Privacy

This notice is about dotdash.hr — the site you are reading. It covers the contact form and the one cookie the site sets.

It does not cover the work we do for clients. When we build or run a system that handles someone else’s data, the contract for that project governs it, and there we act on the client’s instructions rather than our own.

Send an enquiry and we receive your name, your email address, your company if you name one, and what you wrote. It arrives as an email in our mailbox. There is no database behind the form and no CRM.

Two things travel with it that you did not type: the IP address the request came from, and the time it was sent. They are in the email so we can tell a real enquiry from a bot, and the address is held for ten minutes in the server’s memory to stop the same sender flooding the form.

We may hold it because you asked us to get in touch about possible work (GDPR Art. 6(1)(b)), and because we have a legitimate interest in answering enquiries and keeping the form usable (Art. 6(1)(f)).

We keep enquiries for 24 months after our last exchange, then delete them. If an enquiry turns into a project, that project’s own records take over.

None of it is compulsory. Without a name, an email address and a message the form cannot send — that is the whole requirement.

One cookie. It is called locale, it holds hr or en, it lasts a year, and it is written when you choose a language — by clicking the language switch, or by opening an older /en/… link, which says the same thing.

It exists because the language is no longer in the address. Every page here has one address in both languages, so this cookie is the only thing that tells the server which language to send you — on this visit and when you come back. That is the whole of it.

There is no consent banner because there is nothing here to consent to. The ePrivacy rules exempt storage that is strictly necessary for something you explicitly asked for, and a language preference you set by clicking a language switch is the textbook example. The cookie carries no identifier, belongs to no third party, and tells us nothing about you.

We are telling you it exists anyway, because being exempt from asking is not being exempt from saying. The day an analytics or advertising cookie appears on this site, that one will ask first.

No analytics. No tracking pixels, no advertising tags, no embedded social buttons, no session recording, no fingerprinting.

No third-party requests. The typefaces are served from this domain rather than from Google’s; the images and scripts are our own files. Opening a page here talks to one server.

No profiling and no automated decision-making. Nothing is sold, and nothing is shared for anyone’s marketing, including ours. There is no mailing list to be added to.

The site and the mailbox both run on shared hosting at plus.hr. The host is our processor: it can technically reach the data because it runs the machine, and it is bound to process it only on our instructions. Its servers keep the usual access logs a web server writes, which we look at only for faults and abuse.

Nobody else receives your data. No advertising network, no analytics provider, no email platform, no AI service. Enquiries are not forwarded anywhere.

Everything stays on servers inside the European Union. There are no transfers outside the European Economic Area.

Over the data we hold about you, you can ask for a copy, have it corrected, have it deleted, have its use restricted, object to it being used, and receive it in a portable form.

Ask by email. We answer within 30 days and we do not charge for it. We may ask you something that confirms you are the person the data is about — no more than that takes.

If you think we have handled your data badly, you can complain to the Croatian Personal Data Protection Agency (AZOP) at azop.hr. We would rather you told us first, but you are not required to.

If this notice changes, the date at the top changes with it. We keep no archive of earlier versions — ask, and we will tell you what it said.