Privacy Policy

Data controller and contact

The data controller is LOVE FORMULA, obrt za usluge, owned by Petra Pinjuh, Ulica Frana Bošnjakovića 8, 10000 Zagreb, Croatia, Croatian tax identification number (OIB): 62058824289, registration number (MBS): 98833839. The business is registered in the Croatian Trades Register.

For privacy questions or to exercise your rights, contact petra@love-formula.eu. Further business details are available in our Legal Notice.

Contact form and direct communication

When you send an enquiry through the form or directly by email, we process your name, email address, selected topic, message, submission time and the minimum technical data required to handle the request securely. We use this information to receive and answer your message and, where requested, take steps towards a possible engagement.

For enquiries about a possible service, the legal basis is taking steps at your request before entering into a potential contract under Article 6(1)(b) GDPR. For general, media and other enquiries, we rely on our legitimate interest in responding to a message you have sent us under Article 6(1)(f) GDPR.

The required fields are necessary to receive and answer your enquiry. The form cannot be submitted without them. Messages are not stored in a separate website database: they are processed on Vercel, sent through Resend and delivered to Petra’s Google Workspace business mailbox. After submission, you receive a short acknowledgement without a copy of your enquiry.

Please do not include health or diagnostic information, or unnecessary highly intimate details, in your first enquiry. The contact form is not an emergency channel.

Love Formula updates

If you voluntarily sign up for Love Formula updates, we process your email address, signup language and source, the version of the consent text, and the time of the request and confirmation. The purpose is to send occasional articles by Petra and event or workshop announcements, and to keep evidence of a valid signup.

You can request signup through the dedicated updates form or by selecting the voluntary, initially unticked checkbox in the contact form. The legal basis is your consent under Article 6(1)(a) GDPR. Signup is not a condition for sending an enquiry or using another service. A subscription becomes active only after confirmation by email, and the confirmation link expires after seven days.

You can withdraw consent at any time through the unsubscribe link in a newsletter or by emailing petra@love-formula.eu. Withdrawal does not affect the lawfulness of earlier processing. After you unsubscribe, we stop sending updates and retain only the minimum record needed to demonstrate the earlier consent and prevent unwanted messages.

Ask Petra

You can read previously published and anonymised questions on the website, but we do not currently accept new submissions through Ask Petra. Before activating such a form, we will update this policy and publish a separate notice with the form. A question will not be published without separate permission and editorial anonymisation.

Website statistics

We use Plausible Analytics for aggregate website statistics in a configuration without cookies, local storage or persistent identifiers. Plausible records information such as the page visited, referral source, device type, operating system, browser and approximate country or region. The raw IP address and full User-Agent are not stored, and visitor data is processed within the European Union.

Names, email addresses and form contents are not sent to Plausible. The purpose is to understand general website use and improve its content. We rely on our legitimate interest under Article 6(1)(f) GDPR for this limited measurement, using a setup designed to minimise the impact on privacy.

Further details are available in our Cookie and Similar Technologies Policy.

Technical and security data

When you load the website or use a form, the hosting service may process your IP address, request time, requested URL, browser and device type, and security logs. We use this information only to deliver the website, prevent abuse, detect errors and protect the service, based on our legitimate interest in operating a secure and reliable website. We do not use it for marketing profiles.

Recipients and service providers

Only to the extent required for their role, data may be processed by Petra, another expressly authorised Love Formula person and the following providers:

• Vercel Inc. — hosting, website delivery and server-side form processing;
• Plus Five Five, Inc. (Resend) — contact, confirmation and newsletter email delivery, and newsletter contact management;
• Google LLC (Google Workspace) — Petra’s business mailbox and email communication;
• Plausible Insights OÜ — aggregate web analytics without cookies.

We may disclose data to professional advisers or competent authorities only where necessary to protect legal rights or comply with a legal obligation.

Transfers outside the European Economic Area

Vercel, Resend and Google may involve processing or subprocessors outside the EEA. Where personal data is transferred to a country without an adequacy decision, the transfer relies on an appropriate safeguard, such as the European Commission’s Standard Contractual Clauses and additional security measures. According to Plausible, visitor data in its analytics service is processed and stored within the European Union.

How long we keep data

• A contact enquiry that does not lead to an engagement is kept for no longer than 12 months after the last communication. If a business relationship begins, relevant information is kept under the legal and contractual periods applicable to that relationship.
• A newsletter confirmation link is valid for seven days. According to its current documentation, Resend retains sent email data for 30 days.
• An active newsletter subscription is kept until you unsubscribe or withdraw consent. We may keep a minimal record of the signup, confirmation and unsubscribe for up to five years after the subscription ends to demonstrate compliance and prevent unwanted messages.
• Vercel runtime logs are kept for no longer than 30 days in the current configuration.
• Aggregate Plausible statistics are kept while the analytics account remains active or until we delete them earlier.

We keep information longer only where required by law or needed to establish, exercise or defend legal claims. When information is no longer needed, we delete or irreversibly anonymise it.

Your rights

Subject to the conditions in applicable law, you may request access to, correction or deletion of your data, restriction of processing and data portability, and you may object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact petra@love-formula.eu. We will respond without undue delay and no later than one month, unless the law allows an extension. We may request reasonable proof of identity before acting on a request.

If you believe your data is not being processed lawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr, or with the competent supervisory authority where you live or work.

Automated decisions and security

We do not use automated decision-making or profiling that produces legal or similarly significant effects. We apply reasonable technical and organisational safeguards, including encrypted transmission, limited access, server-side form validation and protected secret keys. No internet service can, however, guarantee absolute security.

Changes to this policy

This version applies from 25 August 2026. We will update the policy when processing purposes, providers, retention periods or website features change. The latest update date will always be shown at the top of the page.