, Singapore, and the United Arab Emirates. Some service providers (for example Google, Amplitude, Calendly, Cloudflare) may process data on servers located outside your country, including in the United States.

Where required by applicable law, we rely on an appropriate legal mechanism for international data transfers (such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or other equivalent safeguards) and assess whether additional technical and organizational measures are necessary.

7. Data retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Retention periods depend on the context, for example:

  • Website logs: typically kept for a limited period (for example up to 12 months) for security and troubleshooting, unless a longer retention is required in connection with incidents.
  • Analytics data: retained according to the settings offered by each provider (for example, configurable retention periods in Google Analytics and Amplitude).
  • Client and project files: retained for the duration of the engagement and for any additional statutory limitation or record-keeping period (for example accounting retention requirements).

8. Your rights

Depending on your location and applicable law (for example if you are in the EU/EEA, UK, or Switzerland), you may have the following rights in relation to your personal data:

  • Right of access (to know whether we process your data and obtain a copy).
  • Right to rectification (to correct inaccurate or incomplete data).
  • Right to erasure (“right to be forgotten”), subject to legal exceptions.
  • Right to restriction of processing in certain cases.
  • Right to data portability (to receive your data in a structured, commonly used format).
  • Right to object to processing based on our legitimate interests, including profiling.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

If you are in jurisdictions such as certain US states (for example California) that provide additional statutory privacy rights, you may also have further rights under those laws. We do not sell or share personal information as those terms are generally defined in US state privacy laws, but you can contact us if you have questions or requests.

To exercise your rights, please contact us at contact@bayadzhan.com. We may request additional information to verify your identity where necessary.

You also have the right to lodge a complaint with your local data protection authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection.

9. Children

Our Website and services are intended for professional and institutional audiences and are not directed at children. We do not knowingly collect personal data from children under the age required by applicable law. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our services, legal requirements, or technology. The “Last updated” date at the top of this page indicates the most recent revision. We encourage you to review this Policy periodically. If you have any questions about this Policy or our data practices, you can contact us at contact@bayadzhan.com.