Scroll to top

Privacy Policy

Last updated: October 31, 2026

This policy explains how I handle personal data when you visit martinsok.com or contact me by email. I follow the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the applicable Croatian law.

In short

  • This website uses no cookies, no analytics, no tracking and no advertising tools.
  • I only process the personal data you send me yourself, mainly by email, so I can answer you and deliver my services.
  • I never sell your data or share it for marketing.

Who is responsible

The controller of your personal data is:

Martin Šok
connect@martinsok.com

For anything related to your personal data, write to connect@martinsok.com.

Visiting the website

The website is hosted by Cloudflare, Inc. When you open a page, your browser automatically sends technical information such as your IP address, browser type, the page requested and the time of the request. Cloudflare uses this only to deliver the website and protect it from abuse and attacks. I don't use it to identify visitors. The legal basis is my legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Cloudflare may process this data outside the EU, including in the United States. Such transfers are covered by the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Cookies and local storage

This website does not set any cookies, so it doesn't ask for cookie consent.

  • Theme choice: if you use the light/dark switch, your choice is saved in your browser's local storage so the site remembers it. It stays on your device, is never sent to me, and you can delete it at any time by clearing your browser data. Storing a setting you asked for doesn't require consent.
  • Security cookies: Cloudflare may in rare cases set a strictly necessary security cookie (for example __cf_bm or cf_clearance) when it needs to filter suspicious traffic. These cookies don't track you and are exempt from consent.
  • Fonts and images are served from this website itself. I don't use Google Fonts or similar external services.

When you email me

When you write to one of my addresses (connect@martinsok.com, opportunities@martinsok.com, info@martinsok.com or posao@martinsok.com), I receive the data you choose to share: usually your name, email address, the content of your message and any attachments. If we work together, this can also include data needed for quotes and invoices, such as company name, address and tax number (OIB/VAT ID).

I use this data only to answer your inquiry and to prepare, deliver and invoice my services, or to consider a collaboration if you contact me about working together. The legal bases are:

  • steps prior to entering a contract and the performance of a contract (Art. 6(1)(b) GDPR),
  • compliance with my legal obligations, for example accounting and tax rules (Art. 6(1)(c) GDPR),
  • my legitimate interest in answering general correspondence (Art. 6(1)(f) GDPR).

My email is provided by Microsoft 365 (Microsoft Ireland Operations Limited), which processes it on my behalf as a data processor, under Microsoft's Data Protection Addendum. Where data is processed outside the EU, it is protected by the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses.

How long I keep your data

I keep personal data only as long as necessary for the purposes above or as required by law:

  • Emails and attachments are kept for as long as needed to handle your inquiry or our project, and are usually deleted from my email service no later than 5 years after our last contact.
  • Invoices and other accounting documents are kept for the periods required by Croatian accounting and tax law (currently up to 11 years).
  • Technical website data is kept by Cloudflare only for a short period, as needed for security and operation.

Who receives your data

Your data is only shared with the service providers needed to run this website and my email (Cloudflare and Microsoft, as described above), and with public authorities, such as the tax administration, where the law requires it. I don't sell personal data and don't use it for advertising or profiling.

Your rights

Under the GDPR you have the right to:

  • access the personal data I hold about you,
  • have it corrected if it's inaccurate,
  • have it deleted, unless I'm legally required to keep it,
  • restrict its processing,
  • data portability, meaning you receive it in a common, machine-readable format,
  • object to processing based on my legitimate interest,
  • withdraw your consent at any time, where processing is based on consent.

To use any of these rights, email connect@martinsok.com. I will reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In Croatia, that is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), azop.hr.

Security

I protect your data with appropriate technical and organisational measures. These include encrypted connections (HTTPS), secure, access-controlled email accounts and reputable providers.

Changes to this policy

I may update this policy when my services or the law change. The current version is always published on this page, with the date of the last update shown at the top.