Skip to content

Privacy policy

Last updated: 15 October 2026.

Data controller

The controller is TENZEN, obrt za programiranje i dizajn, vl. Ivan Kolanović, a Croatian programming and design sole proprietorship, at Oko Vrulja 20, 23000 Zadar, Croatia. Croatian personal identification number (OIB): 48189474713.

For privacy enquiries and requests to exercise your rights, contact ivan.kolanovic@tenzen.hr.

Data and purposes

When you contact us through the form or by email, we process your name, email address, message and any business information you provide. We use this information to respond, discuss your project and prepare a proposal. We do not use enquiries for newsletters or direct marketing.

Name, email and message are required to submit the form. Providing this information is not a statutory requirement, but without contact details and an explanation of your enquiry we cannot handle your request through the form. Please do not send sensitive information or unnecessary personal data about other people.

Technical data, such as your IP address and browser or request information, is also processed to deliver the website, maintain security and prevent spam. Cloudflare Turnstile checks form submissions; your IP address is also passed to the verification service.

For communication with representatives of businesses, we rely on our legitimate interest in responding to requested business enquiries and preparing a working relationship under Article 6(1)(f) GDPR. We also rely on legitimate interests to protect the website and prevent abuse.

Where you are an individual carrying on a business and the prospective contracting party, processing necessary to prepare a proposal at your request is based on taking steps before entering into a contract under Article 6(1)(b) GDPR.

Retention

We keep enquiries that do not result in a business relationship for 12 months after the last communication and then delete them. We review the mailbox monthly to implement this rule.

If we work together, relevant correspondence becomes part of the project records and is retained during the contract and for as long as needed to meet legal obligations and establish, exercise or defend legal claims. Records required for a specific dispute are retained until its final resolution and the expiry of applicable claim periods.

The 12-month period applies to business enquiries, not infrastructure providers’ technical logs. Retention of those logs depends on the type of security record and the provider’s applicable terms.

Service providers and international transfers

We use Cloudflare for website hosting and delivery, Turnstile form protection, traffic statistics and sending form messages. We use Zoho Mail, through an EU account with our domain, to receive and store email.

Their infrastructure and subprocessors may involve processing or access outside the European Economic Area. An EU mailbox location does not mean that all access is restricted to the EU. Provider terms include international transfer mechanisms, including standard contractual clauses where applicable. Contact us for information about safeguards and how to obtain a copy.

Further information: Cloudflare data processing terms and Zoho privacy and transfer information.

Analytics and cookies

We use Cloudflare statistics to understand website traffic and performance. We do not use Google Analytics, Meta Pixel or advertising tracking. According to its documentation, Cloudflare Web Analytics does not use cookies or local storage to track visitors. This is separate from the processing of technical data to deliver and protect the website.

Information about Cloudflare security cookies and when they are used is available in Cloudflare’s documentation.

Your rights

Subject to the relevant legal basis and statutory conditions, you have rights of access, rectification, erasure and restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where its conditions are met, particularly to automated processing based on a contract.

Send your request to ivan.kolanovic@tenzen.hr. We will respond without undue delay, normally within one month. If a legally permitted extension is needed, we will notify you and explain why within that period.

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

We do not make decisions with legal or similarly significant effects on you based solely on automated processing, and we do not carry out marketing profiling.

Changes

We update this policy when our processing changes. The latest revision date appears at the beginning of this document.