Privacy Policy

Data controller

The controller of your personal data is SVICHA, obrt za usluge, vl. Feđa Jakić, Split, Mažuranićevo šetalište 49, OIB (tax number): 26306348312, MB (registration number): 99379082. For any questions about how we process personal data, or to exercise your rights, contact us at [email protected] or +385 97 704 5740. We are not required to appoint a data protection officer.

Data we collect

• Contact form data: name, phone number, email, event date and venue, event type, the packages you are interested in and your message.
• Direct communication: when you contact us by email, phone or Instagram, we process the data you send us.
• Technical data: when you visit the website, the server automatically logs technical data such as your IP address, browser type and time of access.
• Consent settings: your cookie choice is stored in your browser’s local storage.

We do not ask for special categories of personal data (such as health data), so please do not include them in your message.

Purposes and legal bases

• Answering your enquiry and preparing a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Providing the booked service and communicating about your event: performance of a contract (Art. 6(1)(b) GDPR).
• Issuing invoices and keeping business records: legal obligation (Art. 6(1)(c) GDPR).
• Security and proper operation of the website: our legitimate interest (Art. 6(1)(f) GDPR).
• Marketing measurement with the Meta Pixel: only with your consent (Art. 6(1)(a) GDPR).

Providing your data is voluntary, but without your name and contact details we cannot reply to your enquiry.

Recipients

• Resend, Inc. (USA): technical delivery of contact form messages to our inbox.
• Our website hosting provider: the servers the website runs on.
• Our email provider: the mailbox where we receive your enquiries.
• Meta Platforms Ireland Ltd.: only if you consent to marketing cookies and the Meta Pixel is enabled.
• Our accounting service and public authorities: where required by law.

Processors only handle data on our instructions and are contractually bound to protect it. We do not sell your data or share it with third parties for their own marketing.

Transfers outside the EU

Some processors, such as Resend and Meta, may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep data

• Enquiries that do not lead to a booking: up to 12 months after our last communication.
• Data related to a booked service: until the service is completed and any contractual claims have expired.
• Invoices and business records: for the periods required by tax and accounting law.
• Server logs: for a short period, according to the hosting provider’s settings.

Your rights

• the right to access your data and receive a copy,
• the right to have inaccurate or incomplete data corrected,
• the right to erasure (“right to be forgotten”),
• the right to restrict processing,
• the right to data portability,
• the right to object to processing based on legitimate interest,
• the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to [email protected]. We will reply without undue delay and within one month at the latest.

Complaints

If you believe we process your data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.

Automated decision-making

We do not make decisions based solely on automated processing and do not profile visitors.

Cookies

The cookies and local storage we use are described in our Cookie Policy. You can change your choice at any time via Cookie Settings in the footer.

Changes to this policy

We may update this policy from time to time. The current version and the date of the last update are always published on this page.