PRIVACY POLICY

Last updated: August 5, 2026

ink 7 lab Studios d.o.o. attaches great importance to the protection of users“ personal data and is committed to processing it in a correct, transparent, and secure manner, in compliance with Regulation (EU) 2016/679 (”GDPR") and applicable Croatian legislation on the protection of personal data.

This Privacy Policy describes how the personal data of users who visit the website www.ink7lab.com, send a request, request information, or contact ink7lab are collected, used, stored, and protected.

Data controller

The Data Controller is:

ink 7 lab Studios d.o.o.
OIB / VAT ID: HR20560311227
1st of May Street 4
52470 Umag, Croatia
E-mail: contactnow@ink7lab.com
Website: www.ink7lab.com

Types of data processed

Depending on the interaction with the site, the following categories of personal data may be processed:

first and last name;
company, organization, or institution to which you belong;
email address;
phone number;
information regarding the requested event, project, or service;
event date and location;
billing and payment information, when necessary;
the content of messages and communications sent;
résumé and professional information, if applications are submitted;
IP address, browser type, device used, browsing data, and information collected through cookies or similar technologies.

Users are invited not to transmit unnecessary personal data, particularly confidential information, or data belonging to third parties without authorization.

Purposes and Legal Bases for Data Processing

Personal data may be processed for the following purposes:

Respond to requests and communications
To respond to questions submitted via contact forms, email, phone, WhatsApp, or other communication channels.

The legal basis is the performance of precontractual measures requested by the data subject or the Data Controller’s legitimate interest in managing the communications received.

Prepare quotes and proposals

To analyze customer needs, assess the feasibility of a project, and prepare quotes, presentations, or customized sales proposals.

The legal basis is the performance of precontractual measures requested by the data subject.

Manage contracts, services, and events

To organize and produce drone light shows, VR gaming experiences, photo and video booths, creative and technological services, and other projects requested by the client.

The legal basis is the performance of the contract and the fulfillment of the related obligations.

Manage billing, payments, and administrative obligations

To issue accounting documents, manage payments, collections, and fulfill tax, administrative, and legal obligations.

The legal basis is compliance with legal obligations and the performance of the contract.

Send marketing communications

To send, subject to consent when required, updates, presentations, offers, newsletters, and information about ink7lab's services.

The legal basis is the data subject's consent. Consent may be withdrawn at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal.

In the cases permitted by law, ink7lab may contact existing customers regarding similar services, based on its legitimate interest and always guaranteeing the possibility to object.

Improving the website and ensuring its security

To analyze how the site works, prevent abuse, protect IT systems, and improve the browsing experience.

The legal basis is the Data Controller’s legitimate interest. When analytical or marketing cookies that are not strictly necessary are used, the processing is based on the user’s consent.

Manage Applications and Collaborations

To evaluate unsolicited applications, professional proposals, or potential collaborations.

The legal basis is the performance of precontractual measures requested by the data subject and, where necessary, consent.

Data Transfer

Providing the information marked as required on the forms is necessary to allow ink7lab to respond to your request.

Failure to provide this information may make it impossible to provide the information, prepare a proposal, or deliver the requested service.

Providing data for promotional or marketing purposes is optional.

Data origin

Data is generally provided directly by the data subject via the website, e-mail, telephone, WhatsApp, social networks, meetings, events, or other communications.

In some cases, data may be disclosed by companies, agencies, organizers, partners, or authorized representatives involved in the project.

Data recipients

The data may be disclosed, within the strictly necessary limits, to:

authorized staff and collaborators of ink7lab;
hosting, email, cloud service and IT support providers;
legal, tax, administrative, and accounting consultants;
banks, payment institutions and insurance companies;
technical partners, suppliers, and collaborators necessary for the preparation or performance of the service;
agencies, venues, organizers, and other parties involved in the project;
public authorities, competent agencies, or regulatory bodies, when required by law.

Suppliers who process data on behalf of ink7lab are appointed as data processors, where required by Article 28 of the GDPR.

Personal information is not sold to third parties.

International Transfers

Some technology providers may process personal data in countries outside the European Economic Area.

In such cases, the transfer will take place in compliance with Chapter V of the GDPR, on the basis of an adequacy decision by the European Commission, Standard Contractual Clauses, or other safeguards recognized by applicable law.

Shelf Life

Data is retained only for as long as necessary to fulfill the purposes for which it was collected.

Specifically:

Requests for information and the related contact information are retained for as long as necessary to process the request and any subsequent business relationships;
contractual, administrative, tax, and accounting data are retained for the periods established by applicable law;
Data used for commercial communications are retained until consent is withdrawn or the right to object is exercised;
Resumes are kept for a period proportional to the selection purpose and subsequently deleted, barring consent for longer retention;
Technical and security data are retained for as long as necessary to ensure the proper functioning and protection of the site.

Upon expiration of the applicable terms, the data will be deleted, anonymized, or stored exclusively when necessary to comply with a legal obligation or protect a right.

Rights of the Data Subject

The data subject may exercise the following rights, where applicable:

obtain confirmation of the existence of processing;
access your personal data;
request the correction of inaccurate or incomplete data;
request the deletion of data;
request the restriction of processing;
object to processing based on legitimate interests;
to receive the data in a structured, machine-readable format;
request data portability;
revoke consent at any time;
not to be subject to decisions based solely on automated processing, in the cases provided for by the GDPR.

Requests can be sent to contactnow@ink7lab.com or to the Data Controller's postal address.

Before responding, ink7lab may request the information strictly necessary to verify the applicant's identity.

Complaint to the supervisory authority

The data subject has the right to file a complaint with the competent supervisory authority.

For a data controller established in Croatia, the competent authority is:

Agency for the Protection of Personal Data – AZOP
Croatian Personal Data Protection Agency
Selska Street 136
10,000 Zagreb, Croatia
Website: www.azop.hr

This is without prejudice to the data subject’s right to contact the competent authority in their country of habitual residence or to exercise any other remedies provided by law.

Data Security

ink7lab implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, alteration, or unlawful disclosure.

Nessun sistema informatico può tuttavia garantire una sicurezza assoluta. Gli utenti sono pertanto invitati a utilizzare dispositivi e connessioni sicuri e a non inviare informazioni non necessarie o particolarmente riservate.

Minori

Il sito e i servizi professionali di ink7lab non sono destinati direttamente a minori. Il Titolare on raccoglie consapevolmente dati personali di minori attraverso il sito senza l’autorizzazione del genitore o del soggetto che esercita la responsabilità genitoriale, quando richiesta.

Link e servizi di terze parti

Il sito può contenere link, video, mappe, contenuti incorporati, pulsanti social o collegamenti a piattaforme esterne.

Quando l’utente accede a tali servizi, i relativi fornitori possono trattare dati personali secondo le proprie informative. ink7lab invita gli utenti a consultare le privacy policy dei soggetti terzi interessati.

Modifiche all’informativa

ink7lab può modificare o aggiornare la presente Informativa per adeguarla a cambiamenti normativi, tecnici o organizzativi.

La versione aggiornata sarà pubblicata sul sito con l’indicazione della data dell’ultimo aggiornamento.