Privacy policy

The data controller is Shading j.d.o.o., Ulica Ljudevita Gaja 4, Tuheljske Toplice, 49215 Tuhelj, Croatia, OIB 61284641416.

For privacy questions or data rights requests, contact us at info@shading.hr.

When you send an inquiry, we process the data you choose to provide: full name, email address, phone number if provided, project location, area of interest, preferred contact method, message and attachments such as photos, sketches, floor plans or drawings.

The form may also include technical context, such as the page from which the inquiry was sent. We do not ask for special categories of personal data, such as health, financial or other sensitive data, so please do not include them in messages or attachments.

We use the data to understand your project, respond to your inquiry, prepare a proposed solution, arrange a measurement or continue communication about a possible order.

The legal basis is processing necessary to take steps at your request before entering into a contract, our legitimate interest in responding to a business inquiry and, where you send optional information or attachments, your voluntary decision to provide that information.

We do not use the personal data entered into the inquiry form for newsletters, sale to third parties, profiling or automated decision-making. Marketing measurement for a successfully submitted inquiry or phone-number click is sent to Google only if you have previously accepted marketing cookies.

The form is submitted to our first-party technical endpoint on edge.shading.hr, running on Bunny.net Edge Scripting infrastructure. That endpoint validates the inquiry and prepares the email delivered to info@shading.hr.

We use Postmark as the transactional email provider for technical email delivery. Your email address is used as the reply-to address, not as the sender address.

If you add files, they are uploaded to our Bunny.net storage before the inquiry is sent, and the email inquiry contains links to those files. Files are not sent as email attachments.

Postmark and Bunny.net are external technical services. If you prefer not to use the form, you can contact us directly by email or phone.

On your first visit we show a privacy notice with equal options to accept, reject or customise your choices. The necessary setting is used only for basic site functionality and to remember your choice in the browser through local storage or a necessary first-party cookie. You can change your choice later through the “Cookie settings” link in the footer.

The Google tag for Google Ads does not load until you accept marketing measurement. If you accept it, Google Ads may receive a record of a successfully submitted inquiry or a phone-number click, together with technical data normally sent by the browser, such as the page URL, event time, user agent and IP address. We use Google Consent Mode with storage denied by default, ad personalisation disabled and Google signals disabled.

This website does not load external fonts, embedded maps, chat widgets or similar third-party resources when the page opens. An external service is also involved when you submit the form, upload files through the form or click an external link.

The data is accessed by people at Shading who handle inquiries, prepare proposals, arrange measurements and communicate with clients.

Data may be processed through our technical service providers, including Bunny.net and Postmark. We may also disclose data if required to comply with legal obligations or protect our rights.

We keep inquiries for as long as needed to respond, discuss the project and follow up on communication. Routine inquiries that do not become a project are kept for up to 24 months, unless you request deletion earlier or there is a justified reason to keep them longer.

If an inquiry leads to a proposal, order, contract, invoice or other business record, we keep the relevant data for the time needed to perform the project and meet accounting, tax and other legal obligations.

You may request access to your personal data, correction, deletion, restriction of processing, data portability and objection to processing where the GDPR conditions are met.

To exercise your rights, contact info@shading.hr. If you believe your data is being processed unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency, Selska cesta 136, 10000 Zagreb, Croatia, azop@azop.hr.

We take reasonable technical and organisational measures to protect data from unauthorised access, loss or misuse. Access to inquiries is limited to people who need the data to process the inquiry and communicate with you.

No internet or email transmission is completely risk-free. For that reason, please do not send unnecessary sensitive data through the form.

We may update this policy from time to time, especially if we change the way forms are delivered, introduce a new technical service or change how data is processed. The current version is always published on this page.