Back

Privacy Policy

How Chika Lova processes and protects personal data.

1. Who is responsible for your data?

The data controller is: BENZ CONSULTING & DIGITAL SOLUTIONS, obrt za poslovno savjetovanje i razvoj digitalnih rješenja, vl. Tobias Benz Ulica Orban 34, 52100 Pula, Croatia OIB: 21481252620 Operating the Chika Lova brand and website. Privacy contact: info@chikalova.com

2. Data we collect

We process only the categories of data that we actually need and that you provide to us or that are generated when you use the website.

When you submit the “Tell us about your business” contact form, we may collect: name, business name, business type, city / area (if supplied), email, phone / WhatsApp (if supplied), website / domain (if supplied), the booking or contact channels you use today, the areas you would like to improve, any free-text message you provide, your selected website language, the source page, a timestamp, and referrer / UTM campaign information where technically available.

Technical website data collected automatically may include your IP address, browser and device information and request / log data. The website also stores your selected language and cookie preference in essential local storage.

3. Why we process personal data

We process personal data for the following purposes:

PurposeData usedLegal basisExample
Responding to enquiries and leadsName, business name, contact details and your messageWhere you request specific steps before entering into a contract: Art. 6(1)(b) GDPR. Where you contact us on behalf of a business and Art. 6(1)(b) does not directly apply to you as an individual: our legitimate interest in responding to and managing legitimate business enquiries, Art. 6(1)(f) GDPR.Reviewing your enquiry and replying to you
Preparing proposals and business communicationYour enquiry details and any information you sharePre-contractual measures / contract (Art. 6(1)(b) GDPR)Discussing Chika Lova services and preparing a requested offer
Operating and securing the websiteIP address, browser / device and request / log dataLegitimate interest (Art. 6(1)(f) GDPR)Technical operation, security, troubleshooting and abuse prevention
First-party platform analyticsBasic first-party usage events (e.g. that a form was opened or submitted) and associated request dataLegitimate interest (Art. 6(1)(f) GDPR)Understanding which content is used so the website can be improved

Submitting the contact form is not treated as newsletter or marketing consent. Any marketing or newsletter communication will require its own valid legal basis. Where processing is based on consent, you can withdraw that consent at any time.

4. Contact form privacy

Submitting the “Tell us about your business” form is used to:

  • review the business enquiry
  • understand your current business setup
  • contact you about the enquiry
  • prepare possible next steps or an offer
  • store the enquiry in the Chika Lova lead / CRM system

Submitting the form lets us process your enquiry on the legal basis explained in section 3. The acknowledgment shown with the form is informational and directs you to this Privacy Policy; it is not marketing consent and does not subscribe you to any newsletter.

5. CRM / lead management

Business enquiries may be stored in the internal Chika Lova lead / CRM system (on the Base44 platform) for managing and following up on enquiries. Access is limited to authorised persons at BENZ CONSULTING & DIGITAL SOLUTIONS. Retention is explained in section 8.

6. Processors / service providers

The following service providers process personal data in connection with this website:

Base44 — website/app platform, hosting and CRM/data infrastructure

Purpose: Hosts and runs the Chika Lova website and application runtime, provides the database, authentication and the lead / CRM storage, and records first-party usage events. Base44 acts as a processor for personal data processed through the Chika Lova application.

Data: Technical access data (including IP address), request data and the contact-form data you submit. Base44 sub-processors include Supabase (database & authentication) and Amazon Web Services (storage).

Processing location: Data may be stored on servers worldwide, including within and outside the EEA. A data processing agreement with Base44 is in place.

Resend — transactional email delivery

Purpose: Delivers the internal lead notification and the automatic confirmation/reply email to you. Used only for transactional email delivery, not for newsletter or marketing campaigns.

Data: The data you provide (name, business name, email address and your message) as email content, plus the email information required to deliver the message.

Processing location: Email delivery may involve processing outside the EEA. An applicable lawful transfer mechanism (such as the EU-US Data Privacy Framework or Standard Contractual Clauses) is relied upon where required.

No other external processors (for example n8n, Make or AI providers) process website visitor or contact-form personal data through this website.

7. International data transfers

Some of our service providers or their subprocessors may process personal data outside the European Economic Area. Where this occurs, transfers are protected using an applicable lawful transfer mechanism, such as an adequacy decision, the EU-US Data Privacy Framework or Standard Contractual Clauses, depending on the provider and processing relationship.

8. Data retention

We keep personal data only for as long as necessary for the stated purpose or where required by law. The following periods apply:

  • Contact enquiries: up to 24 months after your last contact with us, unless you request earlier deletion or a legal obligation requires longer retention.
  • Active customer records: for the duration of the business relationship and afterwards only as needed under accounting or tax retention requirements.
  • Accounting, invoice and tax-related records: retained for the period required under applicable Croatian tax and accounting law. The applicable retention period depends on the category of document.
  • Technical server logs: only for as long as needed for security and operation, typically a short period.
  • Consent records (where applicable): until consent is withdrawn.

Your rights to deletion and restriction remain unaffected.

9. Your data subject rights

You have the following rights, where applicable:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent where processing is based on consent
  • Right not to be subject to decisions based solely on automated processing where this produces legal or similarly significant effects

To exercise your rights, contact us at info@chikalova.com.

10. Right to lodge a complaint

You have the right to lodge a complaint with the Croatian data protection authority:

Agencija za zaštitu osobnih podataka (AZOP)

11. Cookies

The website itself uses only essential local storage necessary for basic operation (your selected language and your cookie preference). No non-essential, analytics or marketing cookies are set by this website.

Essential (local storage)

Required for the website to function and to remember your selected language and your cookie preference. Always active and cannot be disabled.

First-party platform analytics

Basic usage events such as a page or form being opened or submitted, recorded via the Base44 platform. Not third-party web analytics. Disabled by default; can be enabled in cookie settings.

Marketing cookies

Not currently used. They would only be activated with your consent if introduced later.

12. Cookie consent

You can manage your preferences anytime using the “Cookie settings” link in the footer. Accept all enables first-party platform analytics; rejecting non-essential keeps only essential local storage. First-party analytics can be switched on or off again at any time in cookie settings.

13. Analytics & conversion tracking

The website uses the first-party analytics function of the Base44 platform to record basic usage events such as a page or form being opened or submitted. Processing may include request data such as your IP address. No third-party web analytics (such as Google Analytics or Meta Pixel) and no cross-site tracking are active. First-party analytics is disabled by default and can be enabled or disabled in cookie settings.

14. AI processing

No website contact-form data is intentionally sent by Chika Lova to an AI provider for analysis or automated decision-making. Chika Lova offers AI workflows as a service to client businesses, but personal data you submit through this website is not submitted to AI systems for processing.

15. Automated decision-making

No automated decisions with legal or similarly significant effects are made about you on the basis of the data collected through this website.

16. Data security

We apply appropriate technical and organisational measures to protect personal data, including access control, encryption in transit and restricted access to data. No system can be considered completely secure, and we continuously work to maintain an appropriate level of protection.

17. Changes to this privacy policy

We may update this policy when our services or processing activities change. The latest version is always published on this page with the “Last updated” date shown.

Last updated: 14 August 2026

This website uses only essential local storage. First-party platform analytics is optional and disabled by default. Manage your preferences anytime.