PRIVACY POLICY.

1. Controller

2. Website hosting — GitHub Pages

This website is hosted using GitHub Pages, a service of GitHub. When a GitHub Pages site is visited, GitHub states that the visitor's IP address is logged and stored for security purposes. Technical request and usage information may therefore be processed when the site is delivered.

The processing is used to securely and reliably provide this website. The legal basis, insofar as we determine this processing, is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

3. Domain and DNS — Cloudflare

The domain is registered with Cloudflare and Cloudflare DNS is used. Our current DNS records are configured as DNS-only, not as Cloudflare's reverse-proxy service. Cloudflare processes account and domain-registration data in connection with its registrar and DNS services.

4. Contact form — Formspree

If you submit the project inquiry form, the information you enter (name, email address, project type, optional budget and message) is transmitted to Formspree and made available to us so that we can respond. Formspree stores form submissions in the Formspree account and may send them to our configured email address.

For inquiries about a possible project, processing is based on Art. 6(1)(b) GDPR where it is necessary to take steps at your request before entering into a contract; otherwise Art. 6(1)(f) GDPR applies to our legitimate interest in responding to inquiries. Formspree states that its services are hosted on AWS in the United States and that it relies on Standard Contractual Clauses (SCCs) as a data processor for GDPR purposes.

5. Storage

We keep inquiry data only as long as reasonably necessary to process the inquiry and any resulting business relationship, or where statutory retention duties require longer storage. Formspree's own retention depends on the account plan and settings; on its current Free plan, Formspree documents 30 days of submission history.

6. Your rights

Subject to the applicable GDPR requirements, you may have rights to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a competent data protection supervisory authority.

7. Cookies and analytics

KARTALOVIC LABS currently does not use its own analytics or advertising trackers on this website. If such services are added later, this privacy policy will be updated and, where required, consent mechanisms will be implemented.

8. Changes

We may update this privacy policy when the website, service providers or legal requirements change. Last updated: 22 September 2026.