Privacy Policy
1. Data Controller
WELLNESS BEAUTY KOZMETIČKI STUDIO,
obrt za usluge, vl. Emili Kenda
Trg Frana Supila 6, 52440 Poreč, Croatia
OIB: 25839332415 · MBO: 98269712
Email: wellnessbeauty01@gmail.com
Phone: +385 99 875 6888
2. Hosting (data processor)
This website is hosted on servers of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via the Cloudflare Pages service. On each visit, Cloudflare automatically processes server log data (IP address, date and time, requested URL, browser used) for the purposes of security, bot-attack protection and technical content delivery.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest (security and stability of the website).
Transfer to the USA based on Standard Contractual Clauses (SCC) and certification under the EU-US Data Privacy Framework.
3. Cookies
This website uses only technically necessary cookies from Cloudflare for bot-attack protection (cf_clearance, __cf_bm). No cookies for analytics, advertising or user tracking are used. A cookie consent banner is therefore not required.
4. Analytics & Tracking
This website has no analytics software installed (no Google Analytics, no Matomo, no Facebook Pixel or similar). Your usage of this website is not tracked in any way.
5. Contact Form
When you send us a message via the contact form, we process the following data: first and last name, email address and message content. The data is used solely to respond to your enquiry and to prepare a possible appointment booking.
Data processor for sending: Resend, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA). Resend forwards your message to our email address. Transfer to the USA based on Standard Contractual Clauses and Data Privacy Framework certification.
Legal basis: Art. 6(1)(b) GDPR — pre-contractual measures at your request.
Retention period: 6 months after the communication is concluded, unless the enquiry results in a contractual relationship (booking) — in which case the statutory retention period of 11 years applies under the Zakon o računovodstvu (Croatian Accounting Act).
6. Bookings and business records
When an appointment is booked and a service is provided, we process the data required to perform the contract (name, contact details, agreed service, date). Where an invoice is issued, invoice data is retained in accordance with the Zakon o računovodstvu (Croatian Accounting Act) — 11 years from the end of the year to which they relate.
Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (legal obligation — Zakon o računovodstvu, Opći porezni zakon).
7. Map (OpenStreetMap)
This website embeds an OpenStreetMap (OSM) map via an iframe. When the page loads, your browser establishes a connection to the servers of the OpenStreetMap Foundation (UK) and transmits standard server data (IP address). OSM does not set cookies.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in displaying the studio location.
More information: OpenStreetMap Privacy Policy.
8. Your rights (Art. 15–22 GDPR)
Under the GDPR you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data ("right to be forgotten")
- Restriction of processing
- Object to processing
- Data portability
To exercise any of these rights, contact: wellnessbeauty01@gmail.com
9. Supervisory authority
You have the right to lodge a complaint with the data protection supervisory authority in the Republic of Croatia:
Agencija za zaštitu osobnih podataka (AZOP)
(Croatian Personal Data Protection Agency)
Selska cesta 136, 10 000 Zagreb
Email: azop@azop.hr
Web: azop.hr
10. Changes to this policy
We reserve the right to update this privacy policy from time to time due to changes in law or technical circumstances. The current version is always available on this page.
Last updated: May 2026