Privacy Policy

Last updated: April 2026

DeseiRose d.o.o. ("we", "us", "our") operates the website deseirose.com. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website or contact us.

Data controller

DeseiRose d.o.o.
Ulica kralja Zvonimira 27
21000 Split, Croatia
Email: petar@deseirose.com

What data we collect

Email correspondence. If you contact us by email, we process your email address and any information you include in your message. We use this data solely to respond to your inquiry and, where relevant, to discuss potential advisory or consulting engagements.

The legal basis for this processing is our legitimate interest in responding to business inquiries (Article 6(1)(f) GDPR) and, where applicable, taking steps at your request prior to entering into a contract or performing a contract (Article 6(1)(b) GDPR).

Analytics data. We use Google Analytics 4 (GA4) and Google Tag Manager in connection with our website. Depending on your consent choice and the way analytics is configured on your device, this may involve processing information such as your IP address, browser type, device information, pages visited, referring URLs, and time spent on the website.

The legal basis for analytics processing is your consent (Article 6(1)(a) GDPR). Analytics-related cookies and analytics storage are activated only after you grant consent through our cookie banner or cookie controls.

Google may process analytics-related data under its own privacy documentation and terms.

Google Fonts. This website loads fonts provided by Google. When your browser requests these fonts from Google servers, technical data such as your IP address may be transmitted to Google as part of that request.

Cookies and consent

This website uses a cookie consent tool to manage optional cookies. By default, no analytics cookies are set. Analytics-related cookies are activated only after you provide consent via the cookie banner on your first visit.

If you accept analytics cookies, Google Analytics 4 may set measurement cookies used to distinguish visitors, measure traffic, and understand website usage. The exact cookies set may vary depending on Google's current implementation and configuration.

If you decline analytics cookies, or later withdraw your consent, analytics storage remains denied and analytics cookies are not set. Any previously set analytics cookies should be removed via your browser settings.

We do not use advertising cookies, remarketing cookies, or third-party marketing trackers on this website.

Cookie duration and consent management

Your consent choice is stored so that the cookie banner does not reappear on every visit. Analytics cookie duration depends on Google's current configuration and may vary by cookie.

You can change or withdraw your consent at any time via the "Manage cookies" link in the site footer. You can also delete cookies via your browser settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Purposes of processing

We process personal data for the following purposes:

  • responding to incoming inquiries
  • communicating about potential business engagements
  • understanding website usage and improving the website, where consent has been given
  • managing website tags and consent choices
  • ensuring basic website operation and security

Recipients of data

We do not sell or rent your personal data.

We may share data with service providers acting on our behalf where necessary for website operation, font delivery, tag management, and analytics, including:

  • Google LLC, as our provider for analytics, tag management, and font delivery
  • technical hosting, domain, or website infrastructure providers, if and to the extent required for operating the website

International transfers

Some service providers, including Google, may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, where required.

Data retention

Email correspondence is retained only for as long as necessary to handle the communication and any related follow-up, typically no longer than 24 months after the last relevant interaction unless a longer retention period is required by law or justified by an ongoing business relationship.

Analytics data retention is governed by our Google Analytics settings and related Google service defaults, after which it is deleted or aggregated according to Google's configuration.

Your rights

Under the GDPR, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate personal data
  • request deletion of your personal data
  • request restriction of processing
  • object to processing based on legitimate interests
  • receive your data in a portable format where applicable
  • withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing before withdrawal
  • lodge a complaint with the competent supervisory authority

If you are in Croatia, the competent supervisory authority is the Croatian Personal Data Protection Agency (AZOP).

To exercise your rights or ask questions about this Privacy Policy, contact us at petar@deseirose.com.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, together with the updated revision date.