Skip to main content

Privacy Policy

Last Updated: March 10, 2026

This Privacy Policy explains how CreativeStar, IT services, owned by Renata Horvat ("we", "us", "our") collects, uses, and protects personal data when you visit or use this website.

We are committed to protecting your privacy and processing personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation.

1 Data Controller

Data Controller: Renata Horvat

Address: Josipa Pupačića 4, 10090 Zagreb, Croatia

OIB: 04904111520

Email: screatives.info@gmail.com

For any privacy-related questions, you may contact us using the email address above.

2 Personal Data We Collect

We may collect the following categories of personal data:

a) Data you provide directly

  • Name and surname
  • Email address
  • Any information you voluntarily submit via contact forms or direct email inquiries.

b) Data collected automatically

  • IP address (anonymized)
  • Browser type and version
  • Device information
  • Pages visited and time spent on the website
  • Referring URL

This data is collected through analytics and cookies (see section 7).

3 Purposes of Processing

We process personal data for the following purposes:

  • Responding to inquiries and communication requests.
  • Providing requested information or services (quotes, project consultations).
  • Improving website performance and user experience.
  • Website security and technical maintenance.
  • Statistical analysis (where consent has been given).

4 Legal Basis for Processing

Personal data is processed on one or more of the following legal bases:

  • Consent – when you accept cookies or voluntarily submit data via contact forms.
  • Contractual necessity – when processing is required to respond to a service inquiry or perform a requested service before entering into a contract.
  • Legitimate interest – for website security and improvement of services.
  • Legal obligation – where processing is required by applicable Croatian laws (e.g., storage of invoices).

5 Data Retention

We retain personal data only for as long as necessary:

  • Inquiries via contact form/email: up to 12 months after the last communication, unless a business cooperation is established.
  • Business documentation (Invoices): 11 years, as required by the Croatian Accounting Act and General Tax Act.
  • Analytics data: up to 14 months.

6 Recipients of Personal Data

Your personal data may be shared only with trusted service providers acting as data processors:

  • Google LLC (USA) — analytics via Google Analytics 4, only when consent is given. Transfer safeguarded by Standard Contractual Clauses (SCCs).
  • Legal authorities, if required by applicable law.

We do not sell, rent, or trade your personal data with third parties.

7 Cookies and Analytics

This website uses cookies to ensure proper functionality and to analyse website usage.

  • Necessary cookies: Required for the website to function. Cannot be disabled.
  • Analytics cookies: Used only after obtaining your explicit consent via the cookie consent banner. We use Google Analytics 4 (GA4) with IP anonymisation enabled by default.

You can withdraw or modify your cookie preferences at any time by clicking the cookie settings icon (⚙️) in the bottom-left corner of the page, or through your browser settings.

8 Transfers Outside the EU

Some service providers used on this website (Google LLC) are based in the United States. Data transfers to these providers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.

9 Your Rights

Under the GDPR, you have the following rights:

  • Right of access — obtain confirmation of whether your data is being processed and receive a copy.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — request deletion of your data where no legal obligation requires retention.
  • Right to restriction of processing — request that processing be limited in certain circumstances.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interest (Art. 21 GDPR).
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at: screatives.info@gmail.com

If you believe your rights have been violated, you have the right to lodge a complaint with the supervisory authority: Agencija za zaštitu osobnih podataka (AZOP)
Ulica Metela Ožegovića 16, HR – 10 000 Zagreb, Croatia
Email: azop@azop.hr
Web: www.azop.hr

10 Data Security

We apply appropriate technical and organisational measures to protect your data. While we strive for maximum security, no method of transmission over the internet is 100% secure.

11 Changes to This Privacy Policy

We reserve the right to update this policy. Any changes will be published on this page with an updated revision date.