Privacy Policy

This Privacy Policy explains how FB DIGITAL MEDIA collects, uses, stores and protects personal data when you visit fran-baca.com, submit a project enquiry, subscribe to a newsletter or otherwise communicate with us.

Personal data are processed in accordance with Regulation (EU) 2016/679, commonly known as the General Data Protection Regulation (GDPR), and the Croatian Act on the Implementation of the General Data Protection Regulation.

1. Data Controller and Contact Details

The controller responsible for processing personal data through this website is:

FB DIGITAL MEDIA, obrt za usluge, owned by Fran Baća
Glavna ulica 4
Goranec, Croatia
Croatian Personal Identification Number (OIB): 76054818354

Email for privacy-related enquiries:
hello@fran-baca.com

Telephone:
+385 95 790 9840

Website:
https://fran-baca.com

You may use the email address above to ask questions about this Privacy Policy or to exercise your data-protection rights.

2. Personal Data We Collect

The personal data we collect depend on how you use the website and communicate with us.

2.1 Contact Forms and Project Enquiries

When you submit a contact form or project enquiry, we may collect:

• your name

• your email address

• your company or organisation

• the type of project or service you are interested in

• your project description and any information included in your message

• the intended audience, required formats and available project materials

• whether new filming is required

• your preferred deadline or production period

• your approximate budget range

• any other information you voluntarily provide

Please do not include sensitive personal data or confidential information that is not necessary for the initial enquiry.

2.2 Email, Telephone and Other Communication

When you contact FB DIGITAL MEDIA directly by email, telephone, WhatsApp, social media or another communication channel, we may process:

• your contact details

• the content of your communication

• information about the requested service or project

• subsequent correspondence and agreed next steps

When you use a third-party communication platform, that platform may also process your data under its own privacy policy and terms.

2.3 Newsletter Information

If you voluntarily subscribe to a newsletter or marketing communication, we may collect:

• your email address

• the date, time and method of your subscription

• information needed to record and demonstrate your consent

Newsletter subscription is voluntary. You may unsubscribe or withdraw your consent at any time.

2.4 Technical Data, Cookies and Analytics

When you visit the website, certain technical information may be generated automatically. Depending on your cookie choices and browser settings, this may include:

• device and browser information

• operating-system information

• pages visited and interactions with the website

• referring website or traffic source

• approximate geographic information

• cookie identifiers and similar online identifiers

• technical information required for security and website operation

Essential cookies and related technologies may be used to provide the basic functionality and security of the website.

Analytics, marketing and other non-essential technologies are used only where the required consent has been provided.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you submit a form, send an email, subscribe to a newsletter or otherwise contact us

• automatically through essential website technologies

• through analytics and other non-essential technologies where you have provided consent

• through third-party platforms when you choose to communicate with us using those services

4. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate purpose and legal basis.

4.1 Responding to Enquiries and Communicating About Services

Personal data submitted through contact forms or other communication channels are used to:

• review and respond to your enquiry

• understand the requested project or service

• determine whether FB DIGITAL MEDIA is a suitable partner

• prepare questions, proposals or possible next steps

• continue communication connected with the requested service

The legal basis for this processing is the legitimate interest of FB DIGITAL MEDIA in responding to enquiries and communicating about its services, under Article 6(1)(f) GDPR.

4.2 Newsletter and Marketing Communication

Your email address is used to send newsletters, updates, service information or selected project news only where you have provided valid consent.

The legal basis is your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time by using the unsubscribe option, where available, or by contacting hello@fran-baca.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4.3 Essential Website Functionality and Security

Certain technical processing is necessary to:

• display and operate the website

• remember essential website settings

• protect the website against misuse and security threats

• maintain reliable website functionality

Essential cookies and technologies do not require consent where they are strictly necessary for these purposes.

4.4 Analytics and Non-Essential Cookies

With your consent, analytics technologies may be used to understand how visitors find and use the website, which pages are viewed and how the website can be improved.

