GDPR Compliance Statement
Effective date: 12 August 2025
1. Introduction
X3 Branding, obrt za dizajn, owner Daliborka Šlat, is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant Croatian data protection laws. This statement explains our approach to data protection and your rights under GDPR.
2. Data Controller Information
X3 Branding, obrt za dizajn
Owner: Daliborka Šlat
Business ID (MB): 98970577
OIB: 59464528984
Trg kralja Tomislava 2, Pula, Croatia
Email: arijan@x3branding.com
Phone: +385 97 631 4170
3. Purposes of Data Processing
We process personal data for the following purposes:
Responding to messages sent via our contact form
Sending newsletters and promotional content (only with consent)
Maintaining and improving website functionality through analytics tools
4. Categories of Personal Data Collected
Name and surname
Email address
Phone number
IP address
Any information provided voluntarily in contact or subscription forms
5. Legal Basis for Processing
Our processing of personal data is based on:
Legitimate interest: responding to inquiries and messages
Consent: sending newsletters, using analytics and marketing cookies
6. Data Retention
We retain personal data until the individual requests deletion or withdraws consent.
7. Data Sharing and Transfers
We share personal data with trusted third-party service providers, including:
Mailchimp – newsletter management (may process data in the USA under EU–US Data Privacy Framework)
Google LLC – analytics and performance tools
Hostinger – website hosting provider
Where data is transferred outside the EU, we ensure appropriate safeguards such as standard contractual clauses or adequacy decisions.
8. Your GDPR Rights
Under GDPR, you have the right to:
Access your personal data
Request correction or deletion
Withdraw consent at any time
Object to processing based on legitimate interest
Request data portability
Lodge a complaint with the Croatian Personal Data Protection Agency (AZOP)
To exercise your rights, contact us at arijan@x3branding.com.
9. Security of Your Data
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.
10. Changes to This Statement
We may update this GDPR Statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a new effective date.