PRIVACY / MAISON KONTUR
Your
privacy.
01 / Who controls your data?
MAISON KONTUR, sole proprietorship for services, owner Kristina Maligec, is the data controller. Business address: Stjepana Radića 32, 31000 Osijek, Croatia. Croatian tax ID (OIB): 52450274410. For enquiries about personal data, contact kristina@maisonkontur.com.
02 / What information do we collect?
When you send an enquiry: your name, email address, selected service, optional preferred date and reply method, message and technical submission records processed by the hosting provider. When you subscribe to our marketing emails: your email address and a record of your explicit consent, including its source, wording, version and timestamp where available.
Please do not submit medical diagnoses, health documents or other sensitive information in free-text forms.
03 / Why do we use the information?
Enquiry data is processed to respond to requests and take steps before a possible service agreement (GDPR Art. 6(1)(b)), or where appropriate for legitimate operational interests (Art. 6(1)(f)). Marketing emails are based on a separate, voluntary opt-in (Art. 6(1)(a)). Marketing consent is never a prerequisite to making an enquiry.
04 / Marketing consent and withdrawal
Our marketing checkbox is not preselected. You can withdraw consent at any time through our withdrawal request or by emailing kristina@maisonkontur.com. The current unsubscribe form generates a request for manual processing; it does not instantly remove you from an external mailing list. Once a mailing platform is connected, each marketing email must contain an effective unsubscribe mechanism.
Before automated campaigns begin, we recommend confirmed opt-in (double opt-in), an accurate suppression list, and an auditable consent log linked to the mailing provider.
05 / Who can access the data?
Limited authorized staff and contracted service providers may process data when necessary, including the hosting and form-processing provider. Additional newsletter providers are to be specified once selected. International transfers, where applicable, require appropriate safeguards and transparent disclosure.
06 / Retention
Enquiries should be retained only as long as necessary to deal with the request and any applicable legal obligations. Marketing consent records should be retained for the period necessary to demonstrate lawful consent and respect withdrawals. Enquiries are ordinarily deleted within 12 months after the end of correspondence, unless a lawful reason requires longer retention.
07 / Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability or objection and may withdraw consent at any time. Contact the address above to exercise your rights. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
08 / Cookies, analytics and automated decisions
This version of the site contains no Google Analytics, Meta Pixel or non-essential marketing tracking scripts. Essential technical processing by the hosting provider may still occur. We do not use form submissions for automated decisions with legal or similarly significant effects. See Cookie Notice.
09 / Review
Last updated 8 November 2026. We update this notice when the processing purposes, service providers or technologies change.