The legal basis for processing through non-essential analytics or marketing cookies is your consent under Article 6(1)(a) GDPR.

You may refuse non-essential cookies or change your preferences through the website’s cookie banner or your browser settings.

5. Google Analytics

This website uses Google Analytics where the visitor has provided the required cookie consent.

Google Analytics helps FB DIGITAL MEDIA understand general website usage, including page visits, traffic sources, device or browser categories and interactions with website content.

Google Analytics may process online identifiers, cookie identifiers, device information, browser information, approximate location information and website-interaction data.

Contact-form content, project descriptions, names and email addresses are not intended to be submitted to Google Analytics.

Information processed through Google Analytics may be handled by Google and its service providers in accordance with Google’s own privacy documentation and applicable data-processing terms.

You may prevent non-essential analytics collection by rejecting analytics cookies or changing your cookie preferences.

Further information about the cookies and technologies used on this website is available in the Cookie Policy.

6. Contact Forms and Required Information

Fields marked as required must be completed so that FB DIGITAL MEDIA can receive and review your enquiry.

Providing personal data through a contact form is voluntary. However, without essential contact information such as your name, email address and project description, it may not be possible to respond or assess the requested service.

An approximate budget or deadline helps define a realistic project scope. Where the form provides a “not confirmed” or flexible option, you may select it if this information is not yet available.

Submitting an enquiry does not automatically create a contract or an obligation for either party to begin a project.

7. Consent

Where processing is based on consent, consent must be freely given, specific, informed and unambiguous.

Consent may be provided through a clear affirmative action, such as:

• subscribing to a newsletter

• accepting analytics or marketing cookies

• selecting a relevant consent option

FB DIGITAL MEDIA may retain information about when and how consent was provided where this is necessary to demonstrate compliance.

You may withdraw your consent at any time.

8. Cookies and Similar Technologies

The website may use:

• essential cookies required for basic operation and security

• preference cookies used to remember selected settings

• analytics cookies used to understand website usage

• third-party or embedded-content cookies, where applicable

Non-essential cookies are activated only after consent has been provided through the cookie banner.

You may reject non-essential cookies and may later change your preferences.

Cookie durations and specific providers may vary according to the type of cookie and the active website configuration. Further details are provided in the Cookie Policy.

9. Embedded Content and External Services

Some pages may contain embedded videos, media players, maps, social-media content or links to third-party websites and services.

When you interact with embedded content or follow an external link, the relevant third party may collect technical information or process personal data according to its own privacy policy.

These third parties act independently in relation to their own processing activities. FB DIGITAL MEDIA does not control their websites, privacy practices or data-retention periods.

Where embedded content requires non-essential cookies, its activation may depend on your consent settings.

10. Recipients and Service Providers

Personal data are not disclosed to third parties unless disclosure is necessary for:

• operating and hosting the website

• receiving and delivering form submissions or emails

• providing analytics that you have consented to

• maintaining website security and technical functionality

• obtaining professional legal, accounting or technical assistance

• complying with a legal obligation

• establishing, exercising or defending legal claims

Service providers may process personal data only to the extent necessary to provide the relevant service and subject to appropriate contractual or legal safeguards.

Personal data may also be disclosed to public authorities where required by applicable law or a valid official request.

11. International Data Transfers

Personal data are generally processed within the European Union or European Economic Area where this is reasonably possible.

Some technology, analytics, hosting or communication providers may process data in countries outside the EU or EEA.

Where personal data are transferred outside the EU or EEA, the transfer will be carried out using an appropriate legal mechanism and safeguards required by the GDPR, such as:

• an adequacy decision adopted by the European Commission

• Standard Contractual Clauses

• another legally recognised transfer mechanism

12. Data Retention

Personal data are retained only for as long as reasonably necessary for the purpose for which they were collected.

12.1 Contact Forms and Enquiries

Information submitted through a contact form and related communication may be retained for up to two years after the communication has ended.

Information may be retained for a longer period where this is reasonably necessary to protect legitimate interests, comply with legal obligations or establish, exercise or defend legal claims.

