Privacy policy
Last updated: 3 October 2026
1. Data controller
The controller of your personal data is Acta Digital, 33000 Virovitica, Croatia. For any data protection questions, email us at actadigital.hr@gmail.com.
2. What data we collect
We only collect the data you send us yourself through the enquiry form or by email:
- your name and email address and (optionally) company name and phone number,
- the content of your message, selected services and estimated budget.
This website does not use tracking cookies, advertising pixels or visitor profiling tools.
3. Purpose and legal basis
We use your data solely to respond to your enquiry and prepare a quote. The legal basis is your consent (Art. 6(1)(a) GDPR) and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
4. Abuse protection
The enquiry form is protected by Cloudflare Turnstile, which checks whether the sender is human without using tracking cookies. Technical data (such as IP address and browser information) is processed for security purposes only, based on legitimate interest (Art. 6(1)(f) GDPR).
5. Recipients
We never sell your data or share it for marketing. To run the website and deliver email we use trusted providers (hosting: Vercel Inc.; form abuse protection: Cloudflare, Inc.; email delivery: Resend (Plus Five Five, Inc.)), who process data only on our instructions and with appropriate safeguards. Some of them are based in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
6. Retention
We keep enquiry data for as long as needed to communicate with you, and no longer than 24 months after our last contact, unless the law requires a longer period or we enter into a contract.
7. Your rights
You have the right to access, rectify, erase and port your data, to restrict processing and to object, and to withdraw your consent at any time. Send requests to actadigital.hr@gmail.com. If you believe your rights have been violated, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.
8. Security
The website is served exclusively over encrypted HTTPS, with strict security settings and DDoS protection. Only authorised people have access to your data.
9. Changes
We may update this policy from time to time. The current version is always published on this page.