Privacy and data
26.10.2026.
Service provider
- Service provider
- Društvo sa ograničenom odgovornošću za proizvodnju, trgovinu i usluge "Divan Studio" Brčko distrikt BiH
- Registered office and address
- Matije Gupca 17, 76100 Brčko, Brčko distrikt BiH
- Business tax ID (JIB)
- 4600575240005
- Company registration
- MBS: 96-01-0024-25
- Contact and complaints
- d.mrkaljevic@divan-studio.com
Who processes your data
DIVAN Studio operates the DIVAN library at divan.studio and divan-studio.com and its companion app. Use the contact below for questions about your data and to exercise your rights.
Account information
Registration uses your first name, last name, email and country. Passwords are stored as secure hashes. Gender is processed with separate consent and can be removed in your profile. Your profile may include a photo and biography you choose to add.
Library activity
We store favourite and completed books, reading and listening position, recorded listening time and badges. We process problem reports, Premium access records and, for authors, submitted manuscripts, contractual permissions and statistics for their works. Technical and security data, such as network address and device type, support the service and protect sign-in.
Services and permissions
Cloudflare provides hosting, database and file storage; Resend handles email. If you choose Google or Facebook, that provider processes sign-in and supplies account information under its own terms. Photos are accessed when you select a profile picture. The player uses background playback and system media controls.
Retention and your rights
Account and progress data are retained while you use your account or until you request deletion. You can request access, correction, a copy and deletion. Necessary transaction, contractual and security records may be retained for legal obligations or disputes, with limited purpose and access. Contact us about specific records and retention periods.
Optional analytics
DIVAN uses Google Analytics 4 with advanced consent mode. On public pages, Google may receive limited cookieless signals even if you do not accept analytics: visit, time, browser, sanitized referrer and consent-status information. These signals are not necessarily fully anonymous. Analytics cookies and fuller measurement are enabled only with your explicit consent. We do not intentionally send email addresses, account identity, private URL parameters or book contents to Google Analytics. Declining does not limit reading, listening or sign-in. You can change or withdraw your choice in Analytics settings on this privacy page or through the Terms and usage rights link in the footer; we attempt to clear analytics cookies after withdrawal. Google may process data outside Bosnia and Herzegovina and the EEA: https://policies.google.com/privacy.
Purposes and legal bases
We process data necessary for accounts, library access, progress and support to provide the contracted service. Security checks, abuse prevention and limited statistics support security and service improvement on the basis of legitimate interests, with due regard to your rights. Gender information is your choice and requires separate consent, which can be withdrawn in your profile. We retain accounting and other mandatory records where required by law. Marketing consent is not a registration requirement.
Google or Facebook sign-in
These sign-in methods are your choice. We receive an account identifier, available name and email address, and validate relevant address-ownership claims for Google. We do not request access to your inbox, posts or friends list. Facebook sign-in does not itself mark an email as confirmed; we send a separate confirmation link where needed. Each provider also processes sign-in under its own privacy rules.
Device settings and processing locations
Cookies and local storage remember sign-in, language, appearance and reading settings and support continuity. Clearing local data may sign you out and remove local settings. Cloudflare and Resend may process data outside your country; applicable provider terms and laws govern that processing. Contact us for details of specific locations, recipients and safeguards.
Data control and complaints
You can request access, correction, deletion, restriction, portability where applicable and object to processing based on legitimate interests. Withdrawing consent does not affect prior lawful processing. We may verify account ownership before acting and respond within statutory deadlines. You may complain to the Personal Data Protection Agency in Bosnia and Herzegovina (azlp.ba), or another competent authority under applicable rules.