Privacy Policy

Who is responsible

The data controller is DrabbIT j.d.o.o., Dotrščinska ulica 46, 10040 Zagreb, Croatia. For anything related to your personal data, write to adrabic@drabbit.dev.

What we collect and why

Contact form. When you send a message we receive the name, company (optional), email address and message you type. We use them solely to reply to your inquiry and, if you wish, to prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).

Google Ads lead forms. If you fill in a lead form in one of our Google ads, Google passes us the details you enter: name, email address, phone number, company name and your answers to the form's questions (for example, which platform your website runs on). We use them solely to contact you about your inquiry and prepare a proposal, on the same legal basis as the contact form. Google's own processing of your use of its services is governed by Google's privacy policy.

Server logs. Our hosting provider records technical data about each request (IP address, browser type, requested page, timestamp) to keep the site secure and available. This is our legitimate interest (Art. 6(1)(f) GDPR). Logs are not used to identify or profile visitors.

WhatsApp. If you contact us via the WhatsApp link, the conversation takes place on WhatsApp under Meta's terms and privacy policy. We only see what you send us.

We do not use analytics or advertising trackers on this website. The only cookies we set are a language preference and your cookie-notice answer (see the Cookie Policy).

Who processes the data

We use a small number of service providers who process data on our behalf under data-processing agreements:

• Scaleway SAS, France (e-mail delivery) — delivers messages from the contact form to our inbox.
• Vercel Inc. (hosting) — serves the website, runs the contact form's server code in Paris and keeps server logs.
• Google Ireland Limited (Google Ads) — collects lead-form submissions from our ads and delivers them to us.
• Our email provider — stores the messages we receive.

Transfers outside the EU

Some providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

Inquiries are kept for as long as needed to handle them and for up to 12 months after our last exchange, unless they lead to a contract, in which case they are kept for the duration of the engagement and any statutory retention period. Server logs are kept by our hosting provider for a short, rolling period.

Your rights

Under the GDPR you may ask us to access, correct, delete or restrict the processing of your personal data, to receive it in a portable format, and to object to processing based on legitimate interest. Email adrabic@drabbit.dev and we will respond within one month.

You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Agencija za zaštitu osobnih podataka (AZOP), azop.hr.

No automated decisions

We do not make automated decisions or profile visitors.

Changes

If we change how we handle data we will update this page and the date above.