Data controller
MI-STAR d.o.o., Zamlačka ulica 28B, 10408 Velika Mlaka, Croatia, OIB 44816778493. Contact mistar@mistar.hr for questions or to exercise your rights.
Data and purposes
Infrastructure processes technical data such as IP address, request time and browser information to deliver and protect the website. If you contact us, we process the information you provide to respond, prepare an offer and perform a contract. Accounting and other mandatory records are processed to comply with legal obligations. Security and general business enquiries may rely on legitimate interests, taking your rights into account.
Services and recipients
Cloudflare delivers this website. Email links open your mail application; this website has no enquiry form that stores submissions in a database. Google infrastructure is used for email. Contracted IT, accounting and delivery providers and legally authorised public bodies may receive data as necessary. We do not embed advertising pixels or external fonts, or automatically load Google Maps.
Retention and transfers
Retention depends on the document category and processing purpose. Enquiries and offers are kept as needed to deal with the enquiry and negotiations; if they become part of contractual, accounting or other legally required records, the relevant category-specific periods apply to that part. Longer retention is limited to data needed to establish, exercise or defend a specific legal claim. Data is deleted when its purpose and applicable retention obligations end. An unsuccessful general enquiry does not automatically inherit invoice-retention periods. Infrastructure providers retain technical data according to delivery and security purposes and their applicable terms. Google and Cloudflare may process data outside the EEA. Their processing terms provide international-transfer safeguards, including standard contractual clauses where required: Cloudflare and Google. Contact mistar@mistar.hr for the applicable retention period and safeguards for your data.
Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, or object to processing based on legitimate interests. Consent can be withdrawn without affecting prior lawful processing. You may complain to the Croatian Personal Data Protection Agency at azop.hr. This website does not make automated decisions producing legal or similarly significant effects.