Privacy Policy — Serafini d.o.o.

This website and its newsletters are operated by Serafini d.o.o., a company registered in Croatia ("Serafini," "we," "us," or "our").

• Registered address: Horvatovac 76B, Zagreb, Croatia
• OIB (company ID): 57640459658
• Contact for privacy matters: legal@serafinity.com

Serafini d.o.o. is the data controller responsible for your personal data described in this policy. We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Croatian law.

We collect the following categories of personal data:

Information you give us directly

• Your email address and first name, when you subscribe to one of our newsletters through a signup form on our website or through a Meta (Facebook/Instagram) lead form.
• Any information you include when you contact us directly (e.g. by email).

Information collected automatically

• Newsletter engagement data — whether you open our emails and which links you click, collected via our email platform. This helps us understand what content is useful and maintain list quality.
• Website and advertising data — when you visit our website or interact with our ads, we and our providers may collect technical data such as your IP address, browser and device type, referring pages, and on-site activity, using cookies and similar technologies (including the Meta Pixel / Conversions API and website analytics tools). This supports measurement, optimization, and advertising, including retargeting.

We do not intentionally collect special categories of sensitive personal data, and our services are not directed to children under 16.

Where we rely on consent, you may withdraw it at any time (see Section 7). Where we rely on legitimate interests, we have balanced those interests against your rights.

Our website uses cookies and similar technologies for essential functionality, analytics, and advertising (including the Meta Pixel / Conversions API and website analytics). Non-essential cookies are used only where permitted, and where required we ask for your consent via a cookie banner. You can manage or refuse cookies through that banner and through your browser settings; refusing some cookies may affect site functionality.

We do not sell your personal data. We share it only with service providers ("data processors") who help us operate, and only as needed:

• beehiiv — our newsletter/email platform (subscriber management, delivery, engagement analytics).
• Meta Platforms (Facebook/Instagram) — advertising, lead forms, and the Meta Pixel / Conversions API for measurement and retargeting.
• Website analytics provider (e.g. Google Analytics) — website usage measurement.
• Lovable — our website hosting/build platform.

Some of these providers are located outside the EU/EEA (for example, in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework where applicable. We may also disclose data where required by law or to protect our legal rights.

We keep your subscriber data for as long as you remain subscribed and for a reasonable period afterward, unless you ask us to delete it sooner. We regularly remove unengaged subscribers. Advertising and analytics data is retained according to the retention settings of the relevant provider.

Under the GDPR, you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and withdraw consent at any time. You can:

• Unsubscribe from any newsletter using the link at the bottom of every email.
• Contact us at legal@serafinity.com to exercise any of your rights.

You also have the right to lodge a complaint with the Croatian supervisory authority, the Agencija za zaštitu osobnih podataka (AZOP), or your local data protection authority.

We take reasonable technical and organizational measures to protect your data, and we work with reputable providers who maintain their own security standards. No method of transmission over the internet is fully secure, however, and we cannot guarantee absolute security.

We may update this policy from time to time. The "Last updated" date reflects the latest version, and material changes will be communicated where appropriate.

Questions about this policy or your data: legal@serafinity.com — Serafini d.o.o., Horvatovac 76B, Zagreb, Croatia.