Legal

Privacy Policy

Last updated: 27 September 2026

This Privacy Policy explains how personal data may be processed when you visit dan-mekinec.com or contact me by email.

1. Data controller

The data controller is Dan Mekinec.

Email: dan@dan-mekinec.com

2. What personal data is processed

Website and technical data

When you visit the website, technical information such as your IP address, browser information, device information, requested pages, timestamps, and security-related request data may be processed by the infrastructure used to operate and protect the website.

Analytics data

If you consent to analytics, Google Analytics 4 may collect information about how you use the website, such as pages viewed, approximate location, device and browser information, traffic source, and interactions with the website.

Google Analytics is not loaded unless you give your consent.

Email correspondence

The website does not use a contact form. If you choose to contact me through the email link on the website, I receive the information you voluntarily include in your email, such as your name, email address, message, and any other information you provide.

3. Why personal data is processed

• operating, securing, and maintaining the website;
• understanding how visitors use the website, where you have consented to analytics;
• responding to emails and inquiries;
• maintaining correspondence relating to ongoing professional discussions or relationships;
• complying with applicable legal obligations where necessary.

4. Legal bases

Website operation and security

Technical data necessary to operate and protect the website is processed on the basis of legitimate interests in maintaining a secure and functional website.

Google Analytics

Analytics data is processed only with your consent. You may withdraw that consent at any time through the Analytics settings option available on the website.

Email correspondence

Information you send by email is processed as necessary to respond to your request and, where relevant, to take steps at your request before entering into a professional relationship.

5. Service providers

Cloudflare

Cloudflare provides website hosting, content delivery, and security infrastructure. As part of providing these services, Cloudflare may process technical request and security data.

Google Analytics

If you consent to analytics, Google Analytics 4 is used to measure website usage.

TotoHost

TotoHost provides the email service used for dan@dan-mekinec.com. Emails you send to this address may therefore be processed and stored through TotoHost's infrastructure.

I do not sell personal data or share visitor or inquiry data with third parties for advertising purposes.

6. Data retention

Google Analytics

The current Google Analytics retention settings are:

• Event data: 2 months
• User data: 14 months

Aggregated reporting data may be retained differently within Google Analytics.

Email inquiries

Ordinary email inquiries are normally retained for up to 24 months after the last contact.

Correspondence may be retained for longer where reasonably necessary because of an ongoing professional relationship, a legal obligation, or the establishment, exercise, or defence of legal claims.

Technical infrastructure data

Technical and security data processed by hosting and infrastructure providers may be retained according to their operational, security, and legal requirements.

7. International data transfers

Some service providers used by the website, including Google and Cloudflare, may process data outside Croatia or the European Economic Area.

Where international transfers occur, the relevant service provider is responsible for applying appropriate safeguards required by applicable data-protection law.

8. Your rights

Depending on the circumstances, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent;
• receive certain personal data in a portable format;
• lodge a complaint with a supervisory authority.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact dan@dan-mekinec.com.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

9. Changes to this policy

This Privacy Policy may be updated if the website, the services used, or the way personal data is processed changes. The latest version will always be published on this website.