1. Introduction

Cvita Studio, obrt za digitalni marketing, vl. Ana Florencia Vignaroli (“Cvita Studio”, “we”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, view our portfolio, contact us, or subscribe to our newsletter.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller and Contact Details

Company: Cvita Studio, obrt za digitalni marketing, vl. Ana Florencia Vignaroli
Address: Kochova 9, Pula, Croatia
OIB: 05668826121
Registered activities (NKD):
• 73.11 – Advertising agencies
• 74.10 – Specialized design activities
• 58.19 – Other publishing activities
Email (privacy contact): flor@cvitastudio.com

If you have questions about this Privacy Policy or want to exercise your rights, contact us via the email above.

3. What Data We Collect

Depending on how you use the website, we may collect:

a) Data you provide to us
• Contact and inquiry data: name, email address, and any information you write in your message (including attachments if you send them).
• Newsletter subscription data: email address (and name if you provide it).

b) Data collected automatically (website analytics and technical data)
• Device and browsing data: IP address, browser type, device information, operating system, pages visited, approximate location (city/region), referring/exit pages, and interactions on the website.
• This data is collected through cookies and similar technologies, depending on your cookie preferences.

c) Portfolio viewing

Viewing our portfolio does not require you to provide personal data, but website analytics may still collect technical/browsing data as described above.

4. Why We Use Your Data (Purposes)

We use your personal data to:
• Respond to your contact inquiries and communicate with you.
• Provide you with information about our services if requested.
• Send occasional newsletter updates if you subscribe (you can unsubscribe at any time).
• Maintain and improve the website, including understanding how visitors use it (analytics).
• Ensure website security and prevent abuse.

5. Legal Bases for Processing (GDPR)

We process personal data under the following legal bases:
• Consent (Article 6(1)(a) GDPR): for newsletter subscription and non-essential cookies (where applicable).
• Legitimate interest (Article 6(1)(f) GDPR): to operate and secure the website, respond to inquiries, and improve performance and user experience (e.g., aggregated analytics), provided your rights do not override these interests.
• Contract / pre-contract steps (Article 6(1)(b) GDPR): when you contact us to request services and we need to communicate to prepare an offer or collaborate.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies. We use Squarespace’s EU cookie banner/settings to help manage cookie preferences.

Cookies may be used for:
• Necessary functions (site security, core functionality)
• Analytics (e.g., Google Analytics 4, depending on your settings)

You can adjust cookie settings through the cookie banner (and/or your browser settings). Please note that blocking certain cookies may impact site functionality.

7. Analytics and Advertising

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand website traffic and improve performance. GA4 may process information such as pages visited, time on site, device/browser information, and approximate location. This data is generally reported in aggregated form.

Meta advertising (Facebook/Instagram)

We may run ads on Meta platforms. Based on your current setup, we do not intentionally use the Meta Pixel on the website. If this changes in the future, we will update this Privacy Policy and our cookie settings accordingly.

8. Who We Share Data With

We do not sell your personal data. We may share data only when necessary, including with:
• Service providers that help us operate the website and communications, such as:
• Squarespace (website hosting, forms, and newsletter tool)
• Google (GA4 analytics)

These providers may process personal data only as needed to provide their services.

We may also disclose information:
• To comply with legal obligations, enforce rights, or respond to lawful requests by public authorities.
• In business transfers, if our business is reorganized, merged, or transferred (in which case data may be transferred with appropriate safeguards).

9. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where applicable, such transfers are protected using legal safeguards (such as Standard Contractual Clauses or other approved mechanisms).

10. How Long We Keep Your Data (Retention)

We keep personal data only as long as needed:
• Contact form inquiries/leads: up to 12 months from the last communication.
• Newsletter subscriptions: until you unsubscribe or request deletion.
• Client project communications/files (if you become a client): up to 5 years for operational and business record purposes.

We may keep data longer if required by law or to establish, exercise, or defend legal claims.

11. Your Rights (GDPR)

Depending on your situation, you may have the right to:
• Access your personal data
• Correct inaccurate data
• Request deletion (where applicable)
• Restrict processing
• Object to processing (especially where we rely on legitimate interests)
• Data portability (where applicable)
• Withdraw consent at any time (this does not affect processing already done)
• Lodge a complaint with a supervisory authority (in Croatia, AZOP)

To exercise your rights, email us at flor@cvitastudio.com.

12. Security

We use reasonable administrative, technical, and organizational measures to protect your personal data. However, no method of transmission or storage is 100% secure.

13. Children’s Privacy

Our website is not intended for children under 13, and we do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes are effective immediately upon posting on the website, with the updated date shown at the top.

15. Contact

If you have questions about this Privacy Policy or your personal data, contact us:

Cvita Studio, obrt za digitalni marketing, vl. Ana Florencia Vignaroli
Kochova 9, Pula, Croatia
Email: flor@cvitastudio.com