Privacy & Cookie Policy

1. Who is responsible (Controller)

Kurkuma, obrt za trgovinu i usluge, vl. Adrijan Justić, Šišićeva ulica 2, 10000 Zagreb, Hrvatska, OIB: 15248354969.

For any privacy matter, contact us at kurkumadigitalagency@gmail.com.

2. What we collect and why

Contact form. When you send an inquiry, we collect the name, email address, and any details you include in your message. We use this solely to read and respond to your inquiry and to follow up about a possible collaboration. Legal basis: taking steps at your request prior to entering a contract, and our legitimate interest in responding to inquiries (GDPR Art. 6(1)(b) and (f)).

Analytics (only with your consent). If you allow analytics cookies, we use Google Analytics 4 to understand, in aggregate, how visitors use the site so we can improve it. Legal basis: your consent (Art. 6(1)(a)).

Marketing (only with your consent). If you allow marketing cookies, we use the Meta (Facebook) Pixel to measure the performance of our advertising. Legal basis: your consent (Art. 6(1)(a)).

Technical logs. Our hosting provider automatically processes technical data (such as IP address and browser information) to deliver the site securely and prevent abuse. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f)).

3. Who processes your data (recipients)

We use carefully selected providers who act as our processors:

• Cloudflare, Inc. — website hosting and content delivery (Cloudflare Pages).
• Web3Forms — receives and forwards your contact-form submission to our email.
• Google Ireland Ltd / Google LLC — Google Analytics 4 (only if you consent).
• Meta Platforms Ireland Ltd / Meta Platforms, Inc. — Meta Pixel (only if you consent).

We do not sell your personal data.

4. International data transfers

Some of these providers are based in, or transfer data to, the United States. Where that happens, the transfer is protected by appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

5. How long we keep it

• Contact inquiries: up to 24 months after our last correspondence, unless the inquiry becomes a client relationship (then kept as long as legally required for that relationship).
• Analytics data (GA4): retained for a maximum of 14 months.
• Marketing data (Meta Pixel): retained according to Meta's standard retention.
• Technical logs: kept only for a short period for security purposes.

6. Your rights

Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, and to data portability. Where processing is based on consent, you can withdraw consent at any time — for cookies, use the "Cookie preferences" button at the bottom-left of every page. Withdrawing consent does not affect processing done before withdrawal.

To exercise any right, contact kurkumadigitalagency@gmail.com. You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb — azop.hr.

7. Cookies

We only set non-essential cookies (analytics and marketing) after you opt in. When you first visit, everything except strictly necessary cookies is off by default. You can change your choice anytime via the "Cookie preferences" button (bottom-left).

8. Changes

We may update this policy; the "last updated" date above will always reflect the current version.

Have a question about your data? Contact us.