Privacy Policy

1. Data Controller

GDPRGard.eu is operated by Zirlandia Milkovic, a freelance GDPR consultancy based in Rijeka, Croatia (EU), who is the data controller for all processing described in this policy. For data-related enquiries contact: hello@gdprgard.eu

2. What Data We Collect

• Contact form: Name, email address, website URL, and message content — collected via Formspree (formspree.io).
• Tool usage: Documents, text, or images you upload to any GDPRGard tool (ContractGuard, InvoiceExtract, HRForge, etc.) are sent to our server function and to Anthropic's API for processing. We do not store these files or their contents.
• Cookies: Necessary session cookies only by default. Analytics cookies only with your explicit consent.

3. Legal Basis for Processing (Art. 6 GDPR)

• Contact form data: Consent (Art. 6(1)(a)) — you voluntarily submit this data to request a consultation or expert review.
• Tool processing: Legitimate interest (Art. 6(1)(f)) — necessary to provide the service you requested.
• Necessary cookies: Legitimate interest (Art. 6(1)(f)) — required for the website to function.
• Analytics cookies: Consent (Art. 6(1)(a)) — only activated after your explicit acceptance.

4. Third-Party Recipients

• Anthropic (anthropic.com): Processes the content of your uploads and requests via API to generate the tool's output. US-based, operates under Standard Contractual Clauses for EU data transfers.
• Formspree (formspree.io): Processes contact form submissions when you request an expert review or send an enquiry. US-based, operates under Standard Contractual Clauses.
• Netlify (netlify.com): Hosts this website and injects a small performance-telemetry script (Netlify RUM) that reports aggregate page-load timing to Netlify as part of the hosting service; it sets no cookies and does no cross-site tracking. US-based, operates under Standard Contractual Clauses for EU data transfers. Legal basis: legitimate interest (Art. 6(1)(f)) in operating and monitoring the availability of the site.

5. Data Retention

• Contact form submissions: retained by Formspree per their policy (90 days on the free plan).
• Uploaded documents and tool inputs: not stored by us — processed in real time and discarded when your session ends.
• Cookie consent choices: stored in your browser for 365 days.

6. Your Rights (Art. 15–22 GDPR)

You have the right to: access your data, correct inaccuracies, request deletion, restrict processing, data portability, and object to processing. To exercise any right, email hello@gdprgard.eu. We will respond within 30 days.

7. Complaints

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr

8. Changes to This Policy

If our architecture or third-party services change, this page is updated to reflect that — we don't let this page go stale while the product changes underneath it.

9. Contact

Data controller contact for privacy matters: hello@gdprgard.eu · gdprgard.eu