Privacy
Privacy policy
Last updated: October 2026.
Here I explain what data I collect when you send me a request or sign up for the newsletter, why I need it, how long I keep it and what your rights are. It is written in plain language, without legal jargon.
Who processes your data
The controller is Rafael Alapić (Atria), Zagreb, Croatia. For any questions about your data, write to rafael@atria-web.com or call +385 95 534 4535.
What data I collect and why
- Request form: your name, e-mail address and the package you chose, and optionally your company name, phone number and a message. I use them only to answer your request and prepare a quote. The legal basis is your consent and steps taken before a contract is made (Article 6(1)(a) and (b) of the General Data Protection Regulation).
- Newsletter: your e-mail address. I use it only to send the newsletter, about once a month. The legal basis is your consent (Article 6(1)(a)). You confirm your sign-up by clicking a link in an e-mail, and you can unsubscribe with one click in every newsletter.
- E-mail, phone and WhatsApp: when you contact me directly, I use the details from your message or call only to reply.
Who else processes data
I use a few services to run this website. They process data only on my behalf:
- Web3Forms forwards messages from the request form to my e-mail.
- Google (Gmail): this is where I receive and keep my e-mails.
- Brevo sends my e-mails and the newsletter and keeps the list of subscribers.
- Cloudflare serves this website, forwards to me the e-mails sent to rafael@atria-web.com and counts visits without cookies and without recognising visitors.
If you message me on WhatsApp, the message is carried by WhatsApp (Meta), which handles the data under its own terms and privacy policy.
Some of these services may also process data outside the European Union, with the safeguards required by the General Data Protection Regulation. I do not sell your data and I do not give it to anyone else.
How long I keep data
- Requests: up to 12 months after our last contact. If you become a client, I keep your data for as long as we work together and for as long as the law requires.
- Newsletter: until you unsubscribe.
Cookies
This website does not use cookies for tracking or advertising. Visit statistics are collected without cookies, so I do not ask for your consent to cookies.
Your rights
At any time you can ask for access to your data, for it to be corrected or deleted, for processing to be restricted, or for your data to be transferred, and you can object to the processing. You can withdraw your consent whenever you like, and this does not affect processing carried out before you withdrew it. It is enough to send an e-mail to rafael@atria-web.com.
If you think your data is not being handled properly, you can lodge a complaint with the Croatian Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), azop.hr.
Changes
If I change this policy, the new version will be published on this page with a new date.