Legal

Privacy Policy.

This page explains what data we process when you visit the website, send an enquiry or subscribe to studio updates.

Who processes your data

The controller is INFIBA obrt za usluge, vl. Ivana Novosel, Srešov klanac 21, Zagreb, Croatia, registration number 98424009, owner’s OIB 78732638880. For privacy questions or requests to exercise your rights, email info@interiorstudioin.com. Other business details are in the Imprint.

Contact enquiries

When you use the contact form, we process the name, email address and message you enter. We need these details to receive and answer your enquiry. If you ask about a possible service, the legal basis is taking steps at your request before potentially entering into a contract. For general enquiries, the basis is our legitimate interest in answering a message you sent us.

The form does not subscribe you to the newsletter. The message is processed through Vercel hosting, sent through Resend and delivered to our business email inbox. We do not store it in a separate website database. We keep an enquiry that does not lead to a working relationship in the business inbox for up to 12 months after the last communication. If a business relationship begins, relevant data is kept in line with the legal and contractual obligations that apply to it.

Studio updates

If you subscribe separately to the newsletter, we process your email address to send new writing and studio updates. The legal basis is your consent, given through an unticked checkbox and confirmed through a link sent by email. Your address is added to the Resend recipient list only after confirmation. The confirmation link is valid for at least 48 hours.

You can unsubscribe at any time using a link in an email or by writing to info@interiorstudioin.com. We keep an active address until you unsubscribe or withdraw consent. After you unsubscribe, the address is removed from the active recipient list; a minimal unsubscribe record may remain to prevent further updates without a new subscription. Withdrawal of consent does not affect the lawfulness of earlier processing.

Analytics and technical data

We use Plausible Analytics for visit statistics, configured without analytics cookies. We measure page visits and events for successfully sent contact enquiries and confirmed subscriptions. We do not include names, email addresses or message contents in those events. Plausible processes the IP address and browser information when receiving a request but, according to its documentation, does not store the original IP address or the full browser record. It stores visit and event records used to display statistics. The basis for these limited statistics is our legitimate interest in understanding and improving use of the website.

Our hosting provider may process technical data needed to deliver and secure the website and diagnose errors. The website currently uses no marketing cookies or embedded social media content; photographs and fonts are loaded from the website itself. For that reason, there is no marketing cookie consent form. If we add technology that requires consent, we will update this notice and offer an appropriate choice before enabling it.

Who can access the data

We do not sell data or share it with advertisers. To run the website, Vercel (hosting and form processing), Resend (email delivery and newsletter recipient list), Plausible (analytics) and our business email provider process the data necessary for their roles. Ivana Novosel and people she authorises to administer the website or communication can access enquiries.

According to the providers’ information, Plausible processes and stores visitor data in the European Union. Resend stores message content, sending data and account data in the United States, regardless of the European sending region; it cites Standard Contractual Clauses and the EU–US Data Privacy Framework for transfers. Vercel’s server functions that process forms currently run in the Washington, D.C. region of the United States.

Retention periods

Contact enquiries that do not lead to collaboration: up to 12 months after the last communication in the business email inbox.
Unconfirmed newsletter requests: the address is not added to the recipient list. The confirmation link expires after approximately two days; on standard plans Resend retains the sent confirmation email and sending record for 30 days.
Confirmed newsletter subscriptions: until you unsubscribe or withdraw consent. A minimal unsubscribe record may be kept as long as necessary to prevent sending again without a new subscription.
Messages and sending records in Resend: 30 days on standard plans under the provider’s current policy. This does not shorten retention of a contact message delivered to the business inbox.
Plausible statistics: three years under the Starter plan we use. They do not contain the original IP address or a full browser record.
Vercel technical logs: depending on the active plan and settings, up to 30 days for available runtime logs.

Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction of processing or data portability; object to processing based on legitimate interest; and withdraw consent for the newsletter. Send your request to info@interiorstudioin.com. If you believe the processing does not comply with the rules, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

Changes

We will update this policy when forms, providers or processing practices change.