Who is responsible
Abstract Vision d.o.o., Ulica Ljerke Šram 18, 10000 Zagreb, Croatia, is the controller for the website processing described here. Contact privacy@abstract-vision.com about your personal data, or hello@abstract-vision.com for general enquiries.
Visiting the website
Your browser sends technical information needed to request pages and assets, including your IP address, requested address and browser information. Our hosting provider is Heroku, part of Salesforce. Hosting and server logs can contain the request time, path, IP/network address, request identifier, response status and timing. We use this information to deliver the website, diagnose failures and protect it against misuse.
The legal basis is our legitimate interest in operating a reliable, secure website (Article 6(1)(f) GDPR). These technical requests are necessary to load the site; you do not need an account.
Your language choice
You can change the language without saving anything: the selected language is carried in the page address. If you actively choose ‘Remember on this device’, we save the first-party cookie av_language_preference for 180 days. It contains only a language code and preference-format version, not a unique visitor identifier. It is sent only to this website and is not used for advertising or profiling.
Remembering is optional and based on your consent (Article 6(1)(a) GDPR where personal data is involved). You can withdraw it at any time by opening the language selector, unchecking ‘Remember on this device’, or by deleting this website’s cookies in your browser. Withdrawal does not affect the lawfulness of earlier processing. The old automatically saved language preference is removed when the website runs.
Preparing a product enquiry
The form builds an email draft in the current page. It does not submit your name, email address, budget or brief to our server, save the form to browser storage, or subscribe you to a mailing list. Copying a draft places it on your device clipboard only when you request this. Opening the email draft passes its text to your email application; you decide whether to send it.
If you send us an email, we process your contact details, message and any attachments to respond, assess your request and discuss a possible project. For steps towards a contract with you, the basis is Article 6(1)(b) GDPR. For other enquiries, including correspondence with a company representative, it is our legitimate interest in responding to business communications under Article 6(1)(f). Providing an enquiry is voluntary, but we need sufficient information and a contact address to respond. Please do not include passwords or unnecessary sensitive information.
Exercises, fonts and external links
Website exercise answers are checked in the current page and are not sent to us or saved between visits. Fonts and artwork are hosted with the website; your browser does not contact Google Fonts to display them. We do not embed advertising pixels, Google Analytics or social-media tracking widgets.
Ordinary links to Google Play and other websites take you to those services when you follow them. Their operators process the ensuing visit under their own notices. This notice does not cover the data practices of our individual apps.
Hosting network reports
The current Heroku hosting configuration also supplies Network Error Logging headers. Supporting browsers can send sampled connection reports directly to nel.heroku.com, including request/network information, status and timing; the recipient also receives the connection’s IP address. The observed configuration samples 1% of successful requests and 10% of failed requests, with a browser reporting configuration lasting one hour. That hour is not a statement about how long Heroku retains reports.
This is hosting-provider diagnostics, separate from our language preference and ordinary server logs. Heroku describes this collection under the Salesforce Privacy Statement. The provider’s information is linked below. The language preference does not enable or disable these reports.
Recipients and international processing
Access is limited to people handling the website or your enquiry, and the hosting, IT and email service providers needed to operate those services. Advisers or public authorities may receive information where necessary to meet legal obligations or establish, exercise or defend legal claims. We do not sell website visitor or enquiry data.
Heroku/Salesforce uses international infrastructure and support, so processing may take place outside the European Economic Area, including the United States. Salesforce publishes its Data Processing Addendum and transfer safeguards, including standard contractual clauses and binding corporate rules, at the links below. Contact us for information about the safeguards and recipients relevant to your request; this notice does not promise EU-only processing.
How retention is determined
The optional language cookie expires after 180 days unless you remove it sooner or explicitly save a new choice. Unsent form drafts and exercise state last only in the current page; a copied or emailed draft is then subject to your clipboard or email application’s storage.
Routine technical logs are subject to the hosting service’s log rotation. Records needed to investigate an incident are retained according to the time needed to resolve it and any related legal obligation or claim. For email enquiries, retention is determined by whether the enquiry and follow-up are still active, whether a contract results, and whether records must be retained under applicable record-keeping duties or for legal claims. Ask us about the period applying to a particular record. The hosting provider’s own diagnostic processing is described in its privacy information.
Your rights
Subject to the GDPR’s conditions, you can request access, correction, erasure, restriction and portability of your personal data. You can object to processing based on legitimate interests for reasons relating to your particular situation. You can withdraw optional consent at any time. Contact privacy@abstract-vision.com; we may request proportionate information to verify your identity.
You may complain to a supervisory authority, including the Croatian Personal Data Protection Agency (AZOP), or the authority in the EU country where you live or work or where the alleged infringement occurred. We do not use website data for automated decisions producing legal or similarly significant effects, or for profiling.
Provider information and your supervisory authority
Privacy questions and requests: privacy@abstract-vision.com