Privacy Policy

In short

We do not use Google Analytics or any other third-party tracking tool.
No advertising pixels and no data sharing with advertisers.
Data is processed on servers inside the European Union.
Behavioural analytics runs only after your consent and you can withdraw it at any time.

Data controller

We are responsible for the processing described on this page:

Controller: Sebastijan Sakač
Address: Croatia
Email: contact@sakac.tech

What we collect and why

The table lists every processing operation we carry out. It is generated from the site configuration itself, so it cannot drift from what is actually collected.

Data	Purpose	Legal basis	Retention
Full name, email address, message content and the options picked in the form.	Answering the inquiry, preparing an offer and further communication about the project.	Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).	24 months from the last communication, unless the engagement creates a contractual retention obligation.
Delivery record of a sent message: recipient, subject, delivery status and time.	Proving a reply was sent and troubleshooting email delivery.	Legitimate interest — reliable communication (Art. 6(1)(f) GDPR).	12 months.
Server logs: IP address, request time, requested URL, browser identifier and status code.	Site security, abuse defence and troubleshooting. These logs are kept by the hosting provider.	Legitimate interest — security and availability of the service (Art. 6(1)(f) GDPR).	Short-term, per the hosting provider settings (typically up to 30 days).
Website account: username, email address and sign-in time — only for people who have an account.	Sign-in and access to content that is not public.	Performance of a contract or access arrangement (Art. 6(1)(b) GDPR).	For as long as the account exists; deleting the account deletes this data.

Cookies and browser storage

Necessary cookies are set without consent because the site does not work without them. Everything else — analytics included — is set only after you allow it in the consent banner. The full list with durations is on the cookie page.

Cookie Policy →

Who receives the data

We do not sell data and do not pass it to third parties for their own purposes. Access is limited to service providers handling the technical side for us:

Recipient	Role	Processing location
Hostinger International Ltd.	Website and email hosting (server, database, SMTP).	European Union

Data is not transferred outside the European Economic Area. Should that ever change, this page will be updated before any such transfer begins.

Your rights

In relation to your personal data you have the right to:

request access to the data we hold about you and a copy of it,
have inaccurate data corrected or incomplete data completed,
request erasure of your data (the “right to be forgotten”),
restrict processing or object to processing based on legitimate interest,
receive your data in a machine-readable format,
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to contact@sakac.tech. We respond within one month at the latest. We may ask for additional confirmation of identity if the request does not make clear who it concerns.

Complaint to the supervisory authority

If you believe we process your data unlawfully, you may contact the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Security

Traffic to the site runs exclusively over HTTPS with HSTS. Administrative access is limited to named accounts on a custom login address. The database and media files are not publicly accessible.

Children

The site is not aimed at children and we do not knowingly collect data from people under 16.

Changes to this policy

We update this policy when the way we process data changes. The date of the last change is shown at the top of the page. If a change widens consent-based collection, we will ask for consent again.