● Legal information ●

Privacy Policy

Last updated: 8 May 2026

1. Data controller

The controller of personal data collected through this website is:

Co Digit d.o.o. (domain owner and technical infrastructure provider)

Studio: Beauty by Daria

Studio address: Obrež 20, 10360 Sesvete-Soblinec, Croatia

Instagram: @__beautybydaria__

Contact for privacy inquiries: marino@codigit.hr

2. What data we collect

Through the website daria-lash.com we automatically collect:

• Technical data — IP address (anonymized), device, browser and OS type, date and time of visit, pages visited.
• Behavioural data — clicked links, time on page, traffic source (e.g. Google search, ad, direct).
• Buker clicks — when you click a booking link (e.g. "Book on Buker"), the event is recorded to measure campaign performance.

The site does not collect your name, email or phone. All bookings go through the Buker platform, which has its own privacy policy.

3. Legal basis and purpose

We process data based on:

• Your consent (Art. 6(1)(a) GDPR) — for analytics (Google Analytics) and marketing cookies (Google Ads). You may give or refuse consent via the cookie banner, and withdraw it at any time by clearing your browser's local storage.
• Legitimate interest (Art. 6(1)(f) GDPR) — for strictly necessary technical cookies required for the site to work.

Purpose: measuring website performance, content optimization, measuring Google Ads campaign performance, and improving user experience.

4. Recipients

We share data only with the following processors:

• Google Ireland Limited — Google Analytics 4 (traffic measurement) and Google Ads (campaign measurement). More: policies.google.com/privacy
• Hosting provider (cPanel hosting) — for storage and serving of the site.
• Netlify (backup hosting and DNS) — more: netlify.com/privacy

5. Transfers outside the EU

Google Analytics and Google Ads may process data on servers outside the EU (mainly the US). Google guarantees protection through EU Standard Contractual Clauses and measures such as IP anonymization and aggregated processing.

6. Retention

• Analytics cookies (GA4): up to 2 months (default).
• Marketing cookies (Google Ads): up to 90 days.
• Cookie consent (browser local storage): until you delete it manually.

7. Your rights

Under the GDPR you have the right to:

• access the data we process,
• rectification of inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the supervisory authority — Croatian Personal Data Protection Agency (AZOP).

Send requests to the email in section 1. We will respond within 30 days.

8. Cookies

The site uses the following cookie categories:

• Necessary — required for the site to function (e.g. storing your consent choice). Always active.
• Analytics — Google Analytics 4 (`_ga`, `_ga_*`). Set only with your consent.
• Marketing — Google Ads (`_gcl_au`, `IDE`). Set only with your consent.

You can change your choice at any time by clearing the cc_consent item in your browser's local storage or by clearing cookies in your browser settings.

9. Policy updates

We reserve the right to update this policy. Any updates will be published on this page with the revised date.