Privacy Policy
Last updated:
This policy explains how ALPHA DADO LABS j.d.o.o. processes personal data when you visit alphadadolabs.com or contact us. It applies to this corporate website only; our products have their own privacy policies.
1. Controller
- Controller
- ALPHA DADO LABS jednostavno društvo s ograničenom odgovornošću za usluge, Gorička 6, 21000 Split, Croatia
- OIB
- 89295365868
- Privacy contact
- hello@alphadadolabs.com
We have not appointed a data protection officer because the scale and nature of our processing do not require one.
2. What we process, why and on what basis
Contact form and email. When you write to us we process your name, email address, company (if provided), the inquiry type and the content of your message. Purpose: to answer your request and, where relevant, to prepare a proposal. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).
Technical access data. Our hosting provider processes the IP address, request URL, user agent, referrer and timestamp of each request in server logs for security, abuse prevention (including rate limiting of the contact form) and troubleshooting. Legal basis: Art. 6(1)(f) GDPR (secure and reliable operation of the website).
Aggregate usage measurement. We use Vercel Web Analytics and Speed Insights, which measure page views and performance without cookies and without storing identifiers that single out a visitor. Legal basis: Art. 6(1)(f) GDPR (understanding how the site is used).
We do not use personal data for automated decision-making or profiling, and we do not sell personal data.
3. Recipients and processors
- Vercel Inc., USA — hosting, content delivery, server logs and usage measurement.
- Resend Inc., USA — delivery of contact-form messages to our mailbox.
- Our email provider — storage of the mailbox that receives your message.
Processors act on our documented instructions under data processing agreements. Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified and otherwise on the European Commission's Standard Contractual Clauses.
4. Retention
- Contact enquiries: for the duration of our correspondence and up to 12 months after the last message, unless a contract follows, in which case the statutory commercial and tax retention periods apply.
- Server logs: up to 30 days.
- Usage measurement: aggregate only; no personal data is retained.
5. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to data portability where applicable. Where processing is based on legitimate interest you may object at any time on grounds relating to your particular situation.
To exercise these rights, write to hello@alphadadolabs.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
6. Security
All traffic to this website is encrypted with TLS. The contact form is validated on the server, rate-limited and protected against automated abuse. Secrets are stored as environment variables and never shipped to the browser. We keep the number of third-party services deliberately small.
7. Cookies
This website uses one strictly necessary cookie to remember your language choice and no advertising or tracking cookies. Details are in the Cookie Policy.
8. Changes
We may update this policy when our processing or the law changes. The revision date is shown at the top of the page.