Who processes your data
The controller of your personal data is the sole trader „KOSTOLOMAC” salon za masažu, vl. Dejan Spasić, with its registered office at Barčev trg 14, 10000 Zagreb, OIB 69985975967 (hereinafter: Kostolomac).
For any questions about personal data, you can contact us at [email protected] or by phone at +385 91 521 56 75.
What data we process and why
Visiting the website
When you open this website, the hosting provider’s server automatically records technical data: your IP address, the time of access, the page requested and the browser type. This data is used solely for the secure and correct operation of the website and to detect misuse. The legal basis is our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation). The logs are kept for as long as the hosting provider keeps them, usually up to 30 days.
The website contains no forms and does not collect any data that you would enter yourself. The fonts and the virtual tour are served from this website, without external services.
Contact by phone or email
When you call us or write to us, we process your name, contact details and the content of your enquiry in order to reply and arrange an appointment. The legal basis is taking steps at your request before providing the service (Article 6(1)(b)). We keep this data for as long as necessary to answer your enquiry and provide the service, and no longer than one year from the last contact, unless the law requires a longer period. For email we use Google’s Gmail service.
Booking appointments through Zoyya
Appointments are booked through the Zoyya platform. When you click the booking button, you go to Zoyya’s website, which processes the booking data under its own privacy policy. We receive from Zoyya the data needed to provide the service: your name, contact details, the selected service and the appointment time. The legal basis is the performance of a contract (Article 6(1)(b)).
Analytics, only with your consent
If you agree to it in the cookie settings, the website uses Google Analytics 4 for anonymous visit statistics: which pages are opened, for how long and from which devices. The IP address is shortened, and the data is not used for advertising. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time through the “Cookie settings” link at the bottom of the page. Without your consent, Google Analytics is not loaded.
Google may also process data in the United States of America. The transfer is based on the EU-U.S. Data Privacy Framework, in which Google participates.
Who we share data with
- the hosting provider, to run the website
- Zoyya, to book appointments
- Google, for email (Gmail) and, only with your consent, for analytics
We do not sell your data or pass it on to third parties for marketing purposes.
Your rights
With regard to your personal data, you have the right to:
- access your data and receive a copy of it
- have inaccurate data corrected
- have your data erased
- restrict processing
- data portability
- object to processing based on legitimate interest
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal
Send your request to [email protected]. We will reply within one month at the latest.
If you believe that your data is not being processed lawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Cookies
The cookies this website uses and how to manage them are described on the Cookies page.
Changes
We may update this privacy policy from time to time. The date of the last update is shown at the top of the page.