Privacy policy
Last updated: 2026-05-04
This privacy policy describes what personal data we collect, how we use it, and your rights. IVN ARCHITECTURE is committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR).
Data controller
The controller of your personal data is Ivanić projekt d.o.o., with its registered office in Umag, Croatia.
For any questions regarding the processing of your personal data, you can contact us at ivanic.projekt@gmail.com.
Data we collect
We only collect the information you voluntarily provide through our contact form: your name, email address, and the content of your message.
Our server automatically logs standard technical data (IP address, browser type, visit time) for security and troubleshooting purposes.
Purpose of processing
- Responding to your enquiries and corresponding with you
- Preparing proposals and negotiating contracts
- Ensuring the security and correct operation of our website
Legal basis
Contact form data is processed based on your consent (Art. 6(1)(a) GDPR) and on the need to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Analytics data (Google Analytics) is processed solely on the basis of your consent (Art. 6(1)(a) GDPR) given through the consent banner. You can withdraw your consent at any time via the “Manage cookies” link in the footer.
Server-side technical data is processed on our legitimate interest (Art. 6(1)(f) GDPR) in ensuring website security.
Retention period
We retain contact form submissions for as long as necessary to address your enquiry, and at most for 24 months, unless your enquiry leads to an ongoing business relationship that requires a longer retention period.
Sharing with third parties
We do not sell or rent your personal data. We may share it with carefully selected service providers acting as data processors under appropriate contractual agreements:
- Vercel Inc. — website hosting (servers in the EU).
- Resend — email delivery for contact form submissions.
- Sanity — content management system.
- Google LLC (Google Analytics 4) — site usage analytics, only after you consent. Processing may involve transfers outside the EU/EEA under appropriate safeguards (Standard Contractual Clauses).
Your rights
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object and to withdraw consent
- Right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP)
Changes to this policy
We may update this policy from time to time. Any material changes will be reflected on this page along with a new “Last updated” date.