Privacy policy
We collect as little as possible, keep it as briefly as possible, and never sell any of it. This page says exactly what happens to your data under the GDPR — in plain language.
1 — Who we are
Epicdigital, a web development and digital marketing studio registered in Split, Croatia. We are the data controller for this website within the meaning of Art. 4(7) GDPR. You can reach us at info@epicdigital.eu.
2 — What we collect, and why we're allowed to
Only what you give us and the minimum needed to run the site. For each purpose, the GDPR legal basis:
- Contact form data — name, email, company and your brief. Used only to reply to you and prepare a proposal. Legal basis: steps prior to entering a contract, Art. 6(1)(b) GDPR.
- Newsletter email — only if you subscribe. One email a month; unsubscribe in every issue. Legal basis: your consent, Art. 6(1)(a) GDPR, withdrawable at any time.
- Anonymous analytics — visit counts and pages viewed, first-party only, no cross-site tracking. Set only if you opt in via the cookie banner. Legal basis: your consent, Art. 6(1)(a) GDPR.
- Technical logs — short-lived server logs (IP address, timestamp) needed to keep the site secure and running. Legal basis: our legitimate interest in operating the site securely, Art. 6(1)(f) GDPR.
We don't collect special categories of data, we don't profile you, and no decision about you is made by automated means.
3 — Cookies
Three categories, controlled by the banner shown on your first visit. Analytics and marketing cookies are set only after you opt in — never by default.
| Category | Purpose | Duration |
|---|---|---|
| Necessary | Session, security and storing your cookie choice | 12 months |
| Analytics | Anonymous visit counts, first-party only | 13 months |
| Marketing | Remembers which campaign brought you here | 30 days |
The full list lives in the cookie policy. You can change your choice at any time:
4 — Who sees it
Nobody buys or receives your data for advertising. Your data is handled only by us and by the service providers we need to run the site — hosting and email infrastructure — acting as processors under Art. 28 GDPR agreements, on our instructions only. We store and process data within the EU/EEA; if a provider ever processes data outside it, we rely on the safeguards of Chapter V GDPR (adequacy decisions or Standard Contractual Clauses). We disclose data beyond that only if the law requires it.
5 — How long we keep it
Enquiries are kept for as long as the conversation is live, then archived for two years to meet accounting and legal obligations, then deleted. Newsletter data is kept until you unsubscribe. Analytics data is aggregated and holds nothing that identifies you. Server logs are rotated within days.
6 — Your rights
Under the GDPR you can, at any time and free of charge:
- access — ask for a copy of everything we hold about you (Art. 15),
- rectification — have inaccurate data corrected (Art. 16),
- erasure — have your data deleted (Art. 17),
- restriction — limit how we use it while a question is resolved (Art. 18),
- portability — receive the data you gave us in a machine-readable format (Art. 20),
- objection — object to processing based on legitimate interest (Art. 21),
- withdraw consent — for the newsletter or for analytics and marketing cookies, as easily as you gave it, without affecting processing that happened before (Art. 7(3)).
Write to info@epicdigital.eu and we respond within one month. You also have the right to complain to a supervisory authority — in Croatia that is AZOP, the Personal Data Protection Agency (azop.hr), or the authority in your own EU country.
7 — Changes & contact
If this policy changes we update the date at the top of the page; material changes are flagged on the site. Questions or requests go to info@epicdigital.eu — a human reads every message.