Privacy Policy
Last updated: 24 October 2026.
Data controller
TB Development (obrt za računalno programiranje)
Owner: Toni Barišić
Dračevac 82A, 21000 Split, Republic of Croatia
Tax ID (OIB): 86519712812
Email: info@tonibarisic.com
What we collect
When you submit the project inquiry form on this website, we collect:
- Your name
- Email address
- Phone number
- Your project needs and budget range
- The project description you write in the form
Why we collect it
We use the form data solely to respond to your project inquiry and provide a quote. We do not use it for marketing, and we do not sell or share it with third parties beyond those listed in this policy.
Legal basis
Processing is based on Article 6(1)(b) of the General Data Protection Regulation (GDPR), as processing is necessary to take steps at your request prior to entering into a contract.
Who receives your data
Your form submission is delivered via Resend (Resend Inc., San Francisco, USA). Resend is a data processor that handles data under a Data Processing Agreement and applies appropriate safeguards for transfers of personal data outside the European Economic Area, in accordance with GDPR Chapter V.
Your inquiry arrives in our mailbox at Hostinger (Hostinger International Ltd., Cyprus, EU), which stores it as a data processor.
This website is hosted on Vercel (Vercel Inc., USA), which as a data processor handles technical visit data (e.g. IP addresses) in server logs. Vercel is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of protection for data transfers.
Outside of these processors (and those in the business contacts section below), we do not share your personal data with anyone.
How long we keep it
We retain inquiry data for up to two (2) years from the date of your submission, or for the duration of our business relationship if a project proceeds, whichever is longer. Data is then permanently deleted.
Business contacts and emails we send
If we contacted you first by email, we took your business contact details (company name, publicly listed email address and phone number, website address) from public sources such as your website and business directories. We use them to offer a service that could be useful to your business. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
We keep these details in a database on Supabase (Supabase Inc., USA) and send the emails through Resend. Both are data processors that apply the European Commission’s standard contractual clauses for transfers outside the EEA.
You can unsubscribe through the link in every email or by replying to it. We then stop writing to you and keep your email address only on a list of unsubscribed addresses, so we don’t write to you again. On request we delete everything else. If you don’t respond, we delete the details at the latest two years after our last contact.
Your rights
Under GDPR you have the following rights:
- Right of access: request confirmation of whether we process your data and a copy of it.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your personal data.
- Right to restriction: request a temporary halt to processing.
- Right to portability: request your data in a machine-readable format.
- Right to object: object to processing based on legitimate interest.
To exercise any right, email info@tonibarisic.com. We will respond within 30 days.
Supervisory authority
You have the right to lodge a complaint with the Croatian data protection supervisory authority: AZOP, Agencija za zaštitu osobnih podataka, azop.hr.
Cookies and analytics
With your consent we use Google Analytics(Google Ireland Ltd.) to see which pages are visited, where visitors come from and how long they stay. Google Analytics sets cookies (_ga) and does not store your IP address. Google may transfer data to the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. We don’t use the data for ads or remarketing. The legal basis is your consent (Article 6(1)(a) GDPR).
Without your consent Google Analytics does not load. You can withdraw consent at any time via the “Cookie settings” link in the page footer, after which we delete the Google Analytics cookies. More on how Google processes data: policies.google.com/privacy.
We remember your cookie choice in your browser (localStorage), so we don’t ask on every page; this is necessary for the site to work. We also use Vercel Web Analytics, which counts visits without cookies and without tracking visitors across pages or days, so it needs no consent. Google Search Console is used only to review search rankings; it collects no data about you on this site.
Changes to this policy
If we update this policy, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email if we are in contact.