Privacy Policy

Last updated: 5 November 2026

This Privacy Policy explains how we process the personal data of visitors to medium29.com and people who send us an enquiry through the contact form, email or another communication channel.

1. Data controller

MEDIUM 29, sole proprietorship, owner Miodrag Popadić
Borovo, Croatia
Email: info.medium29@gmail.com
Website: medium29.com

2. What information we collect

Information you provide

• first and last name;
• email address;
• phone number, if you choose to provide one;
• company or brand name, if you choose to provide it;
• service of interest and approximate budget;
• message content and any other information you choose to provide.

Technical information

To keep the website secure, functioning properly and protected from spam, technical information such as IP address, request date and time, browser details, referring page and similar network identifiers may be processed. An IP address is considered personal data.

Please do not enter special-category or other sensitive personal data in free-text fields unless it is necessary for your enquiry.

3. Purposes and legal grounds

• Responding to enquiries, preparing quotes and taking pre-contractual steps — processing is necessary to respond to your request and, where relevant, provide a proposal or begin cooperation.
• Website security, prevention of spam and misuse — processing is based on our legitimate interest in protecting the website, communications and business operations.
• Performance of contracts and legal obligations — if a business relationship starts, certain information is processed to perform the contract and meet accounting, tax and other legal obligations.
• Optional analytics and marketing tools — if used, they are activated only with your consent through cookie settings, unless the law permits otherwise for strictly necessary technologies.

4. Contact form and Web3Forms

Our contact form uses the service Web3Forms / Web3Creative. When you submit the form, its contents are transmitted to the provider to process and deliver your message to our email address. Medium29 is the controller for data entered in our form, while Web3Forms states that it acts as a processor.

According to Web3Forms' current policy, its infrastructure may use providers such as Amazon Web Services, Cloudflare and Hetzner. To prevent spam, sender IP addresses and email addresses may be checked through anti-spam services. Web3Forms states that transfers outside the EEA, when applicable, are subject to appropriate safeguards, including standard contractual clauses.

More information: Web3Forms Privacy Policy.

5. hCaptcha protection against automated misuse

The contact form uses hCaptcha to distinguish real users from automated bots and reduce spam. The provider may process technical data necessary to assess security and determine whether a request is automated. We use hCaptcha to protect the form, not for our own advertising.

More information: hCaptcha Privacy Policy.

6. Hosting, network security and technical providers

Our website is hosted via Cloudflare Pages. Cloudflare may process technical data required to deliver content, provide network security, prevent misuse and operate the website reliably. Email communication is processed by our email service provider.

The website loads some technical resources, including web fonts and software libraries, from third-party servers. Those providers may receive an IP address and basic request details. We do not use these resources to create visitor profiles.

7. Data recipients

We do not sell personal data. It may be disclosed where necessary to meet the purposes described above, such as to hosting, security, contact-form, CAPTCHA, email and IT providers, or to authorities where required by law.

8. International data transfers

Some technical providers may operate or use infrastructure outside the European Economic Area. Where transfers occur, safeguards required by applicable law are used, such as adequacy decisions or standard contractual clauses, depending on the provider and circumstances.

9. Data retention

We retain enquiry data only as long as reasonably necessary to respond, communicate, prepare and follow up on a proposal, and potentially establish or defend legal claims. Where a business relationship begins, contract, invoicing and business records are retained for periods required by law.

Technical providers may have their own retention periods. Web3Forms states in its current policy that submitted form data may be retained for up to three years, unless a shorter period applies to a particular plan or the data is deleted earlier.

10. Cookies and similar technologies

Detailed information about local storage, cookies, CAPTCHA protection and consent management is provided in our Cookie Policy. You can reopen the settings at any time via the Cookie settings.

11. Your rights

Depending on the circumstances and legal basis, you may have rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent without affecting the lawfulness of processing before withdrawal.

For privacy enquiries or to exercise your rights, contact info.medium29@gmail.com. We will respond within the deadlines prescribed by applicable law.

If you believe your rights have been infringed, you may lodge a complaint with Croatia's supervisory authority, the Personal Data Protection Agency (AZOP).

12. Required information and automated decisions

Fields marked with an asterisk are required to receive and process your enquiry. Other fields are optional. We do not make automated decisions based on contact form data that produce legal effects for visitors.

13. Security

We apply reasonable technical and organisational safeguards appropriate to our website and the data processed. No transmission or system can guarantee absolute security, so we cannot promise that all risks are eliminated.

14. Changes to this policy

We may update this Policy from time to time as the website, services or legal requirements change. The last update date appears at the top of this document.