Privacy policy

The controller of your personal data is:

• [UPIŠITE PUNI NAZIV OBRTA ILI TVRTKE]
• Company ID (OIB): [UPIŠITE OIB]
• [UPIŠITE ULICU I BROJ, POŠTANSKI BROJ I GRAD]
• Email: scentatelier.hr@gmail.com

For any question about how we process your data, or to exercise your rights, write to us at that email address.

We have not appointed a data protection officer, as this is not required under Article 37 of the GDPR for the scale of our processing.

When you complete the enquiry form we collect the details you enter:

• your name
• your email address
• your phone number (optional)
• the event date, number of guests and location
• the type of event
• how you heard about us (optional)
• the content of your message (optional)

We also record when the enquiry arrived and the language it was sent in. We do not ask for, and do not wish to receive, special categories of data (such as health or religious beliefs) — please do not enter them in the message field.

If you contact us directly by email or social media, we process whatever you choose to send us on that occasion.

We use the form data solely to answer your enquiry, check availability for your date and suggest a package. We do not use it for newsletters and we do not sell it to third parties.

• Answering your enquiry — the basis is your consent (Article 6(1)(a) GDPR), given by ticking the box on the form.
• Preparing and performing a contract — if the enquiry leads to a booking, the basis is taking steps at your request prior to entering a contract, and performing that contract (Article 6(1)(b)).
• Meeting legal obligations — where payment is involved, invoice data is processed to satisfy tax and accounting law (Article 6(1)(c)).
• Visitor statistics — processed in our legitimate interest in understanding how the site is used (Article 6(1)(f)); see section 7.

Providing your data is not a legal requirement, but without the fields marked as required we cannot process your enquiry.

We do not sell your data. We share it only with the service providers that let the site run and let us reply to you, and only to the extent necessary for that purpose. These providers act as processors:

• Vercel Inc. — website hosting and visitor statistics.
• Resend (Plus Five Five, Inc.) — delivery of the email that carries your enquiry to us.
• Google Ireland Limited / Google LLC — the mailbox in which we receive and keep your enquiries.

We may disclose data to competent authorities where they require it of us by law.

The providers listed above process data partly in the United States. Those transfers rely on the European Commission's adequacy decision under the EU–US Data Privacy Framework and/or on the Commission's standard contractual clauses, with appropriate safeguards in place.

You can request a copy of those safeguards at our email address.

• Enquiries that do not lead to a booking — kept for at most two years from our last contact, then deleted.
• Enquiries that lead to a contract — kept for the duration of the engagement and afterwards for the periods required by tax and accounting law (accounting records for at least eleven years).
• Visitor statistics — processed in aggregate and cannot identify you.

If you withdraw consent or ask for erasure, we delete your data without delay, apart from anything we are legally obliged to retain.

This site sets no cookies and stores nothing in your browser. That is why you see no cookie notice — there are no cookies for you to consent to.

For basic visitor statistics we use Vercel Web Analytics. It uses no cookies and does not track visitors across sites or devices. It collects aggregate figures such as page views, from which we cannot identify you.

In relation to your personal data you have the right to:

• access — to learn whether we process your data and obtain a copy,
• rectification of inaccurate or incomplete data,
• erasure (the 'right to be forgotten'),
• restriction of processing,
• data portability in a machine-readable format,
• object to processing based on legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to scentatelier.hr@gmail.com. We reply within one month at the latest. To avoid disclosing data to the wrong person, we may ask you to confirm your identity.

If you believe our processing breaches data protection law, you have the right to lodge a complaint with the supervisory authority:

• Agencija za zaštitu osobnih podataka (AZOP)
• Selska cesta 136, 10000 Zagreb
• Email: azop@azop.hr
• www.azop.hr

We would be grateful if you came to us first, so we can try to resolve the matter directly.

We apply appropriate technical and organisational safeguards. The site is served over an encrypted HTTPS connection, access to received enquiries is limited to those who need it for their work, and access credentials are kept separately from the site's source code.

No method of transmitting data over the internet is completely secure, so we cannot guarantee absolute security, but we protect your data in line with good practice.

We may amend this policy from time to time, for example if we change how we work or which providers we use. The current version is always published on this page, and the date it was last changed is shown at the top.