PRIVACY POLICY

Effective Date: 01.06.2026

1. Introduction

1.1. This Privacy Policy (hereinafter: the "Policy") describes how LIMETA STUDIO, with its registered office at Filipa Grabovca 4, 23000 Zadar, Republic of Croatia, OIB: 08136747276 (hereinafter: the "Data Controller", "We", "Us", or "Our"), collects, processes, uses, stores, and protects the personal data of visitors and users of the website www.local-guidebook.com (hereinafter: the "Website"). 1.2. This Policy has been compiled in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR)

  • The Act on the Implementation of the General Data Protection Regulation (Official Gazette - NN 42/2018)

  • Other applicable regulations of the Republic of Croatia and the European Union. 1.3. The protection of your personal data is of utmost importance to us. We collect and process only those data that are necessary to provide our services, in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

2. Data Controller

2.1. The Data Controller for personal data is: LIMETA STUDIO, craft for digital design, marketing, and graphic consulting Registered office address: Filipa Grabovca 4, 23000 Zadar, Republic of Croatia OIB: 08136747276 E-mail: nevena.moslavac@limetastudio.com Phone: +385 95 8444 054 (hereinafter: the "Service Provider" or "We") 2.2.For all questions related to the protection of personal data, you can contact us via the e-mail address provided above.

3. What Personal Data We Collect

3.1. The Website collects personal data in the following ways:

3.1.1. Contact Form

When you contact us via the contact form on the Website, we collect the following data that you voluntarily enter:

Data TypePurpose of CollectionNameSender identification and personalization of communicationE-mail addressResponding to your inquiryMessageProcessing the content of your inquiry

3.1.2. Automatically Collected Data (Google Analytics)

The Website uses Google Analytics, a web analytics tool provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze Website usage. Google Analytics collects the following data through cookies:

  • Anonymized IP address (the IP anonymization function – anonymizeIp – is activated)

  • Browser type and operating system

  • Date and time of visit

  • Pages you visited on the Website

  • Referral URL (the source from which you arrived)

  • Geographic location (at the country/region level, not precise location)

  • Visit duration and interactions on the page

  • Device type (desktop, mobile, tablet)

Note: Google Analytics does not collect data that personally identifies you (such as name, e-mail, or address). All data collected via Google Analytics is used in an anonymized and aggregated form.

3.1.3. Data We Do NOT Collect

The Website does not collect:

  • Payment or financial data

  • Data for user account registration

  • Social media data

  • Biometric data

  • Special categories of personal data (health data, religious beliefs, political views, etc.)

3.1.4. Data for Claiming Benefits and Booking Inquiries

When using specific features of the Platform (such as designated inquiry forms to request a quote or book a service from our featured Partners, e.g., Rent-a-car), we may collect the data necessary to forward and identify your inquiry with the selected Partner. This includes data from the specific contact form, which is transferred directly to the chosen Partner solely for the realization of the requested service.

3.1.5. Free Content Downloads and Newsletter

If you choose to download our digital content (e.g., e-books, guides, recommendation lists), we collect your e-mail address and, optionally, your name. This data is used exclusively to deliver the requested content and occasionally send notifications about new benefits, provided you have given your consent.

4. Purpose and Legal Basis of Processing

4.1. We process personal data for the following purposes and on the following legal bases:

Purpose of ProcessingLegal Basis (GDPR Article)Data CategoryResponding to inquiries via the general contact formArt. 6 (1) (b) – taking steps at the request of the data subject prior to entering into a contract; Art. 6 (1) (f) – legitimate interestName, e-mail, messageWebsite usage analysis (statistics)Art. 6 (1) (a) – user consentAnonymized IP address, browser data, on-site behaviorImproving user experience and Website contentArt. 6 (1) (f) – legitimate interestAggregated analytical dataProtecting Website securityArt. 6 (1) (f) – legitimate interestTechnical access dataForwarding inquiries to Partners (Lead Generation)Art. 6 (1) (b) – performance of a contract or taking steps at the request of the data subject; Art. 6 (1) (f) – legitimate interestName, e-mail, inquiry contentDigital content delivery and marketing communicationArt. 6 (1) (a) – user consentName, e-mail

5. Cookies

5.1. The Website uses cookies – small text files stored on your device when you visit the Website. 5.2. Types of cookies we use:

5.2.1. Strictly Necessary Cookies

  • Purpose: Enable basic Website functionalities (navigation, security, access to secure areas).

  • Legal Basis: Art. 6 (1) (f) GDPR – legitimate interest.

  • Duration: Until the end of the session (session cookies) or up to 1 year.

  • Consent is not required for these cookies as they are essential for the functioning of the Website.

5.2.2. Analytical Cookies (Google Analytics)

  • Purpose: Collecting anonymized statistical data about Website usage (number of visitors, most popular pages, bounce rate, etc.).

  • Legal Basis: Art. 6 (1) (a) GDPR – user consent.

  • Provider: Google LLC.

  • Duration: Up to 26 months.

Cookie NamePurposeDuration_gaDistinguishes unique users2 years_ga_[ID]Stores and maintains session state2 years_gidDistinguishes users24 hours_gatThrottles request rate1 minute

5.3. Cookie Management

5.3.1. Upon your first visit to the Website, a cookie banner will appear, giving you the option to:

  • Accept all cookies

  • Reject optional (analytical) cookies

  • Customize cookie settings

5.3.2. You can withdraw your consent for analytical cookies at any time via the cookie settings on the Website or through your browser settings. 

