PRIVACY &
LEGAL NOTICE

Legal notice

Business

DAVID MASH, obrt za multimedijalne usluge

Owner

David Mašić

Address

Stjepana Radića 116, 42205 Vidovec, Croatia

OIB (tax number)

02623968432

MBO (registration number)

97989169

Register

Obrtni registar (Register of Crafts), Varaždin

Email

mail@djdavidmash.com

Phone

+385 91 3497 918

Privacy policy

This policy explains what personal data this website processes, why, and which rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The business named above is responsible for your data. You can reach me at mail@djdavidmash.com.

2. Booking form

When you send the booking form, I receive your first and last name, email address, event type, date and venue, and — if you fill them in — your phone number, guest count, budget and message, plus the language and the page you sent it from. I use this only to answer your enquiry, check availability and prepare an offer.

Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before a contract). The form is processed by my hosting provider Netlify, which also filters out spam, and forwarded to my mailbox (Apple iCloud Mail).

3. Email, phone and WhatsApp

If you contact me directly, I use your details to reply and to organise your event (Art. 6(1)(b) GDPR). If you use WhatsApp, WhatsApp Ireland Ltd. processes the chat under its own privacy policy.

4. Hosting and visitor statistics

This website is hosted by Netlify, Inc. (USA). To deliver the site securely, Netlify processes technical data such as your IP address, date and time, the page visited and your browser type in server logs. From these logs I see anonymous statistics (page views, countries, referring websites); no cookies are used for this and you are not tracked across other websites.

Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in running a secure website and understanding how it is used. Transfers to the USA are covered by Netlify's data processing terms, which include the EU Standard Contractual Clauses.

5. Videos (YouTube)

The video section uses YouTube's privacy-enhanced mode (youtube-nocookie.com), provided by Google Ireland Limited. When you scroll near that section, the YouTube player is loaded from Google's servers, which transmits your IP address to Google. When you play a video, Google may store information on your device.

Legal basis: Art. 6(1)(f) GDPR — my legitimate interest in showing my work. The same clips are also on my Instagram profile.

6. Cookies and fonts

This website itself sets no cookies and uses no advertising or tracking tools. The fonts are hosted on this server, so no connection to Google Fonts is made.

7. How long data is kept

Enquiries that don't lead to a booking are deleted no later than 12 months after our last contact. If we work together, contract and invoice data are kept as long as Croatian tax and accounting law requires.

8. Your rights

Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). To use these rights, simply email mail@djdavidmash.com.

You can also complain to a supervisory authority — in Croatia the Personal Data Protection Agency (AZOP, Selska cesta 136, 10000 Zagreb, azop.hr) or the authority in your country.

9. Other

I don't sell your data or use it for advertising, and there is no automated decision-making. Providing your details is voluntary, but without them I can't reply to your enquiry. I update this policy when the website changes; the current version is always on this page.