1. General Provisions and Data Controller

2digital, obrt za digitalne usluge, vl. Josip Gračan, Ul. Jurja Belkovića 3, 47240 Slunj, Croatia, VAT/PIN (OIB): 86452109692, Reg. No. (MB): 98553500 (hereinafter: 2digital or Data Controller) respects your privacy and is committed to protecting the personal data of all visitors and users of its services.

The collection, use, and processing of personal data are carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18), and other applicable regulations of the Republic of Croatia and the European Union.

Contact details of the Data Controller:

• Name: 2digital, obrt za digitalne usluge, vl. Josip Gračan

• Address: Ul. Jurja Belkovića 3, 47240 Slunj, Croatia

• E-mail: info@2digital.hr

• Phone: +385 97 706 0158

2. What Personal Data Do We Collect and on What Legal Basis?

Personal data means any information relating to an identified or identifiable natural person. We collect your personal data only when necessary and based on the following legal grounds:

• Communication via contact form, e-mail, or phone: When you send us an inquiry via the contact form on 2digital.hr or contact us directly, we collect the data you voluntarily provide (first and last name, company/business name, e-mail address, phone number, and message content).

  • Legal basis: Taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR).

• Performance of contractual obligations and invoicing: When you order our services (web design, graphic design, video production, 360° virtual tours, etc.), we process the data necessary to execute our cooperation and comply with statutory bookkeeping requirements (business name, VAT/PIN, registered address, payment details).

  • Legal basis: Performance of a contract and compliance with legal obligations of the Data Controller (Art. 6(1)(b) and (c) GDPR).

• Technical data and system security: When you visit our website, technical data such as IP address, browser type, operating system, and access time are automatically logged, along with data processed by Google reCAPTCHA to protect forms against spam and abuse.

  • Legal basis: Legitimate interest in ensuring the security and stability of the website (Art. 6(1)(f) GDPR).

• Statistical traffic analysis (Google Analytics): Solely based on your explicit prior consent via our cookie management system, we collect anonymized statistical data on how the website is used.

  • Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).

3. Cookies and Tracking Technologies

Our website uses cookies (small text files stored on your device) to ensure the proper functioning of the website, remember your language preferences, and, with your consent, analyze website traffic. You can manage your cookie preferences at any time via the CookieYes interface at the bottom of the screen.

A) Necessary Cookies

These cookies are essential for the basic functioning of the website, form security, and storing your privacy choices. They do not require prior consent, as the website cannot function properly without them.

B) Functional Cookies

Enable enhanced functionality and personalization, such as remembering your selected language on a multilingual website.

C) Analytical Cookies (With Consent)

These cookies are set only if you have given your explicit consent in the cookie banner. They help us understand how visitors interact with our website (number of visits, traffic sources, pages visited).

4. Data Recipients and Transfers to Third Countries

We do not sell, rent, or disclose your personal data to third parties for marketing purposes. Access to data may be granted exclusively to trusted data processors providing technical business support (e.g., web hosting and e-mail server providers, accounting services) and competent public authorities where required by law.

Through the use of Google LLC services (Google reCAPTCHA, Google Analytics), certain technical data may be transferred to servers in the United States. Such transfers are carried out in accordance with the EU-U.S. Data Privacy Framework, ensuring an adequate level of personal data protection in line with European Union standards.

5. Data Retention Period

We store personal data only for as long as necessary to fulfill the purpose for which it was collected:

• Inquiry data (contact form / e-mail): If no business cooperation is established, data related to the inquiry and quote are kept for a maximum of 1 year from the conclusion of communication, unless you request earlier deletion.

• Contractual and accounting documentation: Retained for the periods prescribed by applicable tax and accounting laws of the Republic of Croatia (at least 11 years for accounting records).

• Data collected based on consent: Stored until consent is withdrawn or until the expiration of the respective cookie duration listed in the table above.

6. Personal Data Security

We implement appropriate technical and organizational security measures to prevent unauthorized access, loss, alteration, or disclosure of your personal data. This includes the use of SSL/TLS security protocols (HTTPS encryption), protection against malicious attacks (reCAPTCHA), regular system updates, and restricting data access solely to authorized personnel.

7. Your Rights as a Data Subject

At any time, you have the right to request from us:

1. Right of access: Confirmation as to whether your personal data are being processed and access to such data.

2. Right to rectification: Correction of inaccurate or completion of incomplete personal data.

3. Right to erasure (“right to be forgotten”): Deletion of your personal data if they are no longer necessary for the purposes for which they were collected or if you withdraw consent (except where retention is required by law).

4. Right to restriction of processing: Restriction of the processing of your data in cases provided for by the GDPR.

5. Right to data portability: Receiving the data you provided to us in a structured, commonly used, and machine-readable format.

6. Right to object and withdraw consent: You may withdraw your given consent at any time (via the cookie settings on the website or by sending a request) without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of the above rights, please contact us in writing at info@2digital.hr or by post to our registered business address. We will respond to your request without undue delay and no later than 30 days.

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority in the Republic of Croatia:Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, e-mail: azop@azop.hr, web: www.azop.hr.

8. Changes to the Privacy Policy

We reserve the right to amend and update this Privacy Policy in the event of changes in our business operations, website functionalities, or applicable regulations. All changes take effect upon publication on this page.

Last updated: November 2026