Privacy Policy

Who is responsible for your data

The controller is SpecialistSEO, obrt za digitalni marketing, vl. Matija Mesić (OIB 23076596294), a Croatian sole-trader business. For any privacy question, write to info@specialistseo.net.

Enquiry forms

When you use the contact form or a form on one of the landing pages, I process your name, email address, company or practice name, the service you selected, your website address and your message. I use this data only to reply to you and to prepare an offer you asked for.

Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). I keep enquiries for 24 months after our last contact. If we start working together, I keep the related correspondence for as long as the cooperation lasts and as long as accounting rules require.

Proposals for dental practices

I prepare personal proposals for dental practices from publicly available information: the practice name, city, website, Google Business Profile and public speed measurements. When someone opens a proposal link, I record the time of the visit, the campaign source in the link and the browser type, so I know whether the proposal was read.

Legal basis: my legitimate interest in direct business communication (GDPR Article 6(1)(f)). I keep this data for 12 months. You can object at any time by email, and I will delete the proposal and its records.

Analytics and cookies

With your consent, I use Google Analytics 4 to understand how visitors use the site: which pages they open, which buttons and forms they use, and their approximate location and device type. Google Analytics sets the cookies _ga and _ga_<ID>, which expire after 2 years. Google Analytics loads only after you click Accept in the cookie notice.

Legal basis: consent (GDPR Article 6(1)(a)). I keep analytics data for 14 months. You can withdraw consent at any time through Cookie settings in the footer. The site stores your cookie choice in your browser's local storage, which the notice needs in order to work and which requires no consent.

Hosting, delivery and email

Hostinger hosts the website and the database that stores form submissions. Cloudflare delivers the site, protects it from attacks and streams the videos in proposals. Google Workspace delivers my email. These providers process data on my behalf, including IP addresses in technical logs, under data processing agreements.

Legal basis: my legitimate interest in a secure, working website (GDPR Article 6(1)(f)).

Transfers outside the EU

Google and Cloudflare may process data in the United States. Both are certified under the EU-US Data Privacy Framework, and their agreements also include the European Commission's standard contractual clauses.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format and to object to its processing. Where processing relies on consent, you can withdraw it at any time. Send your request to info@specialistseo.net and I will reply within one month.

You also have the right to lodge a complaint with the data protection supervisory authority in the EU member state where you live or work. In Croatia, this is the Agencija za zaštitu osobnih podataka (azop.hr).

What I do not do

I do not sell personal data, I do not use it for automated decision-making, and I do not share it with anyone beyond the providers listed above, except where the law requires it.

Changes to this policy

I update this policy when the way I process data changes. The date at the top shows the current version.