Red Sun – web design and graphic design studio, Zagreb
a
Request a quote
Q
Red Sun – web design and graphic design studio, Zagreb
WebsitesDesignSEOServicesPortfolioAbout us
Request a quote

Privacy policy

Protecting your privacy matters to us. In this privacy policy we explain which personal data we collect when you visit and use the website https://redsun.hr, why we process it, how long we keep it and what rights you have.

It applies to the processing of personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18).

1. Data controller

Red Sun, owner Mak Kurtović Av. Marina Držića 75b, 10000 Zagreb, Croatia Personal ID no. (OIB): 48448992171 Email: info@redsun.hr Phone: +385 97 6465 664 Web: https://redsun.hr

For any questions about personal data protection or to exercise your rights, please contact us at info@redsun.hr.

We are not required to appoint a data protection officer, but the email address above is available for all data protection enquiries.

2. Key principles

You can browse the website without leaving any personal data. We process personal data only when you provide it yourself (for example through the contact form or a quote request), when it is necessary for the operation and security of the website and, with your consent, for analytics and marketing.

Your data is:

  • processed solely for the purposes set out in this policy,
  • never sold or passed on to third parties for marketing purposes,
  • kept only for as long as needed to fulfil the purpose or as required by law.

3. Definitions

Personal data – any information relating to an identified or identifiable individual (for example name, email address, phone number, IP address).

Processing – any operation performed on personal data (collection, recording, storage, consultation, use, erasure and similar).

Controller – the person who determines the purposes and means of processing personal data; in this case Red Sun, owner Mak Kurtović.

Processor – a person who processes personal data on behalf of the controller (for example a hosting or email service provider).

Data subject – the person the personal data relates to, that is, you as a user of this website.

Consent – a freely given, specific, informed and unambiguous indication of the data subject's wishes by which they agree to the processing of their personal data.

4. What data we collect and why

4.1. Contact form and email enquiries

When you contact us through the contact form or directly by email, we process the data you enter yourself: first and last name, email address, phone number (if provided), company name (if provided) and the content of your message.

  • Purpose: replying to your enquiry, communication and preparing a quote.
  • Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
  • Retention period: up to 2 years from the last communication, or longer if the enquiry led to a business relationship, in which case the statutory retention periods for business records apply.

Messages sent through the form are delivered to our business email address, and a copy may be temporarily recorded within the website system to ensure delivery.

4.2. Quote request (basket)

The website lets you put together a quote request – you add the services you are interested in to a list and then send us the request through a form. For clarity:

  • this feature is not an online purchase and no sales contract is concluded through it,
  • we do not process online payments and do not collect or store any card, account or other payment details,
  • no customer accounts are created on the website.

When you send a request, we process the data you enter yourself (first and last name, email, phone and, where relevant, company name) and the list of services you would like a quote for. The request is delivered to our email address, and a record of it is temporarily stored in the website system.

  • Purpose: preparing and sending a quote at your request.
  • Legal basis: taking steps at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Retention period: quote request records are deleted from the website system within 12 months at the latest, unless the request led to a business relationship.

4.3. Technical visit data (log files)

With every visit, the server automatically records technical data: IP address, date and time of access, browser type and version, operating system, URLs visited and the referring page.

  • Purpose: ensuring the proper operation, security and stability of the website and preventing misuse.
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Retention period: generally up to 30 days, except in the event of a security incident.

4.4. Cookies and similar technologies

Detailed information about the cookies we use, their purpose and duration, and how to manage your consent is available on a separate page, the Cookie policy.

Cookies that are not necessary for the website to work (analytics and marketing cookies) are set only with your consent, which you give through the cookie banner and can change or withdraw at any time in the cookie settings.

5. Analytics and marketing tools

5.1. Google Analytics

This website uses the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that allow us to analyse how visitors use the website – number of visits, traffic sources, pages viewed, time spent and similar data. This information is used for statistical purposes and to improve the content and functionality of the website.

We use IP anonymisation, which shortens your IP address before further processing so that it is not used to identify you.

