Privacy Policy

How we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Croatian data protection law.

1. Data Controller

The data controller responsible for processing your personal data is:

RALFORION d.o.o. za informatičko savjetovanje
Garina 3, 51551 Veli Lošinj, Croatia
OIB: 32129910203
Email: ralforionhr@gmail.com
Managing Director: Ralf Franz Becher

2. What Data We Collect

2.1 Automatically Collected Data (Server Logs)

When you visit our website, the hosting provider may automatically collect technical data necessary for delivering the website, including your IP address (anonymized where possible), browser type and version, operating system, referring URL, pages visited, date and time of access, and the amount of data transferred. This data is processed based on our legitimate interest in ensuring the security and functionality of the website (Art. 6(1)(f) GDPR).

2.2 Data You Provide Voluntarily

If you contact us via email, we will process the personal data you provide (such as your name, email address, and the content of your message) for the purpose of responding to your inquiry. The legal basis for this processing is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

2.3 Google Analytics

With your consent, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to help us analyze how visitors use our website. The information generated by the cookie about your use of the website is transmitted to and stored by Google on servers that may be located outside the EU/EEA.

We have enabled IP anonymization (anonymize_ip: true), meaning your IP address is truncated before transmission. Google Analytics is only loaded after you have given your explicit consent via our cookie consent banner. You can withdraw your consent at any time by clicking "Cookie Settings" in the website footer.

For more information, see Google's Privacy Policy.

2.4 Cookies

Our website uses cookies. For detailed information about the types of cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy below.

2.5 Hosting

This website is hosted on GitHub Pages, a service provided by GitHub, Inc. (a subsidiary of Microsoft Corporation). When you access our website, GitHub may collect technical data such as your IP address in server logs. For more information, see GitHub Pages data collection and GitHub's Privacy Statement.

3. Purpose and Legal Basis of Processing

Purpose	Data	Legal Basis
Website delivery and security	Server log data	Art. 6(1)(f) GDPR – Legitimate interest
Responding to inquiries	Name, email, message content	Art. 6(1)(b) GDPR – Pre-contractual measures
Analytics (if enabled)	Anonymized usage data	Art. 6(1)(a) GDPR – Consent

4. Data Sharing and Transfers

We do not sell, trade, or rent your personal data to third parties. We may share data with the following categories of recipients only as necessary:

GitHub, Inc. – hosts this website via GitHub Pages. Servers may be located in the USA. GitHub is part of Microsoft Corporation, which participates in the EU-US Data Privacy Framework.
Google Ireland Limited – processes analytics data via Google Analytics 4, only when you have given your consent. Data may be transferred to the USA. Google participates in the EU-US Data Privacy Framework.
Legal obligations – if required by Croatian or EU law, we may disclose data to competent authorities.

For transfers to the USA, the recipients participate in the EU-US Data Privacy Framework, providing an adequate level of data protection as recognized by the European Commission.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described above or as required by law. Specifically:

Server log data: deleted or anonymized after 30 days.
Email correspondence: retained for the duration of the business relationship plus any legally required retention period.
Cookie consent records: retained for 12 months.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15) – obtain confirmation of whether we process your data and request a copy.
Right to rectification (Art. 16) – request correction of inaccurate data.
Right to erasure (Art. 17) – request deletion of your data ("right to be forgotten").
Right to restriction (Art. 18) – request that we limit the processing of your data.
Right to data portability (Art. 20) – receive your data in a structured, machine-readable format.
Right to object (Art. 21) – object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3)) – withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at ralforionhr@gmail.com. We will respond within 30 days.

7. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10 000 Zagreb, Croatia
Website: azop.hr

8. Cookie Policy

Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

Category	Purpose	Consent Required
Strictly Necessary	Essential for the website to function (e.g., cookie consent preference)	No
Analytics	Google Analytics 4 (GA4) – helps us understand how visitors use the website. Cookies: `_ga`, `_ga_*`. Retention: up to 14 months.	Yes

You can manage your cookie preferences at any time through the cookie consent banner on our website or by adjusting your browser settings. Note that disabling certain cookies may affect website functionality.

In accordance with the Croatian Electronic Communications Act, non-essential cookies are only activated after you have given your explicit consent.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated as necessary.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The latest version will always be available on this page with the updated date below.