1. Data controller
The controller of personal data is MIJOZ d.o.o., Željeznička 42, 31431 Čepin, Republic of Croatia, OIB: 80538053241, MBS: 030049613. Contact: mijozd.o.o@gmail.com · +385 99 226 9066.
2. What data we collect
- Data from the enquiry form — first name, surname, phone, email, project description, optionally: drawing / photo of the space.
- Technical data — IP address, device type, browser language (anonymous statistical data).
- Cookies — see section 7.
3. Purposes of processing and legal basis
| Purpose | Legal basis (Art. 6 GDPR) | Retention period |
|---|---|---|
| Responding to a quote enquiry | Pre-contractual measures (Art. 6(1)(b)) | 2 years from the last communication |
| Order execution and invoicing | Legal obligation (Art. 6(1)(c)) and contract | 11 years (tax regulation) |
| Marketing communications | Consent (Art. 6(1)(a)) — if given | Until consent is withdrawn |
| Website technical monitoring | Legitimate interest (Art. 6(1)(f)) | 14 months aggregated |
4. Who we share data with
We do not sell personal data and do not make it available to third parties for marketing purposes. We may share it with:
- an accounting service (for invoice processing);
- a hosting and email provider (Contabo GmbH, Germany);
- competent authorities where required by law.
All processing takes place within the EU/EEA; data is not transferred outside the EU.
5. Your rights
- the right of access, rectification, erasure and restriction of processing;
- the right to data portability;
- the right to object to processing based on legitimate interest;
- the right to withdraw consent at any time (does not affect the lawfulness of prior processing);
- the right to lodge a complaint with the Personal Data Protection Agency (azop.hr).
Send requests to mijozd.o.o@gmail.com. We respond within 30 days.
6. Data security
Access to data is limited to authorised persons. Communication with the website is TLS-encrypted. Backups are stored encrypted within the EU.
7. Cookies
The website uses essential cookies for operation (session, security) and optional ones for analytics. On your first visit you can accept or decline optional cookies. You can change these settings at any time.
8. Changes to this policy
We may amend this policy in line with the development of legislation or services. The date of the last change is published below. Significant changes are announced prominently.
Effective date: 1 May 2026 · Version 1.0
Note: the text is a standard draft; it is advisable to review with a GDPR lawyer before final publication.