Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect personal data only when you actively provide it through our contact form or by contacting us directly. This includes:

• —Name — to address you correctly in correspondence
• —Email address — to respond to your enquiry
• —Phone number — if voluntarily provided, to contact you by phone
• —Project description — to understand your needs and prepare a proposal

We also collect standard server log data (IP address, browser type, pages visited) for security and analytics purposes. This data is processed in aggregate and is not linked to individual identities.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• —Consent (Art. 6(1)(a) GDPR) — when you submit the contact form and check the privacy consent checkbox.
• —Legitimate interest (Art. 6(1)(f) GDPR) — for server logs and analytics necessary to maintain website security and performance.
• —Contract performance (Art. 6(1)(b) GDPR) — to fulfil obligations arising from a project engagement.

4. How We Use Your Data

Your personal data is used exclusively for the following purposes:

• —Responding to your enquiry and preparing a project proposal
• —Managing the client relationship if a project engagement follows
• —Sending relevant follow-up communications about your project (no marketing without consent)
• —Website security and performance monitoring (aggregate, anonymised data)

We do not sell, rent or share your personal data with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services in the operation of our website:

• —Vercel — website hosting and infrastructure (USA/EU). See Vercel Privacy Policy.
• —Google Analytics — aggregated website usage statistics (activated only with your cookie consent). Data is anonymised where possible.
• —SendGrid (Twilio) — email delivery of contact form notifications. Your email address is used only to route the notification; it is not stored by SendGrid after delivery.
• —Neon (PostgreSQL) — secure database hosted in the EU for storing contact enquiry data.

6. Data Retention

Contact enquiry data is retained for a maximum of 3 years from the date of last contact, or until you request deletion. If a commercial project follows, data may be retained for up to 7 years as required under Croatian accounting and tax law.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• —Right of access — request a copy of the data we hold about you
• —Right to rectification — request correction of inaccurate data
• —Right to erasure — request deletion of your personal data
• —Right to object — object to processing based on legitimate interests
• —Right to withdraw consent — withdraw previously given consent at any time
• —Right to lodge a complaint — with the Croatian Personal Data Protection Agency (AZOP) at azop.hr

To exercise any of these rights, contact us at info@unlimited-crew.eu. We will respond within 30 days.

8. Cookies

Our website uses a cookie consent banner. Strictly necessary cookies (session management, security) are used regardless of consent. Analytics cookies (Google Analytics) are only activated after you give explicit consent via the cookie banner. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.

9. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Significant changes will be communicated to active clients directly.