Privacy Policy

The controller of your personal data is GARAGE9 DETAILING, obrt za čišćenje, owned by Boris Dominković, with its registered address at Gruda 52, 20215 Gruda, Croatia (Tax ID/OIB: 33699502539). For any questions regarding the processing of personal data, please contact us at garage9detailing@gmail.com or +385 91 538 5106. The trade is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR; however, all privacy enquiries are handled directly by the owner.

• Contact form: name, email address, phone number (optional), vehicle model (optional) and the content of the message you send us.
• Technical data: IP address, device type, operating system and browser, time of visit and pages visited. This data is temporarily logged at the server level by our hosting provider (Vercel).
• Usage analytics: aggregated statistical data about visits and page performance collected via Vercel Analytics and Vercel Speed Insights. These services do not use cookies or store identifiers that would directly identify you.
• Third-party content: the page embeds a Google Maps map and displays YouTube videos and Instagram posts retrieved through public APIs. When the Google Maps map is loaded, your browser communicates with Google servers, which then process your IP address according to Google's own privacy policy.

We process data from the contact form solely to respond to your enquiry and prepare a quote. Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

We process technical data (server logs) for the purposes of website security, abuse detection, and ensuring stable operation. Legal basis: legitimate interest of the controller (Article 6(1)(f) GDPR).

We process analytics data to understand how the site is used and to improve it. Legal basis: legitimate interest of the controller (Article 6(1)(f) GDPR). As no cookies are used and no direct identifiers are stored, consent is not required.

We retain messages from the contact form for a maximum of 12 months from the last communication with you, after which they are deleted - unless a longer retention is legally required as a result of business arising from the enquiry (e.g. accounting records).

Technical server logs are retained by the hosting provider for a short period (typically up to 30 days) in line with their default settings.

Aggregated analytics data is retained for up to 12 months.

We do not sell your personal data nor share it with third parties for marketing purposes. The following service providers process certain data on our behalf as processors:

• Vercel Inc. (USA) - website hosting, server logs, Vercel Analytics and Speed Insights. Details: vercel.com/legal/privacy-policy.
• Google LLC (USA) - email inbox (Gmail) receiving messages from the contact form and the embedded Google Maps map. Details: policies.google.com/privacy.
• Meta Platforms Inc. (USA) - display of Instagram posts and redirection to WhatsApp when the WhatsApp button is clicked. Details: privacycenter.instagram.com.

The processors listed above are based in the United States. Data transfers take place under the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) or the Standard Contractual Clauses approved by the European Commission.

Under the GDPR you have the right:

• to access your personal data and information about the processing (Art. 15);
• to have inaccurate or incomplete data rectified (Art. 16);
• to erasure ("right to be forgotten") when there is no longer a purpose for processing (Art. 17);
• to restriction of processing in certain cases (Art. 18);
• to data portability (Art. 20);
• to object to processing based on legitimate interest (Art. 21);
• to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, www.azop.hr).

You can exercise your rights by sending a request to garage9detailing@gmail.com. We respond without undue delay, and at the latest within one month.

Providing data in the contact form is voluntary. If you do not leave an email address or phone number, we cannot respond to your enquiry. All other fields (vehicle model, phone) are optional.

We may update this privacy policy from time to time to reflect changes in legislation or in our business. The current version is always published on this page, and significant changes will be announced in a visible manner.