Privacy Policy

Who is responsible

The data controller is KAD Digital, Obrt za digitalni marketing i ostalo, owned by Karla Eisenkohl, Vodnikova ulica 17, 10000 Zagreb, Croatia (OIB: 30728756660; MBO: 99344688).

For privacy questions or requests, email website+privacy@kaddigital.hr.

Contact inquiries

When you use the inquiry form, KAD Digital receives your first name, last name, email address, optional phone number, subject, message, and selected site language. This information is used only to review and respond to your inquiry.

Processing is necessary to take steps at your request before entering into a contract, where applicable. Otherwise, it is based on KAD Digital's legitimate interest in receiving and responding to business inquiries.

The submission passes through a Cloudflare Worker and a secured Google Apps Script to the KAD Digital Google Workspace mailbox. The site does not keep submissions in its own database. Inquiry emails are retained for no longer than 24 months, unless they are part of an active business relationship or must be kept to meet a legal obligation or establish, exercise, or defend legal claims.

Cloudflare Turnstile

The inquiry form uses Cloudflare Turnstile to distinguish people from bots and protect the site from abuse. Turnstile may process signals including your IP address, TLS fingerprint, user-agent header, site key, and the associated origin.

Cloudflare processes these signals on KAD Digital's behalf to protect this site, and separately acts as a controller when improving Turnstile's bot-detection capabilities. Security processing for this site is based on KAD Digital's legitimate interest in preventing spam and malicious activity. Learn more in Cloudflare's Turnstile Privacy Addendum.

Analytics and local preferences

On the production site, Google Analytics runs only if you consent. It sets _ga and _ga_* cookies for traffic and contact-form conversion measurement for up to 6 months. Advertising and personalisation signals are disabled. You can refuse or withdraw consent at any time through Cookie Settings; withdrawing consent removes the analytics cookies that this site can access.

The site stores your language and theme choices locally until you change or delete them. Your cookie consent choice is also stored locally for up to 6 months. These local preferences are necessary to remember the settings you request.

Service providers and international processing

Cloudflare provides site security and form processing infrastructure. Google provides Apps Script, Google Workspace email delivery, and consent-based analytics. These providers may process data outside Croatia or the European Economic Area under their applicable data protection terms and transfer safeguards.

Your GDPR rights

Subject to the conditions in the General Data Protection Regulation (GDPR), you may request access to, correction or deletion of your personal data, or restriction of its processing. You may object to processing based on legitimate interests and request data portability where applicable. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Send a request to the privacy email above. You may also lodge a complaint with the Croatian Personal Data Protection Agency, AZOP, or another competent supervisory authority.