Skip to main content
Amplify

Privacy

Last updated: 4 August 2026

Amplify d.o.o. runs this website. This page explains what happens to personal data when you use it. It is short because the site does very little.

The summary: this site sets no cookies and runs no analytics. The only personal data we handle is what you type into the contact form, and we use it to reply to you.

Who is responsible

Amplify d.o.o. is the data controller.

Amplify d.o.o.
Domašinečka ulica 6, 10104 Zagreb, Croatia
OIB: 84622304630
hi@amplify.hr

Write to hi@amplify.hr about anything on this page. We are a small company and are not required to appoint a data protection officer, so your message comes straight to us.

The contact form

If you use the form, we receive your name, your email address, and your message. Those three fields are all the form collects, and you decide what goes in the message.

Why we use it: to read your enquiry and reply to it. Nothing else. We do not add you to a mailing list, we do not build a profile of you, and we do not sell or share your details with anyone for their own purposes.

Legal basis: our legitimate interest in answering people who get in touch with us (Article 6(1)(f) GDPR). If the conversation turns into a project, we then handle your data to take steps towards a contract with you (Article 6(1)(b)).

How long we keep it: two years after our last exchange, then we delete it. If the conversation becomes a project, the records that go with that project are kept for as long as Croatian accounting and tax law requires.

Who else handles your data

We use three service providers. Each one only processes data on our instructions, under a contract that requires it.

The service providers that process your data, what each one does, and where it is based.
ProviderWhat it doesWhere
Vercel Inc.Hosts this website and its DNSUnited States
Sand Dune Mail Ltd (SMTP2GO)Delivers the form submission to our mailboxNew Zealand
Fastmail Pty LtdHosts the hi@amplify.hr mailbox where your message is storedAustralia

Two of these are outside the European Economic Area:

  • New Zealand is recognised by the European Commission as providing an adequate level of data protection, so no additional safeguard is needed.
  • Vercel and Fastmail rely on the European Commission's Standard Contractual Clauses for transfers out of the EEA.

SMTP2GO keeps a sample of the messages it sends, roughly one in a thousand, for 35 days, to diagnose delivery problems. After that it is deleted.

Server logs

Our host records the usual technical information when a page is requested: the IP address, the time, the page, and the browser's user-agent string. This is how a web server works, and it is what lets us see that the site is up and being reached. We do not link these logs to the contact form, and we do not try to identify anyone from them.

Cookies

This site does not set any cookies. It previously loaded Google Analytics; that has been removed. There is nothing to consent to and no banner to dismiss, which is the point.

If we ever add analytics again, we will choose something that works without cookies, and this page will say so.

No automated decisions

We do not make any decision about you automatically, and there is no profiling.

Your rights

Under the GDPR you can ask us to:

  • give you a copy of the personal data we hold about you (Article 15)
  • correct it if it is wrong (Article 16)
  • delete it (Article 17)
  • restrict what we do with it (Article 18)
  • send it to you or another provider in a portable format (Article 20)
  • stop processing it, where we rely on legitimate interest (Article 21)

Email hi@amplify.hr. We will answer within one month, and there is no charge.

If you think we have handled your data badly, you can complain to the Croatian data protection authority, AZOP (Agencija za zaštitu osobnih podataka), azop.hr (opens in a new tab). You can also complain to the authority in the EU country where you live.

Changes

If this page changes, the date at the top changes with it. We will not make a change that reduces your rights over data already collected without telling the people affected.