  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.
  • More information: https://policies.google.com/privacy
  • Opt-out: browser add-on available at https://tools.google.com/dlpage/gaoptout

5.2. Meta (Facebook) pixel

This website uses the Meta pixel, a tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.

The Meta pixel allows us to measure the effectiveness of our ads and to show more relevant ads to users who have visited our website (remarketing). Data about your visit and your actions on the website is recorded and, if you are logged in to Facebook or Instagram, may be linked to your account on those platforms.

  • Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.
  • More information: https://www.facebook.com/privacy/policy
  • Ad settings: https://www.facebook.com/settings?tab=ads

Please note that in certain cases Meta acts as a joint controller for data collected through the pixel, under the terms available at https://www.facebook.com/legal/controller_addendum.

6. Recipients of data

We do not sell or pass on your personal data to third parties, except to the following categories of recipients and only to the extent necessary for the purposes described:

  • website hosting and maintenance provider – data storage and technical support,
  • email service provider – receiving and storing messages sent through the form,
  • providers of analytics and marketing tools (Google, Meta) – to the extent described in section 5 and with your consent,
  • accounting service and competent authorities – where necessary to meet legal obligations.

Data processing agreements in accordance with Art. 28 GDPR are in place with service providers who process personal data on our behalf.

7. Transfers of data outside the EU

Some service providers (Google, Meta) may also process data outside the European Economic Area, primarily in the USA. Such transfers are based on appropriate safeguards – the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) and/or the European Commission's standard contractual clauses.

8. Automated decision-making

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you. Profiling takes place only to a limited extent for advertising purposes, with your consent, as described in section 5.

9. Your rights

As a data subject, you have the following rights:

  • Right of access (Art. 15 GDPR) – the right to confirmation of whether we process your data, and access to that data and information about the processing.
  • Right to rectification (Art. 16) – the right to have inaccurate data corrected or incomplete data completed.
  • Right to erasure (Art. 17) – the right to have your data deleted when it is no longer needed for the purpose it was collected for or when you withdraw your consent.
  • Right to restriction of processing (Art. 18) – the right to request restricted processing in the cases provided for by the Regulation.
  • Right to data portability (Art. 20) – the right to receive your data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21) – the right to object to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent (Art. 7(3)) – you can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

You can send a request to exercise any of these rights to info@redsun.hr. We will respond within one month of receiving it at the latest. To protect your data, we may ask you to confirm your identity.

Right to lodge a complaint with a supervisory authority: if you believe that the processing of your data breaches data protection law, you have the right to lodge a complaint with the supervisory authority in the EU member state where you live or work, or with our competent authority:

Croatian Personal Data Protection Agency (AZOP) Selska cesta 136, 10000 Zagreb www.azop.hr | azop@azop.hr

10. Data security

The website uses an SSL/TLS certificate, so data between your browser and our server is transmitted in encrypted form. We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure, including regular system updates, access control and backups.

Please note that no transmission of data over the internet is completely secure, so complete security of transmission cannot be guaranteed.

11. Links to other websites

Our website contains links to third-party websites (for example social networks and client websites). This privacy policy applies only to https://redsun.hr. We are not responsible for the content or privacy policies of other websites and recommend that you read their policies when you visit them.

12. Minors

Our services and website are not intended for persons under the age of 16, and we do not knowingly collect personal data from them. If we find that we have collected such data without appropriate consent, we will delete it without delay.

13. Changes to this privacy policy

We reserve the right to amend this privacy policy to reflect changes in our business, technology or legislation. The current version is always published on this page, together with the date of the last update.

Last updated: 13 August 2026

Legal information and copyright

Business name: Red Sun, owner Mak Kurtović

Address: Av. Marina Držića 75b, 10000 Zagreb, Croatia

Personal ID no. (OIB): 48448992171

VAT: HR48448992171

Email: info@redsun.hr

Website design, development and maintenance: Red Sun, owner Mak Kurtović, https://redsun.hr

All content on this website (texts, photographs, videos, graphic designs and documents) is protected by copyright. It may not be copied, reproduced or published without prior written permission.