Last updated: 16 October 2026
This policy explains what personal data we process when you visit hiperlink.digital or send us an enquiry, why we do it, and what your rights are.
Who processes your data
The controller is Hiperlink Digital d.o.o., 23000 Zadar, Croatia, OIB 83403155565. For any personal data questions, contact info@hiperlink.digital.
When you visit the website
Traffic to the website passes through Cloudflare, a content delivery and abuse protection network, before it reaches our server. This involves technical request data such as IP address, time, requested address and browser and device details. The purpose is to deliver pages and protect the website from attacks and abuse. The legal basis is our legitimate interest in secure and reliable operation (Article 6(1)(f) GDPR).
We do not use analytics, advertising tools or third-party scripts to track visitors.
When you send an enquiry
The contact form asks for your name, email address and message, and records the form language. We use this to read your enquiry, reply and discuss possible work together. If you request a quote as an individual, processing is based on steps taken before entering into a contract (Article 6(1)(b) GDPR). Otherwise it is based on our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR). Without contact details and a description of your enquiry, we cannot reply.
Your enquiry is sent by email to info@hiperlink.digital and is not saved in the website database. Please do not include passwords or confidential client data in the form.
To prevent abuse, the form briefly counts submission attempts. Counters use 15-minute windows and hold only protective hashes of the IP address and email address, never the message or the original addresses. Expired counters are removed automatically.
Who else is involved
- Hosting: a server we rent from Hetzner Online GmbH in Germany.
- Cloudflare: content delivery and website protection.
- Zoho Mail: email delivery and storage.
- AI assistants: ChatGPT (OpenAI Ireland Limited) and Claude (Anthropic Ireland, Limited) have read-only access to our mailbox and may help us review enquiries. Use of data to improve the models is switched off in both accounts.
We do not use a separate CRM and we do not sell personal data.
Transfers outside the EU
Cloudflare, OpenAI and Anthropic may process data outside the European Economic Area, in particular in the United States. For such transfers they rely on the European Commission adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses.
Backups
The website is backed up automatically twice a day, and backups are stored in the European Union. Backups include website files and the database. Enquiry content is not stored in the database and is therefore not in backups. We keep backups only as long as they are needed to restore the website.
How long we keep data
Enquiries that do not lead to work are deleted no later than 12 months after our last communication with you. Data from contracted work is kept as long as the contract and applicable law require.
Cookies
The website does not set cookies and does not use browser storage for tracking, analytics or advertising. The language is determined by the page address.
Your rights
You have the right to access and correct your data. Where the legal conditions are met, you also have the right to erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. We do not make decisions based solely on automated processing. Send requests to info@hiperlink.digital.
If you believe the processing does not comply with the law, you may lodge a complaint with the Croatian Personal Data Protection Agency.
Changes to this policy
We will update this policy when the way we process data changes. The date of the latest change is shown at the top of the page.