Effective Date: December 13, 2025

Last Updated: January 17, 2026

13 Media ("we", "us", "our", data controller) operates www.13.media. We comply with Serbia's Law on Personal Data Protection (Official Gazette RS 87/2018) and, where applicable, EU GDPR (e.g., for EU visitors).

Data Controller

13 Media, email: contact@13.media

1. Data We Collect

  • Registration/Comments — email, username, password (hashed), comments text, timestamp, IP address.
  • Automatically — IP address, browser/device info, OS, referring URL, pages viewed, time/date, approximate location (from IP), analytics/cookies data.
  • No payment data (no payments accepted).
  • No sensitive data beyond age confirmation.

2. How We Collect

Server logs, cookies (essential for age gate/functionality; analytics cookies for usage stats), registration forms, and comment submissions.

3. Purposes

  • Provide/register accounts, enable/moderate comments.
  • Enforce age verification, comply with laws (prevent minor access, report illegal content).
  • Site operation, security, and fraud prevention.
  • Analytics (improve Site, understand usage — anonymized where possible).

4. Legal Basis

  • Contract (for registration/comments).
  • Legitimate interests (analytics, security, moderation — balanced against your rights).
  • Legal obligations (age compliance, illegal content reporting).
  • Consent (non-essential cookies/analytics, if used).

5. Sharing

No selling data. Share with:

  • Hosting/analytics providers (under contracts).
  • Authorities, if legally required.

6. Cookies and Analytics

Essential cookies for functionality. Analytics cookies track usage (e.g., views, sessions). Manage via browser or consent tools.

7. International Transfers

Data may go outside Serbia (e.g., EU/USA hosting). Safeguards used (e.g., adequacy decisions or SCCs).

8. Retention

As needed: account data until deletion request; logs ~30-90 days; comments until removed/moderated.

9. Your Rights

Access, rectification, erasure, restriction, objection, portability (Serbian law/GDPR where applicable). Contact us to exercise. Respond within 1 month.

10. Security

Reasonable measures (HTTPS, access controls). No absolute guarantee.

11. Children's Privacy

Not for under 18. Delete any known child data immediately.

12. Changes

Updates posted here.

13. Supervisory Authority

Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs).