Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains which personal data Vindex Studio collects through this website, for what purposes it is used, and what rights you have regarding it.

This policy covers only data collected through this website — it does not cover data exchanged outside of it, for example as part of a separately agreed collaboration contract.

Data controller

The controller of data collected through this website is Vindex Studio. For any questions related to privacy and personal data, you can reach us at info@vindexstudio.hr or +385 95 54 00 638.

What data we collect

We collect personal data only when you provide it yourself, through one of the forms on the site, or automatically, in the limited scope described below.

• Contact form: full name, email address, phone number (optional), project type (optional), approximate budget (optional) and the content of the message you send us.
• "Request a quote" form: full name, email address, phone number (optional), the services you are interested in, approximate budget and message content.
• Technical data automatically logged by the server on every visit (e.g. IP address, access time) — standard practice for web servers, used for security and abuse prevention.
• Session data required for forms to work securely — described in detail in the Cookie Policy.

Purpose of processing

• Responding to your inquiry or quote request and communicating with you while a collaboration is being considered.
• Preparing a quote and, if you decide to work with us, delivering the agreed services.
• Protecting the site and its forms from abuse (e.g. automated spam submissions).
• Meeting any legal obligations that may apply (e.g. keeping accounting records if a service contract is concluded).

Legal basis for processing

• Your consent — by submitting a form, you confirm consent for processing your data in order to respond to your inquiry.
• Taking steps prior to entering into a contract, at your request (preparing a quote).
• Our legitimate interest — responding to inquiries and keeping the site secure.
• A legal obligation, where and if applicable (e.g. after a service contract is concluded).

Who we share data with

We do not sell your data and do not share it with third parties for marketing purposes. We currently do not use external analytics tools (e.g. Google Analytics) or advertising tools on this site.

Data may only be accessible to authorized people within Vindex Studio, to the extent needed to process your inquiry, and to technical service providers necessary for the site to function (e.g. sending email notifications), who process data solely on our instructions.

The Contact form and the "Request a quote" form use Google reCAPTCHA v3 to protect against automated spam submissions — Google processes technical data about your visit in accordance with its own Privacy Policy (see also the Cookie Policy, "reCAPTCHA (Google)" section).

Data retention period

Data from inquiries and quote requests is kept for as long as necessary to process your request and any further communication, or until you request deletion — whichever comes first. If your inquiry results in a service contract, certain data may be kept longer to meet legal obligations.

Data security

We apply technical measures proportionate to the data we collect: protection of forms against automated abusive submissions (a hidden field and a minimum-fill-time check), protection against request forgery (a CSRF token), and secure (hashed) storage of passwords for admin users who have access to inquiries.

Your rights

Regarding the data we process, you have the following rights. To exercise any of them, contact us at info@vindexstudio.hr.

• The right to access the data we process about you.
• The right to have inaccurate or incomplete data corrected.
• The right to erasure ("right to be forgotten"), where applicable.
• The right to restrict processing in certain situations.
• The right to object to processing based on legitimate interest.
• The right to portability of data you provided to us yourself.
• The right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
• The right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), if you believe the processing of your data is not compliant with regulations.

Minors

The services presented on this site are intended for businesses and adults. We do not knowingly collect data from minors through the forms on this site.

Cookies

The site uses only strictly necessary cookies required for forms to work and for admin login. A detailed list and explanation is available in our Cookie Policy.

Changes to this policy

We may update this policy from time to time, for example if we change how the site works or introduce new tools. The date of the last update is shown at the top of the page.