Privacy & Cookie Policy

1. Who we are

This Privacy & Cookie Policy applies to the website and services operated by digitaldesignlab4u, located at Miroslava Feldmana 4, 10090 Zagreb, Croatia, European Union.

We are the data controller for personal data collected through this website and contact channels. For any privacy-related enquiries, contact us at digitaldesignlab4u@gmail.com.

2. What data we collect and why

Data you provide voluntarily. We collect personal data only when you choose to contact us directly, such as:

• Your name or organisation name (if provided)
• Your email address
• The content of your message
• The type of enquiry you select
• Any additional information you choose to share

This data is used solely to respond to your enquiry or to prepare a collaboration proposal. It is not used for automated profiling or marketing.

Automatically collected technical data. Our website is hosted on a static hosting provider which may collect limited technical data necessary for website operation and security, such as:

• Browser type and version
• Device type
• Basic usage statistics (page views, session duration)
• IP address (retained by the hosting provider for security purposes)

This data is aggregated and anonymised where possible. We do not use Google Analytics or any other third-party analytics or tracking tools on this website.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR (Regulation (EU) 2016/679):

• Legitimate interest (Art. 6(1)(f)) — responding to enquiries you initiate, security of the website
• Performance of a contract (Art. 6(1)(b)) — where we are preparing or performing a collaboration or licensing agreement
• Compliance with legal obligations (Art. 6(1)(c)) — where applicable under Croatian or EU law

4. How long we retain your data

We retain contact enquiry data for as long as necessary to respond to and process your request, and for a maximum of 3 years thereafter unless a contractual relationship requires longer retention.

You may request deletion of your data at any time by contacting digitaldesignlab4u@gmail.com.

5. Who we share data with

We may share data only with:

• Website hosting provider — for technical operation and security of the site (data processed in accordance with their data processing agreement)
• Form processing service — if you submit a contact form, your submission is processed by Formspree Inc. (USA), which provides GDPR-compliant processing under Standard Contractual Clauses

We do not sell, rent, or share your personal data with any third parties for marketing, profiling, or any purpose other than those described above.

6. International transfers

Our contact form uses Formspree (USA). Data transferred to the USA is covered by Standard Contractual Clauses (SCCs) as approved by the European Commission. No other international transfers of personal data occur.

7. Your rights under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data in certain circumstances
• Right to restriction of processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at digitaldesignlab4u@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Croatian data protection authority:

8. Cookies

This website currently uses only strictly necessary cookies required for website functionality (session management, security). We do not use analytics cookies, marketing cookies, tracking pixels, or any third-party advertising cookies.

Strictly necessary cookies do not require your consent under the ePrivacy Directive (Directive 2002/58/EC) and GDPR. No cookie consent banner is therefore displayed.

If we introduce any non-essential cookies in the future, this policy will be updated and a consent mechanism will be implemented before any such cookies are placed.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website is served over HTTPS (TLS encryption).

10. Children's data

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us immediately and we will delete it.

11. Changes to this policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions, requests, or complaints regarding this policy or our data processing practices: