Skip to content

Privacy Policy

Last updated: March 2026

1. Data Controller

DevMind d.o.o. ("we", "us") is the data controller responsible for your personal data. You can reach us at:

  • Email: info@devmind.hr
  • Address: Malešnica 37, 10000 Zagreb, Croatia
  • OIB: 41162479046

2. What Data We Collect

2.1 Contact Form

When you submit our contact form, we collect:

  • Full name (required)
  • Email address (required)
  • Phone number (optional)
  • Subject of your inquiry
  • Your message (required)

This data is sent to us via email and is not stored in a database on this website. We use it solely to respond to your inquiry.

2.2 Server Logs

Our hosting provider automatically collects technical data when you visit our website, including your IP address, browser type, operating system, referring URL, and the date and time of your visit. This data is used for security and performance purposes.

2.3 Google Fonts

This website loads the "Inter" font from Google Fonts (fonts.googleapis.com). When you visit our site, your browser connects to Google servers, which may receive your IP address. Google's privacy policy applies to this data transfer: https://policies.google.com/privacy

3. Cookies and Local Storage

3.1 Language Preference Cookie

Name Purpose Duration Type
devmind_lang Stores your selected language preference 1 year Strictly necessary

This cookie is essential for the website to function correctly in your chosen language. No consent is required for strictly necessary cookies under GDPR.

3.2 Theme Preference (Local Storage)

We store your dark/light mode preference in your browser's local storage (key: "devmind-theme"). This data never leaves your device and is not a cookie.

3.3 No Tracking Cookies

We do not use analytics, advertising, or third-party tracking cookies. No data is shared with advertising networks.

4. Legal Basis for Processing

We process your data based on the following legal grounds (Article 6 GDPR):

  • Consent (Art. 6(1)(a)) — When you voluntarily submit the contact form, you consent to us processing your data to respond to your inquiry.
  • Legitimate interest (Art. 6(1)(f)) — Server logs are processed for website security and performance.

5. Data Retention

  • Contact form submissions: retained in our email system for the duration of business communication and up to 12 months after last contact.
  • Server logs: retained according to our hosting provider's policy (typically 30 days).

6. Data Sharing

We do not sell or share your personal data with third parties, except:

  • Our hosting provider — processes server logs as part of hosting services
  • Our email provider — receives contact form data to deliver emails
  • Google LLC — receives your IP address when loading Google Fonts

7. International Data Transfers

Some of the third-party services we use may process data outside the European Economic Area (EEA):

  • Google Fonts — Font files are loaded from Google servers located in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework. For transfers to countries without an EU adequacy decision, Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission.

We only use services that provide appropriate safeguards for international data transfers in accordance with GDPR Article 46.

8. Information Security

We take reasonable technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for all data transmitted between your browser and our website
  • Regular software and security updates on our hosting infrastructure
  • Spam protection on our contact form (honeypot and time-based checks)
  • Access to contact form submissions restricted to authorized personnel only

9. Your Rights

Under the GDPR, you have the right to:

  • Access — request a copy of your personal data we hold
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — request we limit processing of your data
  • Portability — request your data in a machine-readable format
  • Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at info@devmind.hr.

9.1 Withdrawal of Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact us at info@devmind.hr.

10. Right to Complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

  • Website: azop.hr
  • Address: Selska cesta 136, 10000 Zagreb, Croatia

11. Changes to This Policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page indicates when the policy was last revised.