Privacy policy

Last updated: 07.10.2026.

1. Who is responsible for your data?

The Hipnoza Rausch website is operated by PARHOS, obrt za usluge, vl. Nenad Rauš, Petra Preradovića 21, 42000 Varaždin, Croatia, as the controller of personal data.

For questions about privacy and to exercise your rights, you can contact us:

• Email: info@parhos.hr
• Postal address: Petra Preradovića 21, 42000 Varaždin, Croatia.

This policy describes how data is processed when you use our website, send enquiries and arrange services.

2. What data do we process and why?

Depending on how you contact us or use the website, we process:

• Contact details and the content of your enquiry, such as your name, email address and phone number, in order to respond to your enquiry. For enquiries about contracting a service, the legal basis is taking steps at your request prior to entering into a contract. For other business communication, the basis is our legitimate interest in responding to messages received.
• Data about your booking and the agreed service, in order to organise appointments and perform the contract.
• Data needed for issuing invoices and keeping the required records, in order to comply with legal obligations.
• Technical data, such as your IP address, access time and error logs, to the extent necessary for the security and operation of the website. The basis is our legitimate interest in protecting the website and preventing misuse.
• Data related to the embedded Google map, including your IP address and technical browser data that are transferred to Google when the map loads. More information is provided in the Cookie policy.

Providing the data needed for a reply or booking is not a legal obligation for visitors, but without the necessary contact details we may not be able to respond to your enquiry or arrange an appointment.

3. Health data

Please do not send medical records, diagnoses or other sensitive data through the general contact form.

If health data is needed to prepare or deliver a particular service, before collecting it we will provide a separate notice about the purpose, legal basis, access to the data and retention period and, where the processing is based on consent, ask for your explicit consent.

We do not consider sending a general enquiry or accepting cookies to be explicit consent to the processing of health data.

4. Who may have access to the data?

Personal data is accessed by the business owner in order to respond to enquiries, arrange appointments and provide services. We maintain the website ourselves and do not use external booking, analytics or advertising systems on the website.

We do not share clients’ personal data with external tour organisers.

Hosting, email and accounting service providers may have access to data only to the extent necessary to provide their services, subject to appropriate data protection obligations.

When the embedded Google map loads, Google receives the visitor’s IP address and technical browser data. Information about this processing is available in Google’s privacy policy.

We may provide personal data to the competent authorities when we are legally required to do so.

5. Transfers of data outside the European Economic Area

We use DigitalOcean for website hosting, Microsoft for email and Google Maps to show our business location. In the course of providing these services, personal data may also be processed outside the European Economic Area, including in the USA.

For such transfers, appropriate safeguards under the GDPR apply, depending on the recipient and the service used, including the European Commission’s standard contractual clauses or an applicable adequacy decision.

You can request further information about transfers and the applicable safeguards at info@parhos.hr.

6. How long do we keep data?

We keep the data you provide through the contact form, including your name, email address and the content of your message, until the communication ends and for no longer than 12 months after that.

If a particular message needs to be kept to comply with a legal obligation or to establish, exercise or defend legal claims, we keep it for as long as necessary for that purpose.

After the applicable period expires, we delete the messages and the associated personal data.

We keep the data needed to organise appointments and provide the agreed service until the service and the associated support have ended. Further retention is limited to the data needed to comply with legal obligations or to establish and defend legal claims.

We keep invoices and data in mandatory business records for the periods prescribed for the relevant type of documentation.

We keep the record of written consumer complaints for one year from receipt of the complaint, and longer only if another applicable legal obligation exists or it is needed to establish or defend legal claims.

7. Your rights

Under the conditions set out in the GDPR, you can request access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest.

If the processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of the processing carried out before it.

Send your request to info@parhos.hr. We will usually respond within one month. If an extension permitted by law is necessary, we will inform you of the reasons in good time.

You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP). Information is available at azop.hr.

8. Data protection

We apply appropriate technical and organisational measures to protect data from unauthorised access, loss, alteration and disclosure. We restrict access to the people who need it to carry out their tasks.

9. Changes to this policy

We update this policy when the ways in which we process data or the applicable requirements change. The current version is available on this page, together with the date of the last update.