Privacy Policy
Effective date: 8 October 2026
This policy explains what personal data is collected when you visit nonstopexcel.com, contact me or book a call, and what your rights are under the EU General Data Protection Regulation (GDPR).
Who is responsible
NonStopExcel is operated by Lavastro, vl. Damir Bogadi, a sole proprietorship (obrt), Poljski put 4, Bestovje, Croatia, OIB 45058525808. Lavastro is the “controller” of your personal data under the GDPR.
Questions or requests about your data: [email protected]
What I collect and why
When you send the contact form: your name, email address, company (optional), the service you’re interested in and your message. I use it only to reply to you and prepare a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). The form sends the message to my business mailbox; it is not stored in a database on the website.
When you book a call: the details you enter in the booking calendar (name, email, chosen time and any notes). Bookings are handled by Cal.com and calls take place on Microsoft Teams. Legal basis: Art. 6(1)(b) GDPR.
When you become a client: the contact and billing details needed to deliver the work and issue invoices. Legal basis: the contract (Art. 6(1)(b)) and legal obligations such as accounting and tax law (Art. 6(1)(c)).
Files you share for a project are used only for that project, protected by an NDA on request, and deleted when the project ends unless we agree otherwise.
When you visit the site: the hosting and network providers process technical data such as your IP address, browser type and the pages requested, to deliver the site and protect it against abuse. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).
Analytics and advertising, only with your consent: if you click Accept in the cookie banner, cookies from Google, Microsoft, Meta and Reddit measure how visitors find the site and which ads lead to enquiries. Legal basis: consent (Art. 6(1)(a)). If you click Reject (and in the EU, EEA, UK and Switzerland until you choose), these cookies are not set; Google may still receive limited, cookieless signals without identifiers.
I don’t sell personal data, and I don’t use it for automated decision-making or profiling.
Cookies
| Name | Provider | Purpose | Duration | Needs consent |
|---|---|---|---|---|
consent (local storage) |
this site | Remembers your cookie choice | 12 months | No |
currency (local storage) |
this site | Remembers EUR or USD for prices | Until you clear it | No |
_ga, _ga_* |
Google Analytics | Counts visits and visitor journeys | Up to 2 years | Yes |
_gcl_au |
Google Ads | Measures which ads lead to enquiries | 90 days | Yes |
_uetsid, _uetvid, MUID |
Microsoft Advertising | Measures which ads lead to enquiries | 1 day to 13 months | Yes |
_fbp |
Meta (Facebook, Instagram) | Measures which ads lead to enquiries | 90 days | Yes |
_rdt_uuid |
Measures which ads lead to enquiries | 90 days | Yes | |
__cf_bm |
Cloudflare | Protects the site against bots | 30 minutes | No |
The booking calendar is loaded from Cal.com and may set its own cookies needed to make a booking. Fonts are served from this site, so no requests go to Google Fonts.
You can change your choice at any time with Cookie settings at the bottom of every page, or by deleting cookies in your browser.
Who processes data on my behalf
| Service | What for | Location |
|---|---|---|
| Hawk Host Inc. | Website hosting, server logs, sending contact-form emails | Canada (EU adequacy decision) |
| Cloudflare, Inc. | Network, speed and security for the website | USA / global |
| Cal.com, Inc. | Booking calendar | USA |
| Microsoft | Teams video calls; Microsoft Advertising (with consent) | USA / EU |
| Tag Manager; Analytics and Ads (with consent) | USA / EU | |
| Meta Platforms | Meta (Facebook, Instagram) ads measurement (with consent) | USA / EU |
| Reddit, Inc. | Reddit ads measurement (with consent) | USA |
| Zoho Corporation B.V. (Zoho Mail) | Receiving and answering your messages | EU |
Where data is transferred outside the EU/EEA, it’s protected by an adequacy decision, the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses, as applicable.
How long data is kept
- Enquiries and bookings that don’t lead to a project: up to 2 years after our last contact, then deleted.
- Client records and invoices: as long as Croatian accounting and tax law requires.
- Project files: deleted when the project ends, unless we agree otherwise.
- Server logs: kept by the hosting provider for a short period for security.
- Analytics and advertising cookies: see the cookie table above.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time (this doesn’t affect processing before the withdrawal). Email [email protected] and I’ll reply within one month.
You can also complain to the Croatian data protection authority, the Agencija za zaštitu osobnih podataka (AZOP), azop.hr, or the authority in your own EU country.
Changes to this policy
If this policy changes, the new version will be published here with a new effective date.