Privacy

The short version

This site sets no cookies, runs no analytics, and embeds nothing from anyone else. Reading a page here records nothing about you beyond the ordinary server log any website produces.

The only personal data involved is what you choose to type into the contact form. If you never use it, this page does not apply to you.

The rest is the detail the GDPR asks to have spelled out.

Who is responsible

hello@filipfrlic.com reaches Filip Frlić in Zagreb, Croatia — the data controller for this site, and the person who reads everything sent through it.

The operation is one freelancer, which is well under the threshold that requires a Data Protection Officer. None is appointed, so requests come to me directly.

What the contact form collects

Three things, all of them typed by you: your name, your email address, and the message. There is also one hidden field that catches spam bots — if you are a person, it is submitted empty and discarded.

It is used to read your message and reply to it. That is the entire purpose. It is not added to a mailing list, fed to a CRM, used to train anything, or sold.

The legal basis is Article 6(1)(b) of the GDPR: steps taken at your request before entering into a contract. That is not consent — which is why there is no box to tick, and nothing to withdraw. If you would rather skip the form, plain email lands in the same inbox.

Submissions are deleted after 12 months. Enquiries that turn into work are kept longer, because invoices and contracts have their own retention rules under Croatian tax law.

Who else handles it

Netlify, Inc. hosts this site and stores form submissions on my behalf, as a processor under a data processing agreement. That means your message is held on infrastructure operated from the United States, and the agreement is what covers the transfer.

Like every web host, Netlify also keeps ordinary access logs — IP address, timestamp, which page was requested — to deliver the site and defend it against abuse. Those logs are Netlify’s, short-lived, and not assembled into any profile of you.

Nobody else receives your message.

What this site deliberately does not do

No cookies, first-party or third-party. Nothing is written to local storage or session storage. There is no consent banner because there is nothing to consent to.

No analytics of any kind — no Google Analytics, no Plausible, no tracking pixel, no session recording, no heatmap. Visitor numbers here are whatever the host reports in aggregate, and nothing more.

The typefaces are served from this domain rather than embedded from Google Fonts, so opening a page does not hand your IP address to Google for the sake of a font file.

No embedded video, no social widgets, no comments, no advertising. Links out to the App Store, Google Play, GitHub, LinkedIn or a project’s own site are plain links — follow one and you are on a site with its own policy, not mine.

Your rights

Over the data described above, the GDPR gives you the following. Email me and say which one you want.

access

A copy of whatever I hold about you.

rectification

Correction of anything wrong in it.

erasure

Deletion, which for a contact message I can do immediately.

restriction

A freeze on using it while something is disputed.

objection

A stop on processing you consider unjustified.

portability

The same data handed back in a machine-readable file.

Complaints, and how quickly I answer

Requests are answered within one month, usually the same week. There are no identity hoops: for a contact form message, the practical check is that the request arrives from the address that sent it.

If you think I have handled your data badly, you can complain to the Croatian supervisory authority — the Agencija za zaštitu osobnih podataka (AZOP), at azop.hr. If you live elsewhere in the EU, the authority in your own country will take the complaint too.

Changes

If this notice changes in a way that matters, the date at the top changes with it. There is no archive of old versions — the one on this page is the one that applies.

Contact

Anything on this page, including a deletion request:hello@filipfrlic.com

Filip Frlić — Zagreb, Croatia