Privacy

Privacy Policy

Last updated: 23 September 2026.

This policy explains how TOTAL BAU d.o.o. za graditeljstvo i consulting processes personal data of visitors to the public website totalbau.hr. It describes the processing associated with browsing the website, sending contact enquiries and, only with consent, web analytics in clear terms.

1. Data controller

TOTAL BAU d.o.o. za graditeljstvo i consulting
Martina Divalta 166, Osijek, Republic of Croatia
OIB: 94407729666
Email: igor.totalbau@gmail.com
Phone: +385 91 511 1150

For privacy questions or to exercise your rights, please use the email address above.

2. What data we process and why

Contact enquiries

When you contact us through the form, we process your name, email address, message and time of submission. To protect the form against automated abuse, a cryptographic hash of the IP address is used briefly to limit the number of requests.

The purposes are to respond to your enquiry, communicate about a potential project or business cooperation, and protect the form from abuse. The legal bases are taking steps at your request before a possible contract, our legitimate interest in conducting business communication and maintaining system security, and compliance with legal obligations where applicable.

Technical data and security

Server and network infrastructure may process standard technical request data, such as IP address, access time, requested URL, browser type and information needed for security and reliable delivery. These data are used to operate, protect and diagnose the website.

Privacy choice

We store your analytics choice, consent configuration version and time of decision in your browser's local storage. This storage is necessary so that the website does not ask for the same choice repeatedly, and it is not sent to our database.

Google Analytics 4

With your consent, we use Google Analytics 4, Measurement ID G-098EBRQ8BD, to measure website use and improve its content. Google Analytics may process data about pages visited, events, approximate location, device, browser, traffic source and time spent using the website. Analytics does not load or send data to Google before consent.

The legal basis for analytics is your consent. You can withdraw it at any time using the “Cookie settings” link in the footer, without affecting the lawfulness of processing carried out before withdrawal.

3. Recipients and service providers

Depending on the function used, data may be processed by the providers of hosting, network protection and website delivery, by email delivery and receipt providers, and by Google after consent to Analytics. Contact messages are technically forwarded via Resend to TOTAL BAU's email address. Providers receive data only to the extent needed for their service and subject to applicable contractual and security measures.

Links to Instagram and external sources in articles do not load their content within this website. Clicking a link takes you away from totalbau.hr; further processing is governed by the external website you choose.

4. International transfers

Some service providers, including Google, may also process data outside the European Economic Area. Where applicable, transfers rely on an adequacy decision, including the EU–US Data Privacy Framework for certified US recipients, or on standard contractual clauses and additional safeguards. The current mechanism depends on the provider, its role and the applicable service terms.

5. Retention periods

  • Data sent through the contact form — name, email address, message and any other information you choose to provide — are retained only as long as needed to handle and respond to the enquiry, and for no longer than 12 months after the communication ends. If the correspondence results in an offer, contractual relationship, project or other business documentation, relevant data may be retained further under another applicable legal basis and the retention periods for business records.
  • The cryptographic hash of the IP address used to limit abuse is retained for approximately 10 minutes.
  • The privacy choice is valid for up to 180 days, or until the choice or consent system version changes.
  • For user-level and event-level data subject to the Google Analytics 4 retention setting, the TOTAL BAU GA4 property is set to 14 months. This setting does not mean that all aggregated Analytics reports automatically disappear after 14 months.

6. Your rights

Depending on the circumstances and legal basis, you may request access to, rectification or erasure of personal data, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

Please send your request to igor.totalbau@gmail.com. To protect the data, we may ask for reasonable identity verification before acting on a request.

If you believe your rights have been infringed, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10 000 Zagreb, or through its official complaint form.

7. Required information and automated decision-making

Information marked as required in the contact form is needed so that we can respond to the enquiry. We do not use automated decision-making or profiling that would produce legal or similarly significant effects for visitors.

8. Cookies and changing your choice

Details of browser storage and Google Analytics cookies are set out in the Cookie Policy. You can change your choice at any time.

9. Changes to this policy

We will update this policy when our processing activities, service providers or applicable requirements change. The date of the latest update will appear at the top of the page.