Who we are
This site is run by V.DEV d.o.o., Dobriše Cesarića 5, 31000 Osijek, Croatia, OIB/VAT HR87371467628. We are the controller for the personal data described here. Contact: privacy@vdev.hr.
What we collect and why
- Store check requests: the store address you enter and, if you ask for the full report, your work email. Used to run the check, send the report and one follow-up. Legal basis: your request (pre-contractual steps) and our legitimate interest in replying.
- Business outreach: work email addresses of people responsible for online stores, taken from public business sources. Used to send a short, relevant audit of their store. Legal basis: legitimate interest. Every email has a one-click unsubscribe, and we do not email recipients in countries that require prior consent for this.
- Clients: contact, billing and project data needed to deliver the service. Legal basis: contract.
- Website analytics: Plausible, which uses no cookies and collects no personal data. Campaign parameters and advertising click identifiers in the address you arrived on (for example utm_campaign or gclid) are kept in your browser session and attached to a form you submit, so we know which campaign led to the enquiry. Legal basis: legitimate interest.
- Optional, only after you accept cookies: Microsoft Clarity (anonymised session recordings to improve the site), the Google Ads conversion tag and the LinkedIn Insight Tag (to tell those platforms that an ad led to an enquiry or a purchase, and for remarketing). Nothing of this loads if you decline, and you can change your choice through "Cookie settings" in the footer.
Who processes data for us
- Supabase, Inc. (database, EU region, Ireland)
- Hetzner Online GmbH (workflow automation, server in Helsinki, Finland, EU)
- Resend, Inc. (sending email; EU data residency where available)
- Google PageSpeed Insights (receives the public store address only)
- Anthropic (receives the store address and performance metrics to write the report summary; no personal data)
- Stripe (payments)
- Microsoft (Clarity), Google (Ads) and LinkedIn, only if you accept cookies
Data processing agreements are in place with each processor. Where a processor is outside the EEA, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
- Audit requests and outreach contacts who do not become clients: up to 12 months after the last contact, then deleted.
- Unsubscribed addresses: kept only as a suppression entry so we never email them again.
- Client and billing records: as long as Croatian accounting law requires.
- Online audit reports: available by link for 90 days.
Your rights
You can ask for access to, correction or deletion of your data, object to its use, or ask us to restrict it, by writing to privacy@vdev.hr. We reply within 30 days. You can also complain to the Croatian data protection authority (AZOP, azop.hr) or the authority in your country.