Privacy Policy & Cookies

Privacy Policy (GDPR)

Last updated: 5 March 2026.

This Privacy Policy explains how personal data of visitors and users of onesatori.com is processed.

1) Data Controller

Data Controller: Vanja Andrić
Location: Zagreb, Croatia
Privacy email: vanja@onesatori.com

I do not have a designated Data Protection Officer (DPO), as there is currently no legal obligation to appoint one.

2) What data I collect

Depending on how you use the website and contact channels, the following categories of data may be processed:

A) Data you provide

  • Contact form: name, email address, message content (and anything else you voluntarily share)
  • Email contact: email address, content of communication
  • WhatsApp contact: phone number and content of communication (WhatsApp is a third-party service)

B) Technical data

  • IP address (typically in server logs), device/browser type, basic technical data required for website loading and security.

C) Cookie-related data

Data about website usage and preferences, depending on which cookies you allow (details in the “Cookies” section).

3) Purposes and legal bases for processing

I only process personal data when there is a purpose and a legal basis for doing so.

  1. Responding to enquiries (contact form / email / WhatsApp)
  • Purpose: to respond to your enquiry and arrange communication or a session
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and/or steps taken at your request prior to a potential arrangement (Art. 6(1)(b) GDPR)
  1. Website operation and security (logs, protection against misuse)
  • Purpose: stable website operation, error detection and security monitoring
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
  1. Analytics and traffic measurement (e.g. Google Analytics — if/when enabled)
  • Purpose: to understand how the website is used and improve content/experience
  • Legal basis: consent (Art. 6(1)(a) GDPR) via cookie banner
  1. Newsletter (e.g. ConvertKit — if/when enabled)
  • Purpose: sending news and content you have requested
  • Legal basis: consent (Art. 6(1)(a) GDPR) — you may unsubscribe at any time
  1. Donations / support (e.g. Buy Me a Coffee, Revolut — if/when enabled)

Legal basis: performance of a transaction / contractual relationship (Art. 6(1)(b) GDPR) and/or legitimate interest (Art. 6(1)(f) GDPR)
Note: payment providers process some data as independent data controllers under their own privacy policies.

Purpose: processing the donation/support and related communication

4) Cookies and similar technologies

This website uses cookies and similar technologies:

  • Necessary cookies (required for website operation and basic functions) — do not require consent
  • Preference cookies (e.g. display settings) — usually with consent, depending on implementation
  • Statistical/analytical (e.g. Google Analytics) — only with consent
  • Marketing (e.g. pixels) — only with consent

Details, preference management and category examples are available in the “Cookie Policy” section below.

5) Embedded content (e.g. YouTube)

The website may contain embedded video content (e.g. YouTube). Embedded content behaves as though you have visited that third-party website and may set cookies or collect data, depending on your consent and their settings.

If you want maximum privacy, you can decline marketing/analytical cookies and/or avoid playing embedded video content.

6) Recipients and data processors

I do not sell or share personal data with third parties for marketing purposes.

Data may be processed by data processors necessary for website operation and communication, for example:

  • Hosting and infrastructure: Namecheap (hosting services for onesatori.com)

If/when additional services are enabled (e.g. Google Analytics, ConvertKit, donation platforms), they may process data in accordance with their own roles and policies. In that case I will update this policy and (where required) seek your consent.

7) Transfers to third countries (outside EU/EEA)

Some third-party services (e.g. Google, Meta/WhatsApp, newsletter platforms) may involve transfers of data outside the EU/EEA. Where relevant, transfers rely on appropriate safeguards (e.g. standard contractual clauses or other permitted mechanisms under GDPR), and on your consent where required.

8) Data retention periods

Enquiries (contact form/email/WhatsApp): generally up to 24 months, unless longer retention makes sense due to ongoing communication or legal obligations.

Technical logs: generally a shorter period, as needed for security and diagnostics.

Newsletter: until you unsubscribe (or withdraw consent).

Donations/payments (if introduced): in accordance with the rules and obligations of relevant payment providers and applicable legal requirements.

9) Your rights

Under GDPR you have the right to:

  • Access your data
  • Rectification
  • Erasure (“right to be forgotten”) where applicable
  • Restriction of processing
  • Data portability (where applicable)
  • Object (where processing is based on legitimate interest)
  • Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)

To exercise your rights, contact: vanja@onesatori.com.

10) Complaints to a supervisory authority

If you believe your rights have been violated, you may contact the supervisory authority:
Personal Data Protection Agency (AZOP), Croatia.

11) Security

I apply reasonable technical and organisational security measures to reduce the risk of unauthorised access, loss or misuse of data. However, no system is 100% secure.

12) Changes to this policy

I may update this policy from time to time (e.g. when I enable analytics, a newsletter or donations). The date of the last update is always shown at the top.

Cookie Policy

This Cookie Policy explains what cookies are and how we use them on onesatori.com.

1) What are cookies

Cookies are small text files stored in your browser or device. They help the website function correctly, remember preferences, measure traffic, or (with consent) display personalised content/ads.

2) Types of cookies that may be in use

Necessary (required)

  • required for website operation (e.g. security, basic functions)

Preference

  • remember your choices and settings (depending on the website/theme/plugins)

Analytical/statistical (e.g. Google Analytics — if/when enabled)

  • help understand website usage and improve content
  • activated only with your consent

Marketing (if/when pixels etc. are enabled)

  • used for tracking and targeted advertising
  • activated only with your consent

3) Managing cookies

You can control cookies in two ways:

  1. via the consent banner/settings on the website (if implemented)
  2. via your browser settings (blocking or deleting cookies)

Note: blocking necessary cookies may cause the website to malfunction.

4) Third-party cookies

If the website contains embedded content such as YouTube videos, or if analytical tools are enabled, third parties may set their own cookies. Their processing is governed by their own privacy policies.