Privacy & Cookie Policy
Last updated: 29 September 2026
Here we explain what personal data we collect through this website, why we process it, who we share it with and what rights you have. We keep it short and plain — and you are welcome to ask us anything.
1. Who processes your data
The data controller is DataLytics — Luka Halić, Augusta Šenoe 98, 10360 Vugrovec, Croatia.
E-mail: luka@datalytics.hr · Phone: +385 91 891 9806. For any questions about personal data, please write to that e-mail.
2. What data we process and why
| Source | Data | Purpose and legal basis |
|---|---|---|
| Contact form | Name, e-mail address, message text and the page the message was sent from (plus active filters, if any). | Replying to your enquiry and preparing possible cooperation. Legal basis: steps taken at your request before entering into a contract and our legitimate interest (Art. 6(1)(b) and (f) GDPR). |
| Direct contact (e-mail, phone, WhatsApp) | Data you share yourself (e.g. name, phone number, message content). | Communicating with you. Legal basis: legitimate interest / steps before entering into a contract. |
| Analytics (Google Analytics 4 via Google Tag Manager) | Pages visited, clicks and interactions, device and browser type, approximate location, traffic source and a cookie identifier. | Understanding how the site is used and improving it. Only with your consent (Art. 6(1)(a) GDPR). |
| Analytics (Microsoft Clarity) | Session recordings, heatmaps (clicks, scrolling, mouse movement), device and browser type, and a cookie identifier. Input fields are masked before recording. | Understanding visitor behaviour to improve the site. Only with your consent (Art. 6(1)(a) GDPR). |
| Marketing (Google advertising) | Data about your visit and identifiers in cookies. | Measuring and personalising ads. Only with your consent (Art. 6(1)(a) GDPR). |
| Server logs | IP address, request time and URL, browser type. | Security and proper operation of the site. Legal basis: legitimate interest. |
We do not sell your data and do not use it for automated decision-making about you.
3. Cookies and similar browser storage
We always use necessary cookies, and analytics and marketing cookies only if you accept them in the cookie settings window. Until you choose, Google tags (Consent Mode) run in a limited mode: they do not set cookies, but may send Google anonymous signals without identifiers.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| cc_cookie | Necessary | Remembers your cookie choice. | 6 months |
| dl_module_journey (sessionStorage) | Necessary | Remembers that you clicked a given module on the homepage; contains no personal data. | Until the tab is closed |
| _ga | Analytics | Google Analytics: distinguishes visitors. | 2 years |
| _ga_* | Analytics | Google Analytics 4: keeps session state. | 2 years |
| _clck | Analytics | Microsoft Clarity: recognises the visitor across visits. | 1 year |
| _clsk | Analytics | Microsoft Clarity: connects multiple page views into one session recording. | 1 day |
| CLID | Analytics | Microsoft Clarity: identifies a first-time visitor. | 1 year |
| ANONCHK | Analytics | Microsoft Clarity: technical identifier-sync check. | 10 minutes |
| Google advertising (e.g. _gcl_*) | Marketing | Measuring and personalising ads. | Up to 90 days |
You can change or withdraw your choice at any time; withdrawal does not affect the lawfulness of processing before it.
4. Who we share data with
The following service providers process data, only to the extent needed to deliver their service:
- Google (Analytics, Tag Manager, advertising) — analytics and marketing, with your consent.
- Microsoft (Clarity) — session recordings and heatmaps, with your consent.
- Web3Forms — relaying contact form messages to our e-mail.
- Vercel — hosting and delivery of the website.
- Sanity — content management system; delivery of content and images.
- Meta (WhatsApp) — only if you write to us via WhatsApp yourself.
Some of these providers are located outside the EU/EEA (e.g. in the USA). Transfers rely on the European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.
5. How long we keep data
- Enquiries and messages: as long as needed to reply and for any resulting cooperation, and longer only where the law requires it (e.g. accounting records).
- Analytics data: according to the retention settings of our Google Analytics account.
- Cookies: for the durations listed in the table above.
6. Your rights
You have the right to access your data, rectify it, have it erased, restrict processing, data portability and to object to processing, as well as the right to withdraw consent at any time. Send your request to luka@datalytics.hr — we reply within one month.
If you believe we process data in breach of the rules, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
7. Changes to this policy
We update this policy from time to time; the date of the latest change is shown at the top of the page.