How we protect your data
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website in accordance with Regulation (EU) 2016/679 (GDPR).
1. Controller
The data controller is: Anton Dujmović, Samobor, Republic of Croatia. Email: info@emadujmovic.com
2. Types of Data We Collect
We only collect basic data that you voluntarily provide through the contact form - your name, email address, and message. We do not use cookies for tracking, profiling or advertising. Visit statistics are collected with Vercel Analytics, which sets no cookies and stores no personal identifiers. See section 3 on cookies and external content.
3. Cookies and external content
This site stores only four necessary items in your browser: the “ema-locale” cookie, which remembers your language; the local settings “ema-theme” (day or night mode) and “ema-consent-media” (your answer about external content); and an “ema-intro” entry in your browser session, which remembers that the opening animation has played. They are required for the site to work and do not track you. The Instagram posts on the home page are fetched by our server from Behold and shown from our own domain, so your browser never contacts Instagram or Behold. Videos (YouTube) are external content that sets its own cookies, including Google’s, so they do not load until you explicitly allow them; until then you see only a still image and a load button. You can change your choice at any time with the “External content settings” link at the foot of every page. The contact form uses Cloudflare Turnstile for spam protection, which is necessary for the security of the form.
4. Purpose and Legal Basis for Processing
Your personal data is used solely to respond to your inquiries. The legal basis for processing is your consent (Article 6(1)(a) GDPR) which you provide by sending an inquiry through the contact form.
5. Processors and recipients
We use these services to run the site, each only for the task named: Vercel Inc. (hosting and cookieless visit statistics), Cloudflare, Inc. (Turnstile, the spam check on the contact form), ALL-INKL.COM, Neue Medien Münnich, Germany (delivering contact-form email), Behold (our server fetches the public Instagram posts; your browser never contacts Behold or Instagram) and YouTube, Google Ireland Limited (videos, only after you allow them). Vercel, Cloudflare and Google may process data in the United States; such transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Your messages are not passed to anyone else unless the law requires it.
6. Retention Period
Your personal data is retained only as long as necessary to process your inquiry. After that, it will be deleted, unless longer retention is required by law.
7. Your Rights
As a data subject, you have the following rights: Right of access (Article 15 GDPR), Right to rectification (Article 16 GDPR), Right to erasure (Article 17 GDPR), Right to restriction of processing (Article 18 GDPR), Right to data portability (Article 20 GDPR), Right to object (Article 21 GDPR). To exercise your rights, contact: info@emadujmovic.com
8. Right to Withdraw Consent
You may withdraw your consent at any time by sending an email to info@emadujmovic.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP): https://azop.hr/
10. Automated Decision-Making
We do not use automated decision-making or profiling.
11. Changes
This privacy policy may be changed. Any changes will be published on this page.