Privacy policy
We are committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it — in plain language, aligned with the General Data Protection Regulation (GDPR).
Who we are
Net media međunarodne usluge d.o.o. ("Netmedia", "we", "us") is a software development company registered in Split, Croatia. We are the data controller for personal data collected through this website.
Contact for privacy inquiries: policy@netmedia.agency
What data we collect and why
Contact form
When you submit our contact form, we collect your name, email address, and optionally your phone number, company name, and message. We use this data solely to respond to your inquiry and explore potential cooperation.
Authenticated staff session
When a team member signs in to our internal editing environment, we use a first-party session identifier (_sid) to keep that session authenticated and protect admin actions. Regular public browsing does not set this cookie.
A/B testing
We may run layout tests to improve the site experience. Session cookies (_exp_*, _variant) assign you a consistent layout variant during your visit. These are anonymous, first-party, and expire when you close your browser.
Conversion events
When you interact with certain site features — such as submitting a form, clicking a call-to-action, or revealing contact details — we record anonymous conversion events to understand which parts of the site are most useful. These events do not contain personal data and are stored on our own server.
Cookies and optional categories
We organise cookies into four categories. You can review and change your choices at any time via the cookie settings control on this site or on our cookie settings page.
Necessary (always on)
Required for the site to function: your consent preferences, colour theme choice, authenticated staff session identifiers when staff sign in, and A/B test assignments. These cannot be disabled.
Functionality (opt-in)
Enables third-party embedded content such as YouTube videos, Google Maps, social media posts, SlideShare presentations, and GitHub code snippets. When enabled, these providers may set their own cookies or receive your IP address.
Performance (opt-in)
Enables Google Analytics to help us understand how visitors use the site. Data is anonymised (IP anonymisation is enabled). Google sets cookies such as _ga and _ga_* with a duration of up to two years.
Targeting (opt-in)
Reserved for advertising and audience targeting tools. Currently no targeting cookies are in use.
How we store and process your data
Contact form submissions are delivered to us via Amazon SES (encrypted SMTP) and stored in our business management systems. We do not sell or rent personal data.
We retain contact data for the period necessary to resolve your inquiry, or as long as we are legally required to keep records about business contacts. We may also retain your details to follow up on potential projects based on our legitimate business interest.
Third-party data sharing
We share personal data with third parties only in these circumstances:
- Service providers. Amazon Web Services (email delivery), Google (analytics, if you consent). These providers process data under their own privacy policies and data processing agreements.
- Cooperation partners. We may share contact information with affiliated companies, consultants, or sub-contractors for the purpose of potential cooperation. We will contact you for consent before doing so.
- Legal requirements. Where disclosure is required by law or enforceable government request.
Data transfers
Some of our service providers (Amazon Web Services, Google) may process data outside the European Economic Area. These transfers are covered by Standard Contractual Clauses or equivalent safeguards under GDPR.
Your rights under GDPR
Under the General Data Protection Regulation (EU 2016/679), you have the right to:
- Access your personal data and information about how it is processed
- Rectify inaccurate data
- Request erasure of your data
- Restrict processing
- Data portability
- Object to processing based on legitimate interest
- Lodge a complaint with your supervisory authority
To exercise any of these rights, contact us at policy@netmedia.agency. We will respond within 30 days.
Security
We use TLS encryption for all data in transit, including form submissions and email delivery. Access to personal data is restricted to authorised personnel.
Changes to this policy
We may update this policy from time to time. The current version is always available at this URL.