Privacy policy

The data controller is Blind Code (Momčilo Nikolić), Pula, OIB: registration pending (“Blind Code”, “we”).

For any data protection questions, email blindcode.cro@gmail.com. We are not required to appoint a data protection officer.

Contact form and email: your name, email address, company name (optional), project type, estimated budget (optional) and message, plus anything you send us by email or phone.

Technical data: on every visit your browser sends your IP address and technical data (browser type, time of request) needed to deliver the site. We use the IP address of form senders temporarily to prevent abuse (rate limiting) — it is kept only in the server's memory, for 10 minutes at most. We don't keep access logs; the server only records technical errors for maintenance.

Answering your enquiry and preparing a proposal — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Performing a contract and communicating during a collaboration — Art. 6(1)(b) GDPR.

Meeting legal obligations, such as business and tax records — Art. 6(1)(c) GDPR.

Website security and abuse prevention — our legitimate interest (Art. 6(1)(f) GDPR).

Providing data is voluntary, but we can't answer your enquiry without it.

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — data centres in the European Union.

Email: Google (Gmail), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data outside the EU (e.g. in the US) under GDPR safeguards such as the EU-U.S. Data Privacy Framework and standard contractual clauses.

Fonts and all website files are served from our own server — no requests are sent to Google or other third parties when you visit. We don't use analytics, ad networks or social media plugins.

We never sell your data or share it for marketing purposes. We disclose it to public authorities only when required by law.

Enquiries that don't lead to a collaboration are kept for up to 12 months after our last communication and then deleted.

Contracts, invoices and related correspondence are kept for as long as tax and accounting regulations require.

IP addresses used for abuse prevention: 10 minutes at most, in memory only.

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest (Arts. 15–21 GDPR).

Send your request to blindcode.cro@gmail.com. We respond without undue delay and within one month at the latest.

If you believe the processing infringes the law, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

The website is available only over an encrypted connection (HTTPS). Servers are located in the EU, access is restricted, and they are regularly maintained and updated.

We don't carry out automated decision-making or profiling.

The website is not intended for people under 16, and we don't knowingly collect their data.

We may update this policy, for example because of new services or regulations. The current version and the date of the last change are always published on this page.