Data controller
The data controller is VEMALI SOLUTIONS, craft business for business and logistics services, owner Vedran Vidović, Ulica Vinogradska 32, 48000 Koprivnica, Croatia, OIB: 05794405122.
For privacy questions, contact us at info@vemalisolutions.hr or by phone at +385 97 644 7925.
Data we process
- Data you submit through the contact form: name, company, email, phone, selected service, approximate budget, meeting preference and message.
- Data you send to us by email, phone or another communication channel.
- Technical data necessary for the operation and security of the website, such as IP address, access time, browser and device data, request data and security logs.
- Data required for offers, invoices, service delivery, business communication and compliance with legal obligations.
Purposes and legal bases
- Responding to inquiries, arranging consultations and preparing offers: processing is necessary to take steps before entering into a contract.
- Delivering agreed services, client communication and project organisation: processing is necessary for contract performance or for our legitimate business interest.
- Issuing invoices, accounting and complying with legal obligations: processing is necessary for compliance with legal obligations.
- Protecting the website, preventing misuse and keeping security logs: processing is based on our legitimate interest in keeping the website secure.
- If a newsletter, analytics or marketing cookies are introduced later, processing will only take place where there is an appropriate legal basis, including consent where required.
Recipients and processors
We do not sell personal data. We share data only when necessary for business operations, service delivery or legal obligations.
- Formspree is used for technical processing of the contact form.
- Cloudflare is used for hosting, availability, security and website delivery.
- Email, accounting, legal or other business service providers may process data only to the extent necessary to provide their services.
- Competent authorities may receive data where required by law.
If a service provider processes data outside the European Economic Area, appropriate GDPR safeguards apply, such as adequacy decisions, standard contractual clauses or other valid transfer mechanisms.
Google Business and tracking
We currently do not use Google Analytics, Google Ads, Meta Pixel or similar tools to track visitor behaviour on this website.
If VEMALI Solutions uses or updates a Google Business Profile, data processing within Google services is governed by Google's own rules. Having a Google Business Profile does not by itself mean that this website uses marketing cookies or analytics.
If analytics, ads, Google Maps embeds or other tools requiring consent are added later, this policy and the cookie policy will be updated before or at the time those tools are activated.
Retention periods
- Inquiries that do not become a project are normally kept for up to 24 months from the last communication, unless there is a justified reason for shorter or longer retention.
- Client and project data is kept during the business relationship and afterwards for as long as necessary to prove agreements, protect legal interests and comply with legal obligations.
- Accounting and tax documentation is kept for the periods required by applicable law.
- Technical and security logs are kept only as long as necessary for security, diagnostics and service stability.
Your rights
Under the GDPR, you may request access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest and withdrawal of consent where processing is based on consent.
To exercise your rights, contact info@vemalisolutions.hr. If you believe your rights have been infringed, you may lodge a complaint with the Croatian Personal Data Protection Agency: azop.hr.
We do not use automated decision-making or profiling that produces legal or similarly significant effects for website visitors.