Last updated: 10 November 2026

This policy explains what personal data is collected on tinoperdic.com, why, and what rights you have.

Who is responsible

Tino Perdić, Kaštel Lukšić, Croatia. Contact: tperdic@gmail.com.

What I collect and why

Contact and inquiry form. Your name, email address, message and, if you inquire about a painting, its title. I use this only to reply to you. Messages are stored in my email account. The form is protected against spam by Google reCAPTCHA, which checks whether a submission comes from a person rather than a bot; for this, Google processes technical data such as your IP address and browser information.
Legal basis: your request (steps prior to a contract) and my legitimate interest in answering inquiries.

Newsletter. Your email address and, optionally, your first name. When you subscribe, the date, time and IP address of your subscription and confirmation are recorded as proof of your consent. Newsletters record whether an email was opened and which links were clicked, so I can see what interests subscribers. You can unsubscribe at any time using the link in every email.
Legal basis: your consent.

Purchases. Your name, shipping address, phone number and email address, used to process your order, ship the work and issue an invoice. Shipping details are shared with the carrier; payments are processed by Wise. Invoices are kept for the period required by Croatian tax law.
Legal basis: performance of the contract and legal obligations.

Website statistics (Google Analytics). If you allow analytics cookies in the cookie banner, the site uses Google Analytics 4, provided by Google Ireland Limited, to understand how visitors use it: which pages are viewed, how visitors arrive (for example from Instagram), approximate location and the type of device. Google Analytics 4 does not store full IP addresses. The data is used only in aggregate, is kept for 14 months, and is not used for advertising. Google may process this data in the United States under the EU–US Data Privacy Framework. Without your consent, Google Analytics sets no cookies.
Legal basis: your consent, which you can withdraw at any time via “Change cookie settings” on the Cookie policy page.

Cookies. See the Cookie policy. Non-essential cookies are only used with your consent, which you can change at any time.

Who else processes the data

The website and newsletter are hosted by InfoNET (Plus Hosting Grupa d.o.o., Pula, Croatia) on servers in Croatia, and emails are sent through its mail server. Emails you send me are received in a Google (Gmail) account; Google may process this data in the United States under the EU–US Data Privacy Framework. Website statistics are processed by Google (Google Analytics), only with your consent. The contact form uses Google reCAPTCHA for spam protection. Payments are handled by Wise, and shipments by the carrier chosen for your order. I do not sell or share your data for marketing purposes.

How long data is kept

Inquiries: as long as needed to handle your request and any resulting purchase. Newsletter data: until you unsubscribe. Purchase records: as long as required by law.

Your rights

You can request access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. To exercise any of these rights, write to tperdic@gmail.com.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr, or the data protection authority in your country.