Privacy notice

Who we are

The controller responsible for the personal data described in this notice is LAB7, obrt za računalne usluge, vl. Mario Matkovski, a creative digital agency registered in Croatia as a sole proprietorship (obrt).

Address: Ulica Luke Botića 23, Solin, Croatia. OIB (Croatian identification number): 05327583512.
Email: hello@lab7.agency.

This website has no user accounts, newsletter or online shop, and it shows no advertising.

Contact enquiries

You can contact us through the contact form on this website or by email at hello@lab7.agency. The form asks for your name, email address, project type and message, and optionally your company. It also records the language and time of your enquiry. If you email us directly, we receive your email address and whatever you choose to include.

We use this information to reply to your enquiry and to discuss a possible project with you. We do so to take steps at your request before a possible contract (Art. 6(1)(b) GDPR) and, for other enquiries and for keeping the correspondence, on the basis of our legitimate interest in answering and following up enquiries (Art. 6(1)(f) GDPR). The required fields are needed so that we can process and answer your enquiry. Contacting us is voluntary, but without this information we cannot respond. We do not use enquiries for automated decision-making or profiling.

To protect the form against spam and abuse, we briefly use a pseudonymised form of your IP address. It is deleted automatically, normally within 24 hours, and your IP address is not included in the enquiry we receive. We do this on the basis of our legitimate interest in keeping the form secure (Art. 6(1)(f) GDPR).

We keep ordinary enquiries and the related correspondence for up to 12 months after our last communication. If an enquiry leads to a contract, different legal retention requirements may apply to contractual and accounting records.

Analytics and cookies

With your consent, we use Google Analytics 4 for basic statistics about visits to this website: the pages viewed, how visitors arrived, device and browser type, approximate location such as country or region, and simple interactions such as scrolling or following links. It runs only after you select Accept. If you reject or make no choice, Google Analytics is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR).

We do not send the content of the contact form to Google Analytics. Google Signals and advertising features are turned off, and we do not use analytics data for profiling. Google Analytics keeps event data for 2 months.

You can change your choice at any time under Cookie settings at the bottom of every page. If you withdraw your consent, the analytics cookies are deleted.

The essential cookie lab7_lang remembers the language you choose with the language switcher and expires 12 months after your last choice. Without a saved choice, the website follows your browser’s main language, which is checked in your browser and not stored.

The essential cookie lab7_consent remembers whether you accepted or rejected analytics and expires after 6 months, when we ask again.

The analytics cookies _ga and _ga_BQ1SFHTDY0 are set only if you accept analytics. They distinguish visits with a random identifier and expire 13 months after they are set. We use no other cookies, tracking or social media plugins.

Service providers and data protection

We use a small number of service providers, who may process personal data to deliver their services to us. Our hosting and email provider stores this website and our email, including your enquiries. When you visit the website, its servers process technical data such as your IP address and browser type to deliver the pages and keep the service secure. This is based on our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Google Analytics is provided by Google Ireland Limited. Google may process analytics data outside the European Economic Area, including in the United States, on the basis of the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework, under which Google LLC is certified.

Enquiries are sent over encrypted connections. We do not sell personal data or share it for advertising, and we disclose it to others only where the law requires it.

Your rights

Under the General Data Protection Regulation (GDPR), you can ask us for access to your personal data, and to correct or delete it, restrict its processing, object to its processing or receive it in a portable format, where these rights apply. To exercise them, write to hello@lab7.agency.

Where we rely on our legitimate interests, you can object at any time, on grounds relating to your particular situation, to our processing of your personal data.

Where we process data with your consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew it.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.

Contact and updates

For questions about this notice or your personal data, contact us at hello@lab7.agency.

We may update this notice when our website, services or legal requirements change. The current version is always published on this page with the date it takes effect.