Privacy Policy (EU)
Last updated: 13 October 2026 · Applies to socials.idzan.hr
This site has no forms, accounts, analytics or advertising. The only personal data involved is the technical information every web server receives, and anything you choose to send me by email.
1. Who is responsible (data controller)
Marko Idžan, Croatia. Email: marko@idzan.hr.
2. What data is processed and why
Server logs. When you open the site, the server records your IP address, browser and device type, the date and time, the page requested and the referring page. This keeps the site secure and working (for example, to spot attacks and fix errors). Legal basis: legitimate interest, GDPR Art. 6(1)(f). The logs are not used to identify you or build profiles.
Email. If you write to me via the "Send me a mail" link, I process your address and message to reply. Legal basis: legitimate interest in answering, or steps towards a contract if you ask about my services (Art. 6(1)(b) and (f)).
Cookie and theme choice. Your choice in the cookie banner and, if you use the theme button, your light/dark mode choice are stored in your browser only. See the Cookie Policy.
vCard download and QR code. These are static files. Downloading or scanning them sends me no data beyond a normal server log entry.
3. Who else receives data
- Hetzner Online GmbH (Germany) hosts the server.
- BunnyWay d.o.o. / BunnyCDN (Slovenia) delivers the site and receives the same technical request data.
Both act as processors in the EU on my behalf. Data is not sold, shared for advertising or transferred outside the EU/EEA by this site.
4. External links
The links on the main page lead to other services (Facebook, LinkedIn, Spotify and others). Nothing from them is loaded until you click. Once you're on their site, their own privacy policies apply.
5. How long data is kept
- Server logs: a short period, then deleted automatically by log rotation.
- Emails: as long as needed to handle your message and any follow-up, then deleted.
- Cookie choice: 12 months in your browser, or until you delete it.
- Light/dark mode choice: until you close the tab, or, if you allow Preferences, until you change it or clear site data.
6. Your rights
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Write to marko@idzan.hr; I'll reply within one month.
You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), at azop.hr, or to the authority in your own EU country.
7. Security
The site is served only over HTTPS, uses a strict Content-Security-Policy, and runs no server-side code for visitors.
8. Changes to this policy
If anything here changes, this page is updated and the date at the top changes.