Privacy Policy
Updated: 2026-08-25
This notice explains which personal data we process in connection with the purchase and delivery of the guide.
Controller
Michaela Paternoster (provider, see Legal Notice). Data protection enquiries: info@edukacija-online.com.
Data processed
Name, email address and payment data collected during the checkout via Paddle.
Anonymised server logs (truncated IP, user agent) for operations and security.
No tracking cookies. Cookie-less usage analytics (Plausible) will be added after go-live.
Purposes of processing
Contract performance (delivery of the personalised PDF), invoicing, accounting, technical operations, abuse prevention.
Legal bases
Art. 6(1)(b) GDPR — performance of the sales contract.
Art. 6(1)(c) GDPR — statutory retention duties (accounting).
Art. 6(1)(f) GDPR — legitimate interest in secure operations.
Recipients / processors
Paddle.com Market Limited (payment processing, Merchant of Record).
Resend Inc. (transactional email delivery).
Cloudflare Inc. (hosting of the website and fulfilment worker, R2 object storage).
Data processing agreements pursuant to Art. 28 GDPR are in place with each processor. Details on request.
Retention periods
Order and invoice data are retained for ten years in line with accounting and tax retention duties.
Server logs are anonymised or deleted after fourteen days.
Data subject rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and the right to lodge a complaint with a supervisory authority.
In Croatia: AZOP — Personal Data Protection Agency, https://azop.hr.