Privacy policy
Last updated:
1. Who processes your data
The controller is Frizerski salon „BLEND” – frizerski obrt, Težačka 47, 22000 Šibenik, Croatia, OIB (tax no.) 32451175803. For any privacy question email info@blend.hr or call +385 22 336 202.
This policy explains how we process personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR), the Croatian Act on the Implementation of the GDPR (NN 42/18) and the Croatian Electronic Communications Act (NN 76/22, 14/24, 45/26).
2. What we process and why
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Visiting the site | IP address, time, page requested, browser type (server logs) | Security and correct operation | Legitimate interest, Art. 6(1)(f) GDPR | Up to 30 days |
| Appointment request (form) | Name, phone, email (optional), service, preferred date, notes | Arranging and confirming the appointment | Steps at your request before a contract, Art. 6(1)(b) | Up to 12 months after last contact |
| Phone call or email | Phone number, email address, message | Answering your question | Art. 6(1)(b) and (f) | Up to 12 months after last contact |
| Cookie settings | Your choice, time, a random choice ID and a hash of your IP address | Proving and respecting your choice | Legal obligation, Art. 6(1)(c) and Art. 7(1) | 180 days |
| Google Maps (consent only) | IP address and browser data received by Google | Showing the salon’s location | Consent, Art. 6(1)(a) | Per Google’s policy |
Requests sent through the form are stored in our database on our server and forwarded to the salon by email. If you enter an email address, we also send you a confirmation of receipt. To prevent abuse we keep a keyed hash of your IP address, from which the address cannot be recovered. We do not collect special categories of data and make no automated decisions.
3. Who receives data
- Our website host: Ego Media, Težačka 47, 22000 Šibenik – processor.
- Our email provider: Ego Media, Težačka 47, 22000 Šibenik – processor.
- Google Ireland Limited, only if you turn on the map. Google may transfer data to the USA under the EU–US Data Privacy Framework.
We never sell data or share it for marketing. Facebook and Instagram are plain links – no data goes to those networks unless you click them.
4. Your rights
You have the right to access, correct and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent (for example for Google Maps) at any time via ; this does not affect processing before withdrawal.
Send your request to info@blend.hr. We reply within one month.
5. Complaints
If you think the processing is unlawful you can complain to the Croatian Personal Data Protection Agency (AZOP): azop.hr, azop@azop.hr, or to the authority in your EU country of residence.
6. Security
The site runs over an encrypted connection (HTTPS) only, loads no tracking scripts, and serves fonts and libraries from our own server, so your IP address is not sent to third parties.
7. Changes
We update this policy when our processing changes (for example when we add online booking). The date of the last change is shown at the top of the page.