Privacy policy
Draft for review before publication. The controller identity, retention period and provider arrangements must be completed and legally reviewed.
- Controller
- TO COMPLETE
- Privacy contact
- TO COMPLETE
- Retention period
- TO COMPLETE
Controller
The controller is [CONFIRMED REGISTERED NAME AND ADDRESS], OIB [COMPLETE]. Privacy contact: [COMPLETE]. These details must be supplied before collecting personal data.
Inquiry data and purpose
We collect the contact and business information you submit to assess your inquiry and communicate with you. Do not submit special-category personal data or confidential documents through these forms.
Legal basis
Inquiry handling may rely on steps prior to a contract or legitimate interest in responding to business inquiries, as applicable. The checkbox records your agreement to the described handling; optional analytics uses separate consent. Confirm the correct lawful bases with a legal adviser.
Recipients and transfers
If hosted with Netlify Forms, Netlify processes form submissions on behalf of the controller. Optional Google Analytics involves Google. Before launch, verify contracts, subprocessors, storage locations, international transfers and appropriate safeguards. No sale of inquiry data is intended.
Retention
[CONFIRM RETENTION PERIOD AND CRITERIA]. Keep inquiry data only as long as necessary for its purpose or applicable obligations. Define a deletion schedule before launch.
Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting prior lawful processing. Contact the controller and, where relevant, lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Analytics and local storage
Analytics is inactive unless an identifier is configured and you accept it. Your choice is stored locally as alistar-consent-v1; a confirmation flag is temporarily stored in session storage after accepted submission. Privacy settings allow you to reject analytics later; the page reloads and clears accessible first-party Google Analytics cookies. Provider-side retention must be configured separately.
Review
Draft version: 11 October 2026. Complete and legally review the policy before publication, especially controller details, lawful bases, retention, provider arrangements and transfer safeguards.