What this site knows about you
Short answer
Almost nothing. No analytics, no advertising cookies, and nothing that follows you between sites. The site is served by Cloudflare, as every site is served by some host, and they process technical data about the visit for security. The contact page sets one technical cookie, which lasts four hours.
The reason for this is concrete. Under the General Data Protection Regulation, the fact that someone is looking for psychotherapy is special-category data — the same order of thing as a medical record. If this site carried analytics, an advertising tool or an embedded map, that company would see which page you had opened. So it carries none, and that is also why you will not find a cookie consent bar here: there is nothing to consent to.
What is collected and what is not
Not collected
- Analytics of any kind
- Cookies for tracking, advertising or profiling
- Anything loaded from another company's server
- Embedded maps, videos and widgets
- Social buttons and advertising tools
Collected
- What you type into the form
- A name, one contact, when it is safe to call, whether I may leave a message, how you would like to work, and a message if you write one. Nothing more — I do not ask for a date of birth and I do not ask what happened.
- One technical cookie
- Set on the contact page only. It records the moment you opened it and nothing else — that is how the form tells a person from a bot, so no check that would track you is needed. It lasts four hours.
- Standard server logs
- Cloudflare, Inc. serves this site and receives your IP address, device type and the address requested, in order to deliver the page and defend against attacks. Logs are kept briefly. I do not access them and do not connect them to anything.
Where your message goes
Your message comes to me and is not passed to anyone else. This site does not track you.
Your message is deleted no later than 12 months after our last contact. If you become a client, clinical records are kept separately from this site, under professional rules and the law, and you will be told about that separately.
Sending the form is not the start of therapy and does not create a therapeutic relationship.
The formal part
- Data controller
- Merima Pašalić, Ferhadija 00, 71000 Sarajevo
- Data protection contact
- kontakt@merimapasalic.com
- Legal basis
- The Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette 12/25), and for visitors in the EU also Article 6(1)(b) and 9(2)(h) GDPR — steps taken at your request before entering a contract, and the provision of health care.
- Retention
- 12 months after last contact, for enquiries that do not become therapy.
- Transfers outside the EU
- Cloudflare serves the site from a global network, so data may be processed outside the EU under standard contractual clauses. The contents of your message are not passed to any company beyond that processing.
Your rights
What you can ask for
You can ask for a copy of what I hold about you, for a correction, for deletion, for processing to be restricted, or you can object to processing. You do not have to give a reason.
Write to kontakt@merimapasalic.com and I reply within thirty days. If you are not satisfied with the answer you can contact the Personal Data Protection Agency in Bosnia and Herzegovina, and if you live in the EU, your own national supervisory authority.
Last changed: 2026-08-05. If any of the above changes, this page changes with it.