legal
Privacy & cookies
Last updated: 28 May 2026
I run a lean site. The tracking is Google Analytics 4 through Google Tag Manager, and it stays off until you accept cookies. If you also accept the marketing cookies, Google can use that data for advertising features (audiences and demographics) toward any campaigns I run later; I'm not running ads or retargeting today. If you email me or book a call, I use those details to reply and run the call. I don't sell your data.
- What I collect
- Site analytics (after consent), advertising data if you accept the marketing cookies, anything you send me if you get in touch, and a record of your cookie choice.
- Legal basis
- Your consent for analytics and advertising features; handling your request for email and bookings.
- Retention
- Analytics up to 14 months; messages and bookings only as long as I need them.
- Third countries
- Google and Cloudflare (USA), under the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Contact
Who is responsible
Klartika, vl. Alessio Re. Prilaz baruna Filipovića 24, 10000 Zagreb, Croatia · EU. VAT HR91494145363. I am the data controller for this site. Questions about your data? Email email and I'll get back to you.
What I collect, and why
Site analytics. Once you accept cookies, Google Analytics 4 records how the site is used: the pages you visit, a rough location from your IP address, your device and browser, and how you arrived. I read it in aggregate to improve the site. It runs only with your consent (GDPR Article 6(1)(a)).
Advertising features. If you also accept the marketing cookies, Google Analytics shares data with Google to build audiences and demographic and interest profiles I could use for advertising later. I'm not running any campaigns or remarketing right now, so nothing is used for ads today, but the data is collected once you allow it. It runs only with your consent (Article 6(1)(a)).
Email and bookings. If you email me or book an intro call, I process the details you share (your name, email, and whatever you tell me) to reply and run the call. The basis is taking steps at your request before any engagement and my legitimate interest in responding (Article 6(1)(b) and (f)).
Consent records. CookieScript stores a record of your cookie choice so I can honour it and show that consent was given.
Cookies & consent
Consent is managed with CookieScript and Google Consent Mode v2. Until you accept, analytics and advertising storage stay denied. Outside the EU and EEA the default is more permissive, but you can change your choice at any time:
The full, current cookie list, scanned from this site:
Who processes data for me
I use a small set of processors, each under a data processing agreement, and no others for this site:
- Google LLC (USA): Google Analytics 4, Google Tag Manager, and the Google tag delivered first-party through Cloudflare. Analytics, plus advertising features (audiences and demographics) when you accept the marketing cookies, for campaigns I might run later.
- Cal.com, Inc. (USA): appointment scheduling, when you book an intro call.
- Cloudflare, Inc. (USA / global): hosting, content delivery, security, and first-party tag delivery (the Tag Gateway).
- CookieScript (EU): consent management and the cookie scan.
International transfers
Some processors (Google, Cloudflare) are in the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.
How long I keep it
- Analytics: held in GA4 for up to 14 months, then only in aggregate.
- Emails and bookings: only as long as I need them to handle your request and any follow-up, then deleted.
- Consent records: kept as proof of your choice and refreshed whenever you change it.
Your rights
Under the GDPR you can get a copy of your data, correct it, have it deleted, restrict or object to processing, and ask for portability. You can withdraw consent at any time with Cookie settings, which does not affect anything done beforehand. To exercise any of these, email me at email. I respond within one month.
Complaints
If you think I've handled your data wrongly, you can complain to the Croatian Personal Data Protection Agency (AZOP, azop.hr) or to the supervisory authority where you live in the EU or EEA.
Automated decisions and children
There is no automated decision-making or profiling that has a legal or similarly significant effect on you. This site is not aimed at children, and I don't knowingly collect their data.
Changes
I'll update this page when the site or the tools behind it change. The date at the top is the current version.