Privacy Policy

1. Data controller

The data controller is LUCA PILIPOV, obrt za usluge, vl. Luka Pilipović, Paška 3, 52440 Poreč, Hrvatska, OIB 37131560865.

For any data protection question: lukapilipovic25@gmail.com, +385 99 461 06 81.

This policy explains how we process personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Croatian law.

2. Data we collect

Through the enquiry form: name, email or phone number, event date and venue, event type, selected services and your message.

When you contact us by email, phone or WhatsApp: the information you choose to send.

From clients: details needed for the contract and invoice (e.g. name or company name, address, tax number).

Technical: IP address and basic browser data processed by the server to deliver and secure the site and, only with your consent, pseudonymised usage data (Google Analytics).

3. Purposes and legal basis

Replying to enquiries, preparing offers and delivering the service — pre-contractual steps and contract performance (Art. 6(1)(b) GDPR).

Invoicing and keeping business records — legal obligation (Art. 6(1)(c)).

Site security and spam prevention — legitimate interest (Art. 6(1)(f)).

Visitor analytics — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Cookies

Essential: the lp_lang cookie remembers your chosen language (up to 12 months), and your cookie choice is stored in your browser. These need no consent.

Analytics: Google Analytics 4 loads only after you click “Accept”. If you decline, it never loads. You can change your choice via “Cookie settings” in the footer.

5. Recipients and processors

We never sell or rent your data. Only trusted providers processing it on our behalf can access it: the hosting and database provider (Lovable and its infrastructure sub-processors), Google Ireland Ltd. (Analytics, consent only), and Meta/WhatsApp if you contact us that way.

Where needed to deliver an agreed event, we may share relevant details with the venue or wedding planner, and with authorities where required by law.

Some providers may process data outside the EU/EEA; such transfers rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

6. Retention

Enquiries that do not lead to a booking are kept for up to 24 months, then deleted.

Client data is kept for the duration of the engagement; invoices and accounting records for as long as tax and accounting law requires (generally 11 years).

Analytics data is kept for up to 14 months.

7. Your rights

You have the right to access, rectify, erase, restrict processing, data portability and to object to processing based on legitimate interest. You may withdraw analytics consent at any time without affecting earlier lawful processing.

Send requests to lukapilipovic25@gmail.com; we reply within 30 days.

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr, or your local supervisory authority.

8. Security

The site uses an encrypted connection, and enquiries are stored in a protected database that visitors cannot access. Only the business owner has access. We do not make automated decisions or build profiles.

9. Changes

We may update this policy when our services or the law change. The current version and its date are always published on this page.