Privacy policy
Short version: nothing tracks you unless you say yes, and nothing you type on this site gets stored.
1. Who's responsible
The controller is The Canonical Agency d.o.o. (Ovisy), Kovačićeva 6, 22300 Knin, Croatia, OIB 81632925013. For anything about your data, email kresimir@ovisy.hr.
2. What happens when you visit
Server logs. The site is hosted by TOTOHOST d.o.o. za internet usluge, Cvjetno naselje 44, 20260 Korčula, Croatia. Like any web server, it automatically logs technical data such as your IP address, browser, the time of the request and the page you asked for. This is needed to deliver the site and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). The host keeps these logs only as long as it needs them for security and running the server.
Fonts. All fonts are hosted on this site. Your browser does not contact Google Fonts or any other font service.
Links, not embeds. YouTube, LinkedIn, podcast and other sites are only linked, not embedded. Nothing loads from them until you click, and then their privacy policies apply.
3. Cookies and analytics
This site uses Cookiebot (Usercentrics A/S, Denmark) to ask for your consent and remember your choice. That needs one necessary cookie, which stores your choice for 12 months.
Google Analytics 4 (Google Ireland Limited), loaded through Google Tag Manager, only runs if you accept statistics cookies. Until then, neither of them loads at all. It shows me which pages people read and where they come from. IP addresses are not stored in GA4, Google signals and ad features are off, and data is kept for 2 months. Legal basis: your consent (Art. 6(1)(a) GDPR and the Croatian Electronic Communications Act). Google may process data in the US under the EU-US Data Privacy Framework.
You can change or withdraw consent any time through Cookie settings in the footer. Withdrawing doesn't affect what happened before.
Google Search Console. I use it to see how the site appears in Google search. It puts nothing on your device and gives me only aggregated search data.
4. When you contact me
Email. If you email kresimir@ovisy.hr, I use your name, email address and whatever you write to reply and, if you want, to prepare a proposal (steps before a contract, Art. 6(1)(b) GDPR). Email runs on Google Workspace (Google Ireland Limited). Emails that don't lead to work are deleted within 2 years. If they do lead to work, documents are kept as long as accounting law requires (up to 11 years for invoices).
Booking a call. "Book a call" takes you to Calendly (Calendly LLC, US). Calendly collects your name, email and any answers you give, and sends them to me so we can have the call (Art. 6(1)(b) GDPR). Calendly is certified under the EU-US Data Privacy Framework, and their own privacy policy applies on their site.
The "Krešenger" chat box on the contact page doesn't send or store anything. It only opens your own email app with your message filled in.
5. Who else sees data
Only the services named above, acting as processors or independent controllers: TOTOHOST d.o.o. za internet usluge (hosting), Usercentrics (Cookiebot), Google (Tag Manager, Analytics, Search Console and Workspace email) and Calendly. Nobody else gets it, and nobody buys it.
6. Your rights
You can ask for access to your data, correction, deletion, restriction of processing and data portability, and you can object to processing based on legitimate interest. Email kresimir@ovisy.hr and you'll get an answer within a month (usually a lot faster).
You can also complain to the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr.
There's no automated decision-making or profiling on this site.
7. Changes
If this policy changes, the new version goes here with a new date.