5.3.3. You can delete or block cookies through your browser settings. Instructions for popular browsers:

  • Google Chrome: chrome://settings/cookies

  • Mozilla Firefox: Settings > Privacy & Security

  • Safari: Preferences > Privacy

  • Microsoft Edge: Settings > Cookies and site permissions 

5.3.4. You can prevent tracking by Google Analytics by installing the browser add-on: https://tools.google.com/dlpage/gaoptout

5.3.5. Note: Blocking necessary cookies may affect the functionality of the Website.

6. Sharing Data with Third Parties

6.1. We do not sell, rent, or lease your personal data to third parties for marketing purposes. 

6.2. We may share data with the following categories of recipients, strictly to the extent necessary for the specified purposes:

RecipientPurposeLocationSafeguards Google LLC(Google Analytics)Website usage analysisUSAEU-U.S. Data Privacy Framework; Standard Contractual Clauses (SCC) Hosting Service Provider Website storage and servingEU/EEAData Processing Agreement Partner Business Entities (Partners) Realization of inquiries, bookings, or assigning exclusive benefitsRepublic of Croatia / EUCooperation Agreement and confidentiality obligations

6.3. We may disclose data if legally required to do so – at the request of a competent court, state attorney's office, or other authorized bodies of the Republic of Croatia. 

6.4. Note on the Affiliate Model: When using promotional codes or links to Partner websites, the system may record an anonymized identifier so the Partner knows the inquiry originated from the Local Guidebook Platform. As a rule, this data does not directly identify you, but serves to calculate fees between the Service Provider and the Partner.

7. Data Transfer Outside the EU/EEA

7.1. By using Google Analytics, certain anonymous data may be transferred to Google LLC servers in the United States. 

7.2. Google LLC participates in the EU-U.S. Data Privacy Framework and applies Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of data protection in line with the GDPR. 

7.3. More information on how Google processes data can be found at: https://policies.google.com/privacy

8. Data Retention Period

8.1. We store personal data only as long as necessary to fulfill the purpose for which it was collected:

Data CategoryRetention PeriodContact form data (name, e-mail, message)Up to 12 months from receipt of the inquiry, or until the inquiry is resolved + 6 months, whichever is longer.Google Analytics dataUp to 26 months (according to Google Analytics settings), after which it is automatically deleted.CookiesAccording to the duration specified in the table in Section 5.Marketing and newsletter dataUntil consent is withdrawn (unsubscribing from the list).

8.2. Upon expiration of the specified periods, data is permanently deleted or anonymized.

9. Your Rights

9.1. Pursuant to the GDPR, you have the following rights regarding your personal data:

  • 9.1.1. Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether we are processing your personal data, and if so, access to that data and information about the processing.

  • 9.1.2. Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data or the completion of incomplete data.

  • 9.1.3. Right to erasure – "the right to be forgotten" (Art. 17 GDPR): You have the right to request the deletion of your personal data when the data is no longer needed, you withdraw consent, you object to the processing, or the data was processed unlawfully.

  • 9.1.4. Right to restriction of processing (Art. 18 GDPR): You have the right to request a restriction of processing in specific cases prescribed by the GDPR.

  • 9.1.5. Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

  • 9.1.6. Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data based on legitimate interest.

  • 9.1.7. Right to withdraw consent (Art. 7 (3) GDPR): If processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9.2. How to Exercise Your Rights

To exercise any of these rights, please contact us at e-mail: nevena.moslavac@limetastudio.com

We will endeavor to respond to your request within 30 days of receipt. In exceptional circumstances, this period may be extended by an additional 60 days, of which you will be notified in a timely manner.

9.3. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR or other applicable regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

Agencija za zaštitu osobnih podataka Selska cesta 136, 10000 Zagreb, Republic of Croatia Phone: +385 1 4609 000 E-mail: azop@azop.hr Web:https://azop.hr

10. Data Security

10.1. We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, alteration, or unauthorized disclosure, including:

  • SSL/TLS encryption (HTTPS) for secure communication

  • Regular updates of systems and software components

  • Restricting access to personal data only to authorized persons

  • Regular data backups 10.2. Despite the measures taken, complete security of data transmission over the Internet cannot be guaranteed. Users use the Website at their own risk.

11. Processing of Minors' Data

11.1. The Website is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 16 without parental or guardian consent, we will take steps to delete that data.

12. Changes to the Privacy Policy

12.1. We reserve the right to modify this Privacy Policy at any time. All changes become effective on the day of their publication on the Website. 12.2. The date of the last modification is indicated at the top of this document. We recommend checking this page regularly. 12.3. In the event of significant changes affecting how your data is processed, we will endeavor to notify you in an appropriate manner (e.g., via a prominent notice on the Website).

13. Contact

For all questions regarding this Privacy Policy or the processing of your personal data, please contact:

  • Business Name: LIMETA STUDIO, obrt za digitalni dizajn, marketing i grafičko savjetovanje

  • E-mail: info@limetastudio.com

  • Phone: +385 95 8444 054

  • Address: Filipa Grabovca 4, 23000, Zadar, Republic of Croatia

This Privacy Policy enters into force on 01.06.2026 and shall apply until further notice.