Privacy Policy
Last updated: August 22, 2026
1. Data Controller
The controller of personal data collected through this website isAmmmigo labs j.d.o.o., Ul. Ivana Brozine Slovana 24/1, 51410 Opatija, Croatia, company registration number (OIB): 75825699494, registered with the commercial court register of the competent commercial court in Croatia. Contact for data protection questions:eskrobonja@ammmigo.com.
2. What data we collect and why
2.1. Inquiry form
When you submit an inquiry through the form, we collect: your full name, email address, phone number, storage type (personal/business), desired size and timing, and the content of your message.
Purpose: responding to your inquiry and checking storage space availability as part of our pilot program. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). For any later marketing contact beyond a direct reply to your inquiry, we rely on your consent (Art. 6(1)(a) GDPR), which you give by checking the consent box in the form.
We are currently in a pilot-program phase in which we are gauging interest before opening the location. Submitting an inquiry does not create a rental contract or reserve a space — it is a non-binding inquiry, on the basis of which we will contact you once we confirm space availability and final terms.
Form data is delivered to us by email through our processor (Resend), and we keep it in our business mailbox for up to 12 months from receipt of the inquiry, after which we manually delete it — unless we enter into a contract with you, in which case it is retained in accordance with contractual, accounting, and tax obligations. We may retain aggregated, anonymized statistics (e.g. inquiry counts per channel) for longer, since this no longer constitutes personal data.
2.2. Visit source (UTM parameters)
If you arrived at the site via an ad or link, we also record data about the visit source alongside your inquiry (e.g. UTM parameters, ad click identifiers, or the page you came from) so we can understand which marketing channel inquiries come from. The legal basis for this processing is our legitimate interest in measuring the effectiveness of our marketing channels (Art. 6(1)(f) GDPR).
2.3. Form protection (Cloudflare Turnstile)
To protect the form from abuse we use Cloudflare Turnstile, which may process technical data (e.g. IP address and browser characteristics). The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). More information:Cloudflare's privacy policy.
2.4. Marketing and analytics tools
We use Google Tag Manager to load the Google Ads andGoogle Analytics tags (Google Ireland Ltd.). These tags load on every visit to the site, but until you consent they run in a privacy-safe mode (Google's Consent Mode) — they do not set marketing or analytics cookies or personalize ads, and only send a technically necessary, anonymized signal. Full tracking (cookie storage, per-visitor traffic measurement, and ad personalization) is only enabled once you consent via the cookie banner. Legal basis: before consent, our legitimate interest in basic, anonymized traffic measurement without setting cookies (Art. 6(1)(f) GDPR); after consent, your consent to full tracking, traffic measurement, and personalization (Art. 6(1)(a) GDPR).
Separately, Meta Pixel (Meta Platforms Ireland Ltd.) is only loaded with your consent and does not run at all beforehand. Legal basis: consent (Art. 6(1)(a) GDPR).
You may withdraw consent at any time via the "Cookie settings" link in the site footer. Once these advertising technologies load, Google and Meta generally act as independent controllers for data collected through their own advertising technologies — see their own privacy policies: Googleand Meta.
3. Cookies
Necessary cookies do not require your consent, as they are essential for the site to function. Marketing cookies are only set with your consent. You can change your preferences at any time via the "Cookie settings" link in the site footer or through your browser settings.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| cc_cookie | Necessary | Remembers your cookie consent choice | 6 months |
| cf_clearance / Turnstile | Necessary | Form abuse protection (Cloudflare) | up to 1 year |
| _gcl_au and related (_gcl_*) | Marketing | Google Ads — conversion tracking | up to 90 days |
| _ga / _ga_* | Analytics | Google Analytics — traffic measurement | up to 2 years |
| _fbp / _fbc | Marketing | Meta Pixel — conversion tracking | up to 90 days |
4. Recipients of data and transfers to third countries
Within Ammmigo labs j.d.o.o., access to your data is limited to authorized staff who need it to process your inquiry. Outside the company, your data is processed by the following processors or recipients:
- Cloudflare, Inc. — website hosting (Cloudflare Pages) and form protection (Turnstile); privacy policy
- Resend — technical delivery of form messages to our email address; privacy policy
- Adobe Inc. — web-font delivery (fonts are served from our own domain; used in building the site)
- Google Ireland Ltd. — Google Ads and Google Analytics (full tracking consent only); privacy policy
- Meta Platforms Ireland Ltd. — Meta Pixel (consent only); privacy policy
Some of the providers listed above may process data in the United States. Transfers are based on the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses with appropriate supplementary measures.
5. Your rights
Under the GDPR you have the right to:
- access your personal data,
- correct inaccurate data,
- erase data ("right to be forgotten"),
- restrict processing and object to processing,
- data portability,
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise your rights, contact us at eskrobonja@ammmigo.com. We will generally respond to your request within one month, and may ask you to verify your identity to protect your data. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the supervisory authority in any EEA member state where you live, work, or where the alleged infringement occurred — in Croatia this is the Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia,azop.hr.
6. Security
We take appropriate technical and organizational measures to protect personal data (e.g. HTTPS encryption in transit, restricted access to data), but no transmission over the internet is ever completely secure.
7. Children
This website and the services we offer are not directed at persons under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it.
8. Changes to this policy
We may update this policy from time to time. Material changes will be highlighted on this page. The current version is always published on this page with the date of the last update indicated. Any new processing arising from changes to this policy will rely on an appropriate legal basis under the GDPR.