Legal
Privacy Policy
The short version: this site has no ad trackers, no contact forms and no accounts, and it doesn’t set any cookies of its own. It counts visits with Cloudflare Web Analytics, which is built not to identify or track you. The only personal data I really handle is what you send me by email.
The rest of this page is the longer version, which the law asks for. I’ve kept it as plain as I can.
Who’s responsible
The data controller is TOMOWEB, obrt za računalne djelatnosti i usluge, vl. Tomislav Kaučić, Ulica Augustina Kažotića 45, 35000 Slavonski Brod, Croatia (VAT ID HR61642401663). When this page says “I” or “me”, that’s who it means.
For anything privacy-related, email [email protected].
What’s collected, and why
When you browse the site
Like every website, this one runs on servers that log basic technical details about each request: your IP address, browser and operating system, the page you asked for, the page that linked you here, and the time. My hosting and security providers (see Who else is involved) process these logs to deliver pages and keep the site safe from attacks and abuse.
I don’t use this data to identify you, build a profile or track you across other sites, and I don’t combine it with anything else. The providers keep the logs for a limited time under their own retention policies.
Legal basis: my legitimate interest in running a website that works and stays secure (Article 6(1)(f) GDPR).
Visitor statistics
To see which pages people read and how fast the site loads, I use Cloudflare Web Analytics. A small script sends Cloudflare anonymous details about each page view: the page, the site that linked you here, your browser, operating system and device type, your country, and loading-speed measurements.
It doesn’t use cookies or your browser’s storage, doesn’t fingerprint your device, and doesn’t follow you to other sites. I only ever see totals, like “120 visits to this page last week”, never individual visitors.
Legal basis: my legitimate interest in understanding how the site is used and keeping it fast (Article 6(1)(f) GDPR). If you’d rather not be counted, a content blocker will stop the script, and the site works just the same without it.
Fonts
The site’s fonts are loaded from Fontshare, run by the Indian Type Foundry. To fetch them, your browser connects directly to Fontshare’s servers, which means they see your IP address and basic browser details.
Legal basis: my legitimate interest in showing the site as designed (Article 6(1)(f) GDPR).
Downloading the CV
The CV is protected by a Cloudflare security check that keeps scrapers out. To tell people from bots, Cloudflare looks at signals from your browser and may set a cookie (cf_clearance) so you aren’t checked again straight away. It’s used for security only, not for tracking.
Legal basis: my legitimate interest in protecting the file from automated scraping (Article 6(1)(f) GDPR). The cookie is strictly necessary for that check, so it doesn’t need your consent.
Your theme choice
If you switch between light and dark mode with the button in the header, and your choice differs from your system setting, the site remembers it in your browser’s local storage under the key theme. This never leaves your device. To remove it, switch back to match your system, or clear this site’s data in your browser settings.
When you email me
If you write to me, I get your email address, your name if you include it, and whatever you put in the message. I use it to reply, and, if we end up working together, to prepare a quote, a contract and invoices.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), or my legitimate interest in answering messages (Article 6(1)(f) GDPR).
How long I keep it: as long as the conversation needs. If we work together, project and billing records are kept for as long as Croatian accounting and tax law requires. Messages that didn’t lead anywhere are deleted once they’re no longer needed.
What isn’t collected
To be clear about what this site doesn’t do:
- No analytics that identify you or follow you around the web
- No advertising or tracking pixels
- No social media widgets. The LinkedIn, GitHub and Instagram links are plain links, and nothing loads from those sites unless you click.
- No newsletter, accounts or forms
- No selling or renting of data, ever
Who else is involved
A few providers process data on my behalf to keep the site and my email running:
| Provider | What for | Where |
|---|---|---|
| Netlify | Hosting the website | United States |
| Cloudflare | DNS, delivery, security and visitor statistics | United States |
| Fontshare (Indian Type Foundry) | Web fonts | India |
| Apple (iCloud Mail) | United States |
Some of these providers are based outside the European Economic Area. Where that’s the case, transfers rely on the safeguards the GDPR allows, such as the European Commission’s Standard Contractual Clauses or, for certified providers, the EU–US Data Privacy Framework.
Apart from these, I only share personal data when the law requires it, for example when a court or public authority makes a valid request.
Your rights
Under the GDPR, you can:
- Access the personal data I hold about you
- Correct it if it’s wrong
- Delete it, where I’m not required to keep it
- Restrict or object to how I use it
- Take it with you in a portable format
To use any of these, email [email protected]. There’s no charge, and I’ll reply within one month.
If you think I’ve handled your data badly, please tell me first so I can fix it. You also have the right to complain to the Croatian data protection authority, the Agencija za zaštitu osobnih podataka (AZOP), or to the authority in the EU country where you live.
Children
This site is meant for businesses and isn’t aimed at children. I don’t knowingly collect data from anyone under 16. If you think a child has sent me personal data, let me know and I’ll delete it.
Links to other websites
The projects, notes and footer link to other websites. Once you follow a link, that site’s own privacy policy applies, and I’m not responsible for what they do.
Changes to this policy
If anything here changes, for example if I start using a new service, I’ll update this page and the “Last updated” date at the top. Big changes will be called out clearly, not buried.
Contact
Questions about this policy or your data? Email [email protected].