Privacy Policy

This policy explains what personal data we process when you use the deltacode.hr website, inquiry and application forms, and the AI assistant, for what purposes, and what your rights are under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Act on the Implementation of the General Data Protection Regulation (NN 42/18).

1. Data Controller

Name

Delta Code, obrt za računalno programiranje

Owner

Marko Grubešić

Office

Junija Palmotića 2,
33000 Virovitica

OIB

66274623049

VAT

Not VAT registered

Email

info@deltacode.hr

Phone

+385 98 178 4117

Website

deltacode.hr

For questions regarding data protection and exercising your rights, please write to us at info@deltacode.hr.

2. What data we process and why

Project Inquiry

When you send an inquiry, we process your first and last name, email address, and if you provide them, company name, phone number, selected topics, and project description. We use this data solely to respond to the inquiry and prepare a proposal.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6. Para. 1 point (b) of the GDPR). Retention period: up to 2 years from the last communication if no collaboration occurs; if a contract is concluded, for as long as required by regulations.

Application for Collaboration

When you send an application, we process your first and last name, email address, link to your work, field of work, and your message, solely for the purpose of selecting collaborators.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6. Para. 1 point (b) of the GDPR). Retention period: until the selection process is completed, for a maximum of 1 year, unless you consent to longer retention for future opportunities.

AI Assistant

The AI assistant (chat) only functions when you open it and send a message. Your messages pass through our server to the language model provider Anthropic PBC, which generates a response based on the content of this site. When you finish the conversation, or 20 minutes after the last message, the model creates a summary, and we send the conversation and summary to our email address to respond to your inquiry. Do not enter sensitive data or data not required for the inquiry. The assistant’s responses do not constitute an offer; prices and deadlines are confirmed in a written proposal.

Legal basis: steps taken at your request prior to entering into a contract (Art. 6. Para. 1 point (b) of the GDPR) and legitimate interest in responding to inquiries (Art. 6. Para. 1 point (f) of the GDPR). Retention period: on our server for a maximum of two hours; the summary email is kept like other inquiries; with the model provider according to their terms for business users, without being used for model training.

Security and Prevention of Misuse

To protect against automated attacks, we limit the number of form submissions and messages sent to the AI assistant. For this purpose, we briefly use the IP address, stored only as a cryptographic hash. The server maintains technical logs for security and troubleshooting purposes.

Legal basis: legitimate interest in the secure operation of the website (Art. 6. Para. 1 point (f) of the GDPR). Retention period: counters for a maximum of one hour; server logs according to hosting settings, generally up to 30 days.

Cookies

We always use necessary cookies and storage. We use statistics cookies only with your consent. We do not use advertising. Details can be found in the Cookie Policy.

Visit statistics (Google Analytics)

If you allow statistics cookies in the cookie settings, we use Google Analytics 4 to learn which pages are read and which pages inquiries come from. This processes an identifier stored in a cookie, device and browser data, an approximate location derived from the IP address (the IP address itself is not stored), the pages visited and actions on them, such as a click on the e-mail address or sending a form. The text of your inquiry and your contact details are not sent to Google Analytics; only the fact that an inquiry was sent and which topics were selected. Without consent none of this is loaded. Advertising features are switched off.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings. Retention period: visit data for up to 14 months; cookies for up to 2 years.

3. Data Recipients

We do not sell or provide data for marketing purposes. Access is granted only to:

• hosting and email providers, as data processors;
• Anthropic PBC, the language model provider, only for messages sent to the AI assistant (data transfer to the USA with appropriate safeguards under the GDPR);
• Google Ireland Limited, the provider of Google Analytics, only if you allow statistics cookies (data may be transferred to the USA with appropriate safeguards under the GDPR);
• public authorities when required by law.

4. Your Rights

• access to your data and a copy of the data;
• rectification of inaccurate data;
• erasure of data, except for data we are legally required to keep;
• restriction of processing and objection to processing based on legitimate interest;
• portability of the data you have provided to us;
• withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal.

We respond to requests within one month at the latest. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

5. Policy Changes

We update the policy when our services or regulations change. The current version is always published on this page.

Last updated: October 12, 2026.