Privacy
policy

In force from 4 August 2026.

1. Who processes your data

The controller of your personal data is:

• Bradati Guru — Tomislav Buza, sole trader (obrt za usluge)
• Čakovec, Međimurje County, Croatia
• Company ID (OIB): 80195519555
• Email: web@brziwebshop.com
• Phone: +385 99 660 0005

BrziWebshop.com is a trading name of that business. For anything concerning your personal data, use the address or number above.

2. What I collect

This site collects data only when you send an enquiry through the contact form:

• Name and company — required, so I know who I am writing back to.
• Email or phone number — required, because otherwise I cannot answer.
• Type of service you selected.
• Project description — optional, whatever you choose to write.
• IP address, browser string and submission time — collected automatically, solely to protect the form from spam and abuse.

I neither ask for nor want special categories of personal data (health, biometric, data revealing beliefs, and so on). Please keep them out of the description field.

3. Why, and on what legal basis

• Answering your enquiry and preparing a quote — steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR, together with the consent you give by ticking the box in the form, Article 6(1)(a).
• Protecting the form from spam and abuse (IP address, browser string, submission limits, captcha) — legitimate interests, Article 6(1)(f).
• Meeting legal obligations if the enquiry turns into a business relationship (invoicing, accounting and tax records) — Article 6(1)(c).

4. How long I keep it

• Enquiries that do not lead to work — at most 12 months from our last contact, then deleted.
• Enquiries that become projects — for the duration of the business relationship; invoice-related records for as long as Croatian tax law requires (generally 11 years).
• Technical anti-spam records — at most 1 hour, then removed automatically.

5. Who else sees it

I do not sell, rent or share your data for marketing. Within the scope of their services, the following may process it:

• the web hosting and email provider running this site and my business mailbox;
• Cloudflare, Inc. — the Turnstile anti-robot check on the contact form. When you submit the form, Cloudflare receives your IP address and technical signals in order to tell a human from a bot. Turnstile is designed not to profile or track visitors and does not use advertising cookies. See Cloudflare's privacy policy;
• my accountant, and the competent authorities where tax law requires it;

each only to the extent needed to do their job, and under a duty of confidentiality.

Where storage or processing happens outside the European Economic Area, it relies on appropriate safeguards, ordinarily the European Commission's standard contractual clauses.

6. Cookies and tracking

This site sets no cookies of its own. There is no analytics, no social pixels, no advertising scripts and no profiling. Fonts are served from this site's own server, so your visit is not reported to any third party.

The Cloudflare Turnstile check may store a short-lived technical token in your browser strictly to validate the challenge. It is not used for advertising or tracking, and it is only involved when you interact with the contact form.

Should this ever change, this policy will be updated and prior consent will be sought for any non-essential cookie.

7. Your rights

At any time you may:

• request access to the data I hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure ("the right to be forgotten");
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability in a machine-readable format;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to web@brziwebshop.com. I reply without undue delay and within one month at the latest.

If you believe your rights have been infringed, you may complain to the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. You may also complain to the authority in your own EU member state.

8. Security

The site is served over HTTPS. Form submissions go straight to my business mailbox and are not stored in any database on this site. Access to that mailbox is protected by a password and two-factor authentication.

9. Changes

This policy may change as the way I work or the law changes. The current version always sits at this address, with its effective date at the top.

← Back to the homepage