Last updated: 20/06/2026

This Privacy Policy explains how FLAVOR LAB, sole proprietorship for service activities, owned by Chiara Ožaković, located at Galovačka ulica 1, Zadar, collects, uses and protects the personal data of users of the website https://flavor-lab.hr/.

By using this website or submitting an inquiry through the contact form, you confirm that you have read and understood this Privacy Policy.

1. Data controller

The data controller is:

FLAVOR LAB, sole proprietorship for service activities
Owner: Chiara Ožaković
Galovačka ulica 1, Zadar
OIB: 80221755818
E-mail: ozakovicc@gmail.com
Phone: +385 95 563 1823

2. Personal data we collect

We collect personal data when you voluntarily provide it to us through the contact form, by e-mail, phone call or other form of communication.

The data we may collect includes:

• first and last name
• mobile phone number
• e-mail address
• planned event date
• event location
• number of guests
• type of service
• preferred menu type
• estimated budget
• information about allergies or dietary requirements
• additional notes that you enter in the message

We may also collect basic technical data generated by your use of the website, such as IP address, browser type, device type, browser language, time of visit and similar information, if necessary for the operation, security and improvement of the website.

3. Special note on allergies and dietary requirements

If you provide us with information about allergies, intolerances, dietary habits or other special food-related requirements, such data is processed solely for the purpose of preparing an appropriate offer, adapting the menu and safely providing the service.

Such data is not used for marketing purposes and is not shared with third parties unless necessary for the organization and execution of the agreed service.

4. Purpose of processing personal data

We process personal data for the following purposes:

• responding to user inquiries
• preparing personalized offers
• communicating with potential and existing clients
• arranging the date, location, type of service and menu
• organizing and executing the agreed service
• adapting the service to special preferences, allergies or dietary requirements
• maintaining business documentation
• fulfilling legal obligations
• protecting the rights and interests of the business
• ensuring the security and proper functioning of the website

5. Legal basis for processing

We process personal data based on one or more of the following legal bases:

• taking steps prior to entering into a contract, for example when sending an inquiry and preparing an offer
• performance of an agreed service
• legal obligation, for example keeping business and accounting documentation
• legitimate interest, for example business protection, client communication and website security
• consent, where required, for example when using non-essential cookies or voluntarily submitting certain special data

6. Contact form

When you complete the contact form on the website, we collect the data you enter into the form. This data is used solely so that we can understand your inquiry, prepare an offer and contact you regarding the requested service.

By submitting the form, you confirm that the information you entered is accurate and that you are voluntarily providing it for the purpose of processing your inquiry.

7. Data retention period

We retain personal data only for as long as necessary for the purpose for which it was collected.

Inquiry data may be retained until the communication and service arrangement are completed, or longer if the service is carried out and retention is required for business, accounting or legal obligations.

Data related to business documentation is retained for the periods prescribed by the applicable laws of the Republic of Croatia.

8. Sharing of personal data

We do not sell, rent or disclose personal data to third parties for marketing purposes.

Data may be shared only when necessary for:

• providing the agreed service
• technical maintenance of the website
• website hosting and security
• accounting and administrative obligations
• fulfilling legal obligations
• protecting the rights and interests of the business

All external associates who may have access to personal data are required to act in accordance with data protection regulations.

9. Cookies

The website may use cookies for proper functionality, improving user experience, analytics or displaying third-party content.

More information about the use of cookies is available in the Cookie Policy on this website.

10. Your rights

In accordance with applicable personal data protection regulations, you have the right to:

• request access to your personal data
• request correction of inaccurate data
• request deletion of personal data
• request restriction of processing
• object to processing
• request data portability, where applicable
• withdraw consent, if processing is based on consent

To exercise your rights, you may contact us by e-mail at: ozakovicc@gmail.com.

If you believe that the processing of your personal data is contrary to applicable regulations, you have the right to file a complaint with the Croatian Personal Data Protection Agency.

11. Data security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration or destruction.

However, no system for transmitting data over the internet is completely secure, and therefore we cannot guarantee the absolute security of data sent through the website.

12. Changes to this Privacy Policy

This Privacy Policy may be amended from time to time to reflect changes in our business, technology or applicable regulations.

The updated version will always be published on this website.