Privacy & Cookie Policy

1. Who we are

This Privacy & Cookie Policy applies to the website and services operated by digitaldesignlab4u, located at Miroslava Feldmana 4, 10090 Zagreb, Croatia, European Union.

We are the data controller for personal data collected through this website and contact channels. For any privacy-related enquiries, contact us at digitaldesignlab4u@gmail.com.

2. What data we collect and why

Data you provide voluntarily. We collect personal data only when you choose to contact us directly, such as:

• Your name or organisation name (if provided)
• Your email address
• The content of your message
• The type of enquiry you select
• Any additional information you choose to share

This data is used solely to respond to your enquiry or to prepare a collaboration proposal. It is not used for automated profiling or marketing.

Automatically collected technical data. Our website is hosted on a static hosting provider which may collect limited technical data necessary for website operation and security, such as:

• Browser type and version
• Device type
• Basic usage statistics (page views, session duration)
• IP address (retained by the hosting provider for security purposes)

This data is aggregated and anonymised where possible. We do not use Google Analytics, advertising trackers, or cross-site profiling technologies. Where you consent, we use Plausible Analytics — see Section 8 for details.

3. Legal basis for processing

We process your personal data on the following legal bases under GDPR (Regulation (EU) 2016/679):

• Legitimate interest (Art. 6(1)(f)) — responding to enquiries you initiate, security of the website
• Performance of a contract (Art. 6(1)(b)) — where we are preparing or performing a collaboration or licensing agreement
• Compliance with legal obligations (Art. 6(1)(c)) — where applicable under Croatian or EU law

4. How long we retain your data

We retain contact enquiry data for as long as necessary to respond to and process your request, and for a maximum of 3 years thereafter unless a contractual relationship requires longer retention.

You may request deletion of your data at any time by contacting digitaldesignlab4u@gmail.com.

5. Who we share data with

We may share data only with:

• Website hosting provider — for technical operation and security of the site (data processed in accordance with their data processing agreement)
• Form processing service — if you submit a contact form, your submission is processed by Formspree Inc. (USA), which provides GDPR-compliant processing under Standard Contractual Clauses

We do not sell, rent, or share your personal data with any third parties for marketing, profiling, or any purpose other than those described above.

6. International transfers

Our contact form uses Formspree (USA). Data transferred to the USA is covered by Standard Contractual Clauses (SCCs) as approved by the European Commission. No other international transfers of personal data occur.

7. Your rights under GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data in certain circumstances
• Right to restriction of processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at digitaldesignlab4u@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Croatian data protection authority:

8. Cookies

This website uses strictly necessary cookies required for core functionality (session management, security), which do not require consent under GDPR and the ePrivacy Directive.

We also use optional cookies for analytics (Plausible, cookieless by design) and embedded media (YouTube). These are inactive by default and only enabled with your consent via the cookie banner or preferences panel. You may change your choice at any time using the "Configure" option in the cookie banner.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website is served over HTTPS (TLS encryption).

10. Children's data

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us immediately and we will delete it.

11. Changes to this policy

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. We encourage you to review this policy periodically.

12. Mobile Application

This Privacy Policy also applies to the EACE mobile application for iOS and Android.

The application follows the same local-first architecture as the EACE Transparency Notice Generator available on this website. All processing required to generate Transparency Notices takes place locally on your device. We do not upload, store, access, or process the content you enter on our servers.

The application does not require user registration or account creation. We do not collect personal data through the app, do not use advertising identifiers, do not perform cross-app tracking, and do not embed advertising SDKs.

Where you choose to export generated documents (including HTML, DOCX, PDF, or TXT), the application may request access only to the device storage or file system necessary to save those files to your device.

If future versions of the application introduce optional analytics, crash reporting, cloud synchronisation, or other services involving personal data, this Privacy Policy will be updated before such processing begins. The application requests only the permissions strictly necessary for its functionality and does not access contacts, location, microphone, camera, or photos unless explicitly required by a feature initiated by the user.

13. Contact

For any questions, requests, or complaints regarding this policy or our data processing practices: