Skip to content

Privacy Policy

1. Data Protection Overview

The following provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

2. Data Controller

Eduard Ditler
Adriatic Moments
Splitska 13
22202 Primošten, Croatia
Email: hello@adriaticmoments.com
Phone: +385 95 824 9880

3. Data Collection on This Website

Server log files

The website host automatically collects and stores information in server log files that your browser transmits, including:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Time of the server request
  • IP address (anonymised)

This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR.

Contact form

When you send us an enquiry via the contact form, the information you provide, including your contact details, will be stored for the purpose of processing your request and for follow-up questions. We will not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest).

Enquiries by email or phone

If you contact us by email or phone, your enquiry and all resulting personal data will be stored and processed for the purpose of handling your request. The legal basis is Art. 6(1)(b) GDPR.

4. Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). The personal data collected on this website is stored on Cloudflare's servers. This may include IP addresses, contact enquiries, and technical data. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/. Hosting is based on Art. 6(1)(f) GDPR.

5. SSL/TLS Encryption

This site uses SSL/TLS encryption for security and to protect the transmission of confidential content, such as enquiries you send to us. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

6. Cookies

This website uses only technically necessary cookies required for the operation of the site (e.g. cookie consent). No tracking or marketing cookies are used. Storage is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free presentation of our website.

7. Analytics

We use Umami Analytics to understand how visitors use our website. Umami is a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not track users across websites. Analytics data is only collected after you give your consent via our cookie banner. The data is processed by Umami Cloud (cloud.umami.is) and is not shared with other third parties.

8. Contact Form (Formspree)

Our contact form is processed by Formspree (formspree.io). When you submit the form, your name, email, and message are transmitted to Formspree servers. Privacy policy: formspree.io/legal/privacy-policy

9. Google Maps

Our contact page includes an embedded Google Maps widget. By loading the map, your IP address is transmitted to Google. Privacy policy: policies.google.com/privacy

10. WhatsApp

You can contact us via WhatsApp – through the WhatsApp button and the WhatsApp inquiry form on our contact page. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (part of Meta). No data is transmitted to WhatsApp until you click the button or submit the form. When you do, you are redirected to WhatsApp (wa.me); the prepared message text (e.g. names, wedding date, location, number of guests, note) and your IP address are transmitted to WhatsApp. The message is only sent once you send it yourself within WhatsApp.

A WhatsApp account is required. WhatsApp processes your phone number, message content and metadata according to its own privacy policy; data may be transferred to third countries (in particular the USA) – Meta is certified under the EU-US Data Privacy Framework. Privacy policy: whatsapp.com/legal/privacy-policy-eea

We process the details you send us via WhatsApp to answer your inquiry and to prepare a contract (Art. 6(1)(b) GDPR). Transmission via WhatsApp is based on your consent (Art. 6(1)(a) GDPR), which you give by clicking the button or ticking the checkbox; you may withdraw it at any time with effect for the future. Alternatively, you can reach us by email or phone.

11. AI Chatbot (Mignuti Chatbot)

Our website includes an AI-powered chat assistant that lets you ask questions about our services. The chatbot is operated by Mignuti Media (chatbot.mignuti.com; owner: Eduard Ditler, Lahnstein, Germany), a further business of the controller. All chat data is stored on a dedicated server hosted by netcup GmbH in Germany (data processing under Art. 28 GDPR).

When a page is loaded, the chat script is fetched from widget.mignuti.com and an anonymous chat session is created. Your IP address (stored only as a hash, to prevent abuse), the page visited and technical browser data are transmitted to api.chatbot.mignuti.com; a random session identifier is stored in your browser's local storage so that your chat history persists between pages. This is based on our legitimate interest in answering inquiries quickly and in keeping the service secure (Art. 6(1)(f) GDPR).

Your messages and the assistant's replies are only processed once you start the chat and agree to the processing in the chat window (Art. 6(1)(a) GDPR, consent). You are interacting with an AI system: replies are generated automatically and may contain errors. Please do not enter sensitive data (e.g. health or payment data) in the chat.

Transfer to AI providers: To generate replies, your message is transmitted to Anthropic PBC (USA; Claude language model) and, for searching the knowledge base, additionally to OpenAI, L.L.C. (USA). Before every transfer, personal data in your message is masked automatically (including email addresses, phone numbers, IBANs, credit card and ID numbers). Transfers to the USA are based on the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR) and, in addition, the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); both providers are contractually prohibited from using the data to train their models. If Anthropic is unavailable, Microsoft Azure OpenAI in an EU region is used as a fallback.

Retention and deletion: Chat histories are stored for 90 days and then anonymised automatically. You can delete your conversation yourself at any time via the “Delete my conversation” menu item in the chat window – no login required. You can withdraw your consent at any time with effect for the future by no longer using the chat. Your further rights (access, rectification, erasure, restriction, data portability, objection) can be exercised at any time via hello@adriaticmoments.com.

12. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data stored by us.
  • Right to rectification (Art. 16 GDPR): You have the right to have inaccurate data corrected.
  • Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data.
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time.

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

13. Contact for Data Protection Enquiries

If you have any questions about data protection, please contact us at hello@adriaticmoments.com.