12.2 Newsletter Data

Newsletter information is retained until you unsubscribe, withdraw your consent or the newsletter service is discontinued.

A limited record of the previous consent or withdrawal may be retained where necessary to demonstrate compliance.

12.3 Cookies and Analytics

Cookies and analytics information are retained according to the type of cookie, selected settings and the retention configuration of the relevant service.

More information is available in the Cookie Policy and cookie-preference interface.

13. Your Data-Protection Rights

Subject to the conditions and limitations established by the GDPR, you may have the right to:

• request access to your personal data

• request correction of inaccurate or incomplete personal data

• request deletion of your personal data

• request restriction of processing

• object to processing based on legitimate interests

• receive certain personal data in a structured, commonly used and machine-readable format

• request transmission of eligible data to another controller

• withdraw consent at any time where processing is based on consent

• lodge a complaint with a competent supervisory authority

These rights are not absolute and may depend on the circumstances and legal basis of the processing.

14. Right to Object

Where personal data are processed on the basis of legitimate interests, you have the right to object to the processing based on your particular situation.

After receiving an objection, FB DIGITAL MEDIA will stop the relevant processing unless there are compelling legitimate grounds for continuing or the processing is necessary for the establishment, exercise or defence of legal claims.

You may object to direct marketing at any time. Personal data will no longer be processed for direct-marketing purposes after a valid objection or withdrawal of consent.

15. How to Exercise Your Rights

To exercise a data-protection right, contact:

hello@fran-baca.com

Please clearly describe your request and provide enough information to identify the relevant communication or data.

FB DIGITAL MEDIA will respond without undue delay and generally within one month of receiving a valid request.

Where a request is complex or multiple requests have been received, the response period may be extended by up to two additional months. You will be informed within the initial one-month period if an extension is necessary.

Additional information may be requested where reasonably necessary to confirm identity and prevent unauthorised access to personal data.

16. Data Security

FB DIGITAL MEDIA applies appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access

• accidental loss

• alteration

• disclosure

• destruction

• misuse

Measures may include HTTPS/SSL encryption, restricted access, account-security controls, software updates and appropriate handling of access credentials.

No method of internet transmission or electronic storage can be guaranteed to be completely secure. However, reasonable measures are used to reduce the risk of unauthorised processing.

17. Children’s Data

The website and services of FB DIGITAL MEDIA are not directed at children, and personal data relating to children are not knowingly collected through the website.

If it becomes apparent that a child has submitted personal data without an appropriate legal basis or required parental authorisation, reasonable steps will be taken to delete the information.

18. Automated Decision-Making and Profiling

FB DIGITAL MEDIA does not use personal data submitted through this website for automated individual decision-making or profiling that produces legal effects or similarly significantly affects an individual.

If this changes, appropriate information about the processing and the applicable legal basis will be provided.

19. Changes to This Privacy Policy

This Privacy Policy may be updated when:

• website functionality changes

• new services or technologies are introduced

• legal or regulatory requirements change

• data-processing practices are modified

The current version will be published on this page. The effective or last-updated date will be shown at the bottom of the policy.

Where appropriate, significant changes may also be communicated by email or through a notice on the website.

20. Complaints and Supervisory Authority

You have the right to lodge a complaint if you believe that your personal data have been processed unlawfully or that your rights under the GDPR have been infringed.

The competent Croatian supervisory authority is:

Croatian Personal Data Protection Agency
Agencija za zaštitu osobnih podataka — AZOP
Selska cesta 136
10000 Zagreb
Croatia

Email:
azop@azop.hr

Website:
https://azop.hr

You may also contact the competent data-protection authority in the EU or EEA country of your habitual residence, place of work or the place where the alleged infringement occurred.

Effective date: 6 August 2026

Data controller:
Fran Baća

FB DIGITAL MEDIA, obrt za usluge
Glavna ulica 4
Goranec, Croatia
OIB: 76054818354

Email: hello@fran-baca.com
Telephone: +385 95 790 9840