Privacy Policy
How we collect, process, and protect your personal data
Last updated: April 6, 2026
ANIM obrt za proizvode i usluge, owner Nikola Nikša, Stjepana Radića 93, 48350 Đurđevac, Croatia, personal identification number (OIB): [enter OIB] (hereinafter: "ANIM", "we", "us") is committed to protecting your privacy. This policy explains how we process your personal data in accordance with the GDPR (EU Regulation 2016/679) and the Croatian Act implementing the General Data Protection Regulation (NN 42/18).
Data controller
Company
ANIM obrt za proizvode i usluge
Owner: Nikola Nikša
Data we collect
Data you provide directly
- Contact form: name, email address, message, company name (optional), phone (optional)
- Service inquiry: name, email, selected package/service, additional message, company (optional), phone (optional)
Data collected automatically
- Technical data: IP address, browser and OS type, referrer URL, time of access
- Cookies: see our cookie policy for details
Legal basis and purposes
| Purpose | Legal basis | Retention |
|---|---|---|
| Responding to inquiries | Consent (Art. 6(1)(a)) / Pre-contractual measures (Art. 6(1)(b)) | End of communication + 1 year |
| Contract performance | Performance of a contract (Art. 6(1)(b)) | Duration of contract + 11 years |
| Abuse prevention | Legitimate interests (Art. 6(1)(f)) | Session duration |
| Website improvement | Legitimate interests (Art. 6(1)(f)) | Aggregated data |
| Legal obligations | Legal obligation (Art. 6(1)(c)) | 11 years |
Sharing with third parties
We share data only with:
- Google reCAPTCHA — spam protection (Google's privacy policy)
- Hosting provider — storage and delivery of the website (servers in the EU)
- Accounting service — legal obligations (business data only)
Transfers outside the EU/EEA
By using Google reCAPTCHA, some data may be transferred to the United States. Google LLC is certified under the EU-US Data Privacy Framework. We do not transfer data to third countries except through services that provide appropriate safeguards (Art. 46 GDPR).
Your rights
Right of access
Request a copy of your data
Right to rectification
Correct inaccurate data
Right to erasure
"Right to be forgotten"
Restriction of processing
Limit how we use your data
Data portability
Transfer data to another controller
Right to object
Object to processing
Right to lodge a complaint
If you believe processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Croatia:
Data security
Changes to this policy
We may update this policy from time to time. Changes will be published on this page with a new date. For material changes, we will notify you by email or a notice on the website.