Web Studio Šime respects visitors’ privacy and processes personal data lawfully, fairly and transparently. This privacy policy explains which data we collect, why we use it, how long we retain it and your rights regarding your data.
1. Data controller
The controller of personal data is:
WEB STUDIO ŠIME, obrt za informatičke i marketinške usluge, vl. Šime Kalpić
Don Šime Urlića 7, 23000 Zadar
OIB: 72135092882
MBO: 99199661
Registered in the Croatian Crafts Register
For questions about personal data processing, exercising your rights or this policy, contact info@webstudiosime.hr or call +385 91 248 4936.
2. The data we collect
We collect only the data needed for communication, preparing a quote, agreeing a service and conducting business lawfully. Depending on how you contact us, this may include:
- your first and last name
- the name of your business, company or organisation
- your email address
- your telephone number, if you provide it
- your website address or social media links
- the type of service you are enquiring about
- messages, requests, enquiries and documents you voluntarily provide
- data needed to prepare quotes, issue invoices and perform the agreed service
- technical website usage data through necessary cookies and, with your consent, analytics cookies.
3. How and why we process data
We process personal data for the following purposes:
- responding to your enquiry and communicating before a service is agreed
- preparing a quote, agreeing the project scope and entering into a contract
- performing agreed services, support and website maintenance
- issuing invoices and fulfilling accounting and other legal obligations
- protecting website security, preventing misuse and resolving technical problems
- analysing website traffic, only where you have allowed this in your cookie settings.
4. Legal bases for processing
Depending on the purpose, we process data on one or more of these legal bases:
- Steps before entering into a contract and performance of a contract — when you send an enquiry, request a quote or agree a service.
- Legal obligation — where tax, accounting or other regulations require us to retain data.
- Legitimate interests — protecting the website and business communications and preventing misuse, where your rights and interests do not override those interests.
- Consent — for analytics and other non-essential cookies, and where we specifically ask for your agreement.
5. Recipients and data processors
We do not sell your data or provide it to third parties for their own marketing. Trusted service providers that help us operate may process data only to the extent needed to provide their services, for example:
- hosting and server maintenance providers
- email and messaging service providers
- security and backup providers, where used
- analytics providers, only after your consent through cookie settings
- accountants, banks and competent public authorities where required by law.
If a provider processes data outside the European Economic Area, transfers take place only with the appropriate safeguards provided for by the GDPR. See our cookie policy for more about cookies and analytics tools.
6. How long we retain data
- We retain enquiries and communications for no more than 24 months after the last communication, unless they lead to a contractual relationship or another legal requirement calls for longer retention.
- We retain data relating to agreed services throughout our collaboration and afterwards for as long as needed to protect legal claims and conduct business properly.
- We retain accounting documents for the periods required by applicable tax and accounting regulations.
- We retain data processed on the basis of consent until consent is withdrawn, unless another legal basis permits its retention.
7. Cookies and analytics
The website uses necessary technical cookies for its operation and security. Analytics cookies, including traffic measurement tools, are activated only if you accept them through the cookie banner.
You can change or withdraw consent at any time using the website’s cookie management option. Further information is available in our cookie policy.
8. Your rights
Under the GDPR, you have the right to request:
- access to your personal data
- correction of inaccurate data or completion of incomplete data
- erasure where there is no longer a valid basis for processing
- restriction of processing in the cases provided for by law
- portability of data you provided, where applicable
- to object to processing based on legitimate interests
- withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal.
Send requests to info@webstudiosime.hr. We will respond without undue delay and within the time limits set by the GDPR.
9. Complaints to a supervisory authority
If you believe your personal data is being processed contrary to applicable rules, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency: azop.hr.
10. Providing data and automated decision-making
Providing data through the contact form or email is voluntary. However, without basic contact details and a description of your enquiry, we cannot respond, prepare a quote or agree a service.
Web Studio Šime does not make decisions based solely on automated processing of personal data that would have legal or similarly significant effects on you. We do not carry out profiling for the purpose of making such automated decisions.
11. Data security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or misuse. However, no transmission of data over the internet can be absolutely secure.
12. Changes to this privacy policy
We may update this privacy policy because of changes to our operations, the services we use or applicable regulations. The current version and its last updated date will always be published on this page.
Last updated: 21 August 2026.
