Last updated: 20 October 2026
1. Introduction
Unfinished is an independent music and artistic project created by Igor Stepanović.
This Privacy Policy explains how personal information is collected, used, stored and protected when you visit igorstepanovic.com, contact the artist, support the project or interact with its content.
The website is operated by Igor Stepanović, an individual based in the Republic of Serbia, who acts as the data controller.
For privacy-related enquiries, please contact [email protected].
2. Information We Collect
Depending on how you interact with the website, we may collect:
- Your name or chosen public credit.
- Your email address.
- Information you submit through contact forms.
- Details of financial contributions, including amounts, dates, payment references and applicable support benefits.
- Your preferences regarding project updates and public acknowledgement.
- Technical information relating to website visits, browser characteristics, device types and general usage patterns.
- Security-related information necessary to protect the website against abuse.
We do not intentionally collect sensitive personal information. Please avoid including unnecessary sensitive information in contact messages.
3. How We Use Your Information
We process personal information for the following purposes:
Communication: To respond to enquiries and messages submitted through the website.
Support administration: To identify and acknowledge contributions, administer applicable support benefits and maintain necessary records.
Certificates and acknowledgements: To prepare and deliver personalised thank-you messages and Certificates of Existence.
Project updates: To send occasional information about the album’s development, recording and release, but only when you have explicitly requested these updates.
Public credits: To acknowledge your support on the Fragments page if you have expressly chosen to be credited.
Website analytics: To understand website usage and improve the experience.
Security and reliability: To prevent abuse, maintain website availability and investigate technical problems.
Legal compliance: To meet applicable legal, accounting or regulatory obligations.
4. Legal Bases for Processing
Depending on the circumstances, we rely on one or more of the following legal bases:
- Consent, for optional album updates, optional public credits and non-essential analytics where consent is required.
- Performance of an agreement or steps requested before entering one, where processing is necessary to administer support arrangements and promised benefits.
- Legitimate interests, where applicable, for responding to communications, maintaining website security and improving the website without overriding your rights.
- Legal obligations, where records or disclosures are required by applicable law.
Where processing relies on consent, you may withdraw that consent at any time without affecting processing already lawfully carried out.
5. Financial Support and Payments
Unfinished accepts voluntary financial support through available payment methods, including PayPal and bank transfer.
Payment providers and financial institutions process information required to complete transactions under their own privacy policies.
We may receive information such as your name, contribution amount, transaction reference, payment status and other details necessary to identify or administer your contribution.
We do not collect or store full payment card details through this website.
Financial records may be retained where necessary for legal compliance, transaction verification, dispute resolution or administration of promised benefits.
6. Email Communications
Your email address may be used to send information directly related to your contribution, including payment-related correspondence, thank-you messages, Certificates of Existence and communications necessary to fulfil applicable support benefits.
These communications are separate from optional project updates.
You will receive non-essential album progress updates only if you select “Keep me updated on the album’s progress”.
You can withdraw this consent at any time by using an unsubscribe option, where provided, or contacting [email protected].
7. Public Acknowledgements
Supporters may choose to have their names displayed publicly on the Fragments page.
Public acknowledgement is optional and requires selecting “I’d like to be credited for my support” and providing a name for publication.
If you choose not to be credited, your name will not be intentionally published as a supporter.
You may request removal or correction of your public credit at any time by contacting us.
A public credit is an acknowledgement of support. It does not grant ownership of the project, its music, artwork or intellectual property.
8. Analytics and Cookies
The website uses or may use the following services:
Umami Analytics: A privacy-focused analytics platform used to understand general website activity. The intended deployment is self-hosted and configured without analytics cookies.
Google Analytics: A website analytics service provided by Google. Where consent is required, Google Analytics is activated only after you agree to optional analytics technologies.
Cloudflare: Infrastructure used for website security, performance and protection against malicious traffic. Cloudflare may process technical information and use strictly necessary security cookies depending on the features enabled.
For additional information, please see our Cookies Policy.
9. Hosting and Service Providers
The website uses third-party infrastructure and services for hosting, website protection, analytics, payments and email delivery.
These providers may process personal information only as relevant to the services they supply, subject to their applicable terms and data protection arrangements.
We do not sell your personal information to advertisers or data brokers.
10. International Data Transfers
Some service providers may process information outside Serbia, including in the European Economic Area or other jurisdictions.
Where international transfers are subject to applicable data protection requirements, appropriate legal safeguards must be used.
Further information about relevant providers and applicable safeguards may be requested through our contact email.
11. Data Retention
Personal information is retained only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal obligations.
In particular:
- Contact correspondence is retained while needed to handle the enquiry and any reasonable follow-up.
- Contribution and payment records are retained for applicable legal, financial and dispute-resolution purposes.
- Project update subscriptions are retained until you unsubscribe or the relevant purpose ends, subject to any necessary suppression records.
- Public credits remain visible until removed at your request or until the relevant feature is discontinued.
- Analytics and security data are retained according to the configured retention periods of the relevant services.
Information that is no longer required will be deleted or anonymised where reasonably possible.
12. Your Rights
Subject to applicable law, you may have the right to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request deletion of information where legally applicable.
- Withdraw consent.
- Object to certain processing activities.
- Request restriction of processing.
- Request data portability where applicable.
- Lodge a complaint with the relevant data protection supervisory authority.
In Serbia, the relevant authority is the Commissioner for Information of Public Importance and Personal Data Protection.
To exercise your rights, email [email protected].
We may request reasonable information to verify your identity before processing a request.
13. Data Security
We take reasonable technical and organisational measures to protect personal information, including secure communications, access controls and appropriate server and service configuration.
However, no internet-based system can guarantee absolute security.
14. Children’s Privacy
The website is intended for a general audience interested in music and artistic work. It is not specifically directed towards children, and we do not knowingly seek to collect personal information from children without an appropriate lawful basis.
If you believe a child has provided personal information inappropriately, please contact us.
15. Changes to This Policy
This policy may be updated to reflect changes in website functionality, service providers or legal requirements.
The latest version will be published on this page with its effective date.
16. Contact
Igor Stepanović
Independent artist and website operator
Republic of Serbia
[email protected]