Privacy Policy
Last updated: 4 September 2026
This policy explains what data ARCHKIRS processes through the public website, related public campaigns and the Eyeball Comics microsite hosted on archkirs.site, why it is processed, how long it is kept and what rights you have.
Data controller
The controller is IAN KIRS PR BANJA KOVILJAČA, Ive Lole Ribara 64, 15316 Banja Koviljača, Loznica, Serbia. Registration number 68433266, PIB 115550070. Email: contact@archkirs.site. Phone: +381 61 281 3815.
Data we process
The contact form processes your name, email, optional subject and message. These data are used to receive and answer your enquiry. The Eyeball Comics microsite uses the same contact-form mechanism for enquiries submitted directly from that page.
The Project Estimator temporarily stores unfinished answers in browser sessionStorage. Analytics events may include date/time, interface language, deployment environment, random calculation/PDF identifiers, broad project class, complexity tier, displayed price range, working-day range and broad review/deadline categories. The server may observe an IP address and approximate location derived by the hosting provider from that IP. If you submit the completed enquiry, your name, email, optional organisation/site/note, project answers, server-generated summary and estimate snapshot are stored in Supabase as a durable business enquiry record that may later be linked to a client or project.
For ARCHKIRS Open Project campaigns, data needed to apply the published rules are processed: the public Stage 1 comment and Instagram account/username, information needed to check eligibility, private Stage 2 answers and reference links from finalists, internal scoring records and participant communications. For the selected project, ARCHKIRS may also process materials, contact details and information needed to create and complete the agreed landing page.
Technical request data are processed for abuse prevention. Rate-limit identifiers are hashed before storage; the raw IP address is not stored in the rate-limit record.
Purposes and legal bases
Contact data, submitted Estimator data and Eyeball Comics contact-form enquiries are processed to respond to your request and, where applicable, to take steps at your request before entering into a contract.
Limited Estimator analytics are processed on the basis of legitimate interests in operating the tool reliably, distinguishing genuine use from tests and improving usability and estimate quality.
Open Project data are processed to run and document the open call, apply the published criteria, communicate with participants and resolve questions or complaints, on the basis of ARCHKIRS legitimate interests in operating a transparent campaign. Data of the selected participant may then be processed to take steps requested by that participant and provide the agreed free service.
Technical and rate-limit data are processed on the basis of legitimate interests in website security, abuse prevention and service availability.
Recipients and processors
The website, Eyeball Comics microsite and related campaigns use the following service providers:
- Vercel - hosting and Web Analytics. Public analytics are used without Google Analytics and without advertising profiles.
- Resend - delivery of ARCHKIRS and Eyeball Comics contact-form messages and Project Estimator enquiry emails to the ARCHKIRS business mailbox.
- Supabase - production database and server infrastructure for Estimator analytics, durable submitted Estimator enquiries and rate limiting. The production project is configured in the EU Stockholm region.
- Meta / Instagram - the platform where Open Project Stage 1 comments are published and through which DM communications with finalists and the selected participant may take place. Processing on Instagram is also governed by the applicable Meta/Instagram platform terms and privacy policy.
Cookies, sessionStorage and localStorage
The public website does not use Google Analytics, Meta Pixel or advertising cookies. The Project Estimator uses sessionStorage for unfinished answers and internal session markers. The light/dark theme preference is stored in localStorage under archkirs-theme. These values are not used for advertising or cross-site tracking.
Retention
Full IP addresses in Estimator analytics are removed after 30 days and the remaining analytics events are deleted after 24 months. Rate-limit data are retained only for short security windows. Contact messages, including Eyeball Comics contact-form messages, and submitted Estimator enquiries are kept while needed for the response, related business communication, any resulting client/project relationship and applicable legal record-keeping duties; continued retention is reviewed periodically.
Open Project data are kept only for as long as reasonably necessary to run and document the specific campaign, complete the selected project and resolve any questions or disputes, unless the law requires longer retention. Data of unsuccessful participants are not used for marketing messages merely because they participated in the campaign.
International processing
Vercel, Resend, Supabase and Meta/Instagram are international service providers. Data may be processed outside Serbia within their contracted and platform infrastructure. Where a transfer requires an additional legal mechanism, the applicable contractual and other safeguards available under the providers’ current agreements/DPA are used. ARCHKIRS does not claim that all data remain exclusively in Serbia at all times.
Your rights
Under the Serbian Personal Data Protection Act, where the conditions apply, you may request access, correction, deletion, restriction, data portability, or object to processing based on legitimate interests.
You may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia. Poverenik
Privacy contact
For privacy questions or rights requests: contact@archkirs.site or +381 61 281 3815. ARCHKIRS has not appointed a separate DPO; this is the controller’s privacy contact.