Privacy policy – ENA Massage & Fitness

Last updated: 29 September 2026. In case of any discrepancy, the Croatian version prevails.

1. Controller

ENA, obrt za masažu i njegu tijela, owner Estena Ferčec, Klekova ulica 19, 10000 Zagreb, Croatia, OIB 82009528704, e-mail estenaf@gmail.com, phone +385 99 707 7227 (“we”).

2. What data we collect and why

Enquiries and bookings via the form – first and last name, phone number, e-mail (optional), selected treatment and message. Purpose: replying to your enquiry and arranging an appointment. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Communication by phone, e-mail or social media – the data you send us, for the same purpose.
Technical data – IP address and browser information logged by the server for security and proper operation of the website (legitimate interest, Art. 6(1)(f) GDPR).

We do not ask for health information through the form. Please do not include it in your message; we will discuss it in person before the treatment.

3. Retention

We keep enquiries for no longer than 12 months after the last contact, unless they lead to a business relationship – in that case we keep data as long as accounting and tax regulations require.

4. Processors and recipients

Netlify, Inc. (USA) – website hosting and receiving form messages. Transfers are based on the European Commission’s Standard Contractual Clauses and the EU–US Data Privacy Framework.
Google LLC – only if you click “Show map” on the Contact page; Google Maps is then loaded and may set its own cookies.

We do not sell your data or share it with third parties for marketing.

5. Cookies

This website uses no analytics or marketing cookies. After you close the notice on the home page, your browser remembers locally that you have seen it, only until you close the tab. Google Maps loads only when you click.

6. Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to object, the right to data portability and the right to withdraw consent. Send your request to estenaf@gmail.com; we will reply within 30 days.

If you believe your data has been processed unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

7. Security

The website is served only over an encrypted connection (HTTPS), and only the owner has access to received messages.