Privacy Policy
How we process visitor data on virto.hr and which cookies we use.
General processing terms
We take visitor privacy seriously and process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian law. We collect only the minimum amount of data needed for the purposes described in this policy. We do not sell personal data or provide it to third parties for marketing purposes. This policy covers data processed through virto.hr and communications you initiate with us.
Data we collect
- Visitor analytics (Google Analytics 4): anonymous and aggregated visit information, including viewed pages, approximate location at regional level, device and browser type, and traffic source. The IP address is anonymised.
- Email contact: if you write to [email protected], we process the information you provide, such as your name, email address and message, only to respond to your enquiry.
We do not collect special categories of personal data or use automated decision-making or profiling that produces legal effects for visitors.
Purposes of processing
We use collected data to understand how the website is used, improve its content and performance, respond to your enquiries, and maintain website security and stability. Processing is limited to what is necessary for these purposes.
Cookies and consent
Before you consent, analytics operates without cookies through Google Consent Mode. Only an anonymous page view is recorded, without cookies or information that can identify you. Analytics cookies for more detailed statistics are set only after you select Accept. If you select Reject, those cookies are not set.
We remember your choice and request consent again no later than six months afterward. You can change your choice at any time by selecting Cookies in the homepage footer.
Data controller
Virto.hr is operated by a sole proprietorship registered in the Republic of Croatia, trading as Virto and owned by Tomislav Vorih, with its registered office in Krapina-Zagorje County. It acts as the data controller under the GDPR and is responsible for data processed through this website. For privacy questions or to exercise your rights, contact us at [email protected]. Additional identification and contact details are available on request. We aim to respond within a reasonable period.
Legal basis
We process analytics cookies on the basis of your consent under Article 6(1)(a) of the GDPR. We respond to enquiries on the basis of our legitimate interests or steps taken before entering into a contract.
Retention period
Analytics data is retained according to our Google Analytics settings, for no longer than 14 months. Email messages are retained for as long as needed to process the enquiry and any resulting cooperation.
Third parties
We use Google Analytics 4, provided by Google Ireland Limited, for analytics. Cloudflare serves and protects the website. These providers may process data on our behalf under their applicable terms.
Data security
We apply reasonable technical and organisational safeguards, including encrypted HTTPS connections and restricted data access. No internet transmission is completely secure, but we protect data in line with good practice.
Children
This website is not intended for children, and we do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact us so we can remove it.
Your rights
You have the right to access, correct and erase your personal data, restrict its processing, object to processing, and request data portability. To exercise these rights, contact [email protected]. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr.
Changes to this policy
We may update this policy to reflect changes in our operations or applicable law. A new version takes effect on the publication date shown at the top of the page.