Legal information

Privacy policy

Effective from 5 November 2026.

Your privacy matters to us. This policy explains which personal data we collect when you use the autentik.hr website or get in touch with us, why we collect it, how long we keep it and what your rights are. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Croatian Act on the Implementation of the General Data Protection Regulation.

1. Who is the data controller

AUTENTIK d.o.o.
Registered office: Varaždinska cesta 35, 48000 Koprivnica, Croatia
Place of service: Dravska 17, 48000 Koprivnica
OIB (tax number): 22020506531 · MB (registration number): 04724402
Email: bojan@autentik.hr · Phone: +385 95 831 22 20

For any questions about the processing of your personal data, you can contact us at bojan@autentik.hr or by post at our registered office.

2. What data we collect

Enquiries through the contact form: first and last name, email address, phone number (if you provide it), the person and service you choose, your preferred way of meeting (in person or online) and the content of your message.
Signing up for updates: email address and the topic you want to hear about (e.g. webinars, Body & Mind wellness, Autentik experience).
Communication by phone, email or message: the information you send us yourself when you get in touch and arrange an appointment.
Website usage data: IP address, browser and device type, pages visited and similar technical data, collected through cookies and similar technologies. We use analytics and marketing cookies only with your consent (more in the Cookie policy).

Health data. In your message you can describe your complaints or the reason for your visit (for example back tension or trouble sleeping). We process such data only to reply to your enquiry and prepare the session, based on the explicit consent you give by sending the message. Please include only what you consider necessary.

3. Why we process data and on what basis

Purpose	Legal basis
Replying to your enquiry and arranging an appointment	Taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR); for health data, your explicit consent (Art. 9(2)(a))
Providing the service and issuing invoices	Performance of a contract and legal obligations, e.g. accounting and tax (Art. 6(1)(b) and (c))
Sending updates about new dates and events	Your consent, which you can withdraw at any time (Art. 6(1)(a))
Protecting forms from abuse and spam (Google reCAPTCHA)	Our legitimate interest in website security (Art. 6(1)(f))
Visit analytics and ad measurement (Google, Meta)	Your consent, given through the cookie notice (Art. 6(1)(a))

4. Who we share data with

We do not sell your data or pass it on to third parties for their own purposes. It is accessible only to the people at Autentik who reply to your enquiry and provide the service (Bojan Šmic and Vesna Zadravec) and to trusted service providers who process it on our behalf:

our website and email hosting provider,
Google Ireland Ltd. (reCAPTCHA, Google Tag Manager, Google Analytics, Google Ads),
Meta Platforms Ireland Ltd. (Facebook Pixel), only with your consent,
our accounting service, to the extent needed to issue invoices and keep business records.

Some of these providers may transfer data outside the European Economic Area, particularly to the USA. In that case, the transfer is based on the EU-U.S. Data Privacy Framework or on the European Commission’s standard contractual clauses.

5. How long we keep data

Enquiries and correspondence: up to 2 years from the last contact, unless you become our client.
Data on services provided and invoices: as long as tax and accounting rules require (usually 11 years).
Email address for updates: until you unsubscribe.
Data collected by cookies: as set out in the Cookie policy.

6. Your rights

You have the right at any time to:

request access to your data and a copy of it,
request correction of inaccurate data,
request erasure of your data when there is no longer a basis for processing it,
request restriction of processing or data portability,
object to processing based on legitimate interest,
withdraw your consent, without affecting the lawfulness of processing before withdrawal (e.g. by unsubscribing from updates or changing your cookie settings).

You can send your request to bojan@autentik.hr. We will reply within one month at the latest. If you believe that the processing of your data does not comply with the law, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

7. Security

We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse. The website uses an encrypted connection (HTTPS).

8. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the date from which it applies.