Privacy Policy

1. Data Controller

The controller of your personal data is Adrinaut, owned by Sanja Vale Čupić (OIB: 72314561994), registered at Marsovo polje 8, 52100 Pula, Croatia, email: sanja@adrinaut.com.

Adrinaut respects your privacy and is committed to protecting all personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679), the Act on the Implementation of the General Data Protection Regulation, and the Electronic Communications Act of the Republic of Croatia.

2. Data We Collect Through the Contact Form

We collect personal data directly when you voluntarily send it to us through our contact form, by email, or by phone:

• Full name
• Business or personal email address
• Company or organisation name (optional)
• The content of your message or project description

Purpose and legal basis: We process this data solely to respond to your inquiry, provide consultations, and take steps at your request prior to entering into a contract (Art. 6(1)(b) and (f) GDPR).

3. Cookies and Web Analytics (Google Analytics 4)

Our website uses technically necessary cookies for proper operation (e.g. remembering your language selection and your cookie consent status) and, only with your prior explicit consent (opt-in), the analytics service Google Analytics 4 (GA4).

• Processor: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and its parent company Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
• Data collected: anonymised statistical data about website usage (pages visited, time spent on the site, device and browser type, approximate geographic region, and referral source).
• Privacy protection and Consent Mode v2: Google Analytics 4 does not record or store users' full IP addresses, and traffic from the EU is processed via servers within the EU/EEA. Default settings for advertising cookies and profiling are permanently disabled (ad_storage: denied).
• Legal basis and withdrawal of consent: The legal basis is your consent (Art. 6(1)(a) GDPR). Unless you click "Accept all" in the cookie notice, Google Analytics scripts are not loaded at all. You may withdraw your consent at any time with a single click on our Cookie Policy page.
• Transfers to third countries: Any transfer of pseudonymised data to Google LLC in the USA is protected by the EU-US Data Privacy Framework (DPF) (European Commission adequacy decision) and standard contractual clauses (SCCs).

4. Retention Period and Data Security

We never sell or transfer your data to unauthorised third parties. Data from business inquiries is kept for as long as necessary to respond to the inquiry or for the duration of the contractual relationship, in accordance with legal requirements. Analytics data in Google Analytics is retained for a maximum of 14 months.

5. Your Rights Under the GDPR

You have the right at any time to request access to your personal data, its correction, deletion ("the right to be forgotten"), restriction of processing, data portability, or to withdraw your consent. You also have the right to lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb (www.azop.hr).

To exercise your rights, please contact us at sanja@adrinaut.com.