Who we are

We are IN FLOW, a business for creative services, visual communication, and a travel agency, owned by Ingrid Blažina (hereinafter referred to as “we,” “our,” or “our business”). This Privacy Policy applies to your use of our website, www.splendourofheart.com, the services we provide (hereinafter referred to as “Services”), or when you contact us in any way.

This Privacy Policy is in accordance with the General Data Protection Regulation (GDPR) and the Personal Data Protection Act, and it was updated on September 06, 2024.

What personal data do we collect and when?

We collect your personal data when you visit our website, subscribe to our notifications, contact us (via contact platforms, email, phone), book workshops, or order any of our services. As part of providing services, we collect the following personal data:

  • Name and surname
  • Personal Identification Number (OIB)
  • Contact details: phone number and/or email address
  • Information about you and/or your animal (name, species, gender, age, details of the reason for contacting us, and related notes)
  • We also collect other personal data on our website, such as cookies. Please read our Cookie policy

What is the legal basis for collecting your personal data?

We collect and store your personal data based on several legal grounds:

  • Consent (GDPR Article 6.1.(a))
  • Contract execution (GDPR Article 6.1.(b))
  • Legitimate interest under GDPR Article 6.1.(f)

Contractual obligation: Whenever processing your personal data is necessary for the execution, implementation, and management of a contract made with us.
Legal obligation: In some cases, the law requires the collection and storage of your personal data.
Legitimate interest: For certain data, we have a valid and fair reason to use it in a way that does not harm your interests and rights.
Consent: When you voluntarily enter your data (for example, your email address), you should expect that this information will be stored and used by our systems in accordance with this Privacy Policy.

Why and how do we process your personal data?

We use your data solely for fulfilling your orders and/or bookings of our Services, for our legal obligations related to providing the Services, to respond to your inquiries, or to inform you about us or our services, with your permission. Additionally, we use it to ensure the efficient operation of the system for the computer or device from which you access our website.

By providing personal data, you agree to the transfer, storage, and processing of the data. We will not transfer personal data outside the European Union without your prior written consent.

Online service booking via SetMore platform – third-party service

To simplify the process of booking, canceling, editing, sending reminders, and providing details about scheduled appointments for individual services, our online booking service is provided by the SetMore platform on our behalf. You can review SetMore’s Privacy Policy at www.setmore.com/privacy.

The information we store on SetMore includes:

  • Client’s name
  • Client’s phone number
  • Client’s email address
  • Information about your animal

They are responsible for all financial transactions and will collect your email address, private information (name, phone number, animal information), and payment methods for purchasing our services. We receive information about your name, surname, and email address, which we will use to send an email with an option to subscribe to our newsletter.

Payment via PayPal – Third-Party Service

If you choose to make a payment using PayPal, you consent to the transfer of your purchase information to PayPal. IