Privacy policy

Who is responsible

Media Lex d.o.o., Ulica Miroslava Krleže 104, 10290 Zaprešić, Republic of Croatia. OIB (Tax ID): 40506545656.

info@medialex.hr · +385 91 195 9702

We have not appointed a data protection officer, and are not required to.

Cookies and tracking

This site sets no cookies. It uses no analytics, no performance measurement, no advertising, and no third-party embeds — no maps, no videos, no social plugins. Fonts and images are served from this domain, so opening a page contacts no one but our host. Because nothing here requires consent, there is no cookie banner to accept or refuse.

The Instagram and Facebook addresses on this site are ordinary links. Nothing is loaded from those networks until you click, and once you do, Meta's own privacy terms apply to your visit there.

What our host records when you open a page

Like every web server, our hosting provider records each request: your IP address, the time, the page requested, the referring page where one exists, and your browser's user-agent string. These logs keep the site available and let us investigate faults and abuse. That is our legitimate interest under Article 6(1)(f) GDPR — we have no way to run a website without them, and we do not use them to build any profile of you.

If you write or call

When you email info@medialex.hr or phone us, we process what you send: your name, your contact details, and whatever you tell us about your situation. We use it to answer you and, if it leads anywhere, to prepare and provide the consulting service you ask for. The legal basis is Article 6(1)(b) GDPR for steps taken at your request before and under a contract, and Article 6(1)(f) for general correspondence that does not lead to one.

Immigration matters often involve sensitive details about your family, your health or your work. Send us only what is needed for the question you are asking, and we will do the same in return.

Who else sees the data

• Vercel Inc. hosts this website and processes the request logs described above.
• Google provides our email, so anything you send to info@medialex.hr is stored in that mailbox.

Both act on our instructions under a data processing agreement. Beyond them, we disclose personal data only where a Croatian authority requires it by law, or where you ask us to contact someone on your behalf — for example, the licensed attorney we refer clients to for matters requiring formal representation. We never sell personal data, and we do not use it for automated decision-making or profiling.

Transfers outside the EEA

Our hosting and email providers are US companies that may process data outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection.

How long we keep it

Correspondence that leads to no engagement is deleted after twelve months. Where an engagement follows, we keep the file for as long as the matter is open, and accounting records for the eleven years the Croatian Accounting Act requires. Server logs are kept by our host for a short technical period and are not retained separately by us.

Your rights

Under Articles 15 to 21 GDPR you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, receive it in a portable form, or object to processing we base on legitimate interest. Write to info@medialex.hr and we will answer within one month.

If you think we have handled your data wrongly, you may complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb — though we would rather you told us first, so we can put it right.

Changes

If this policy changes, the date below changes with it. Material changes will be noted on this page rather than made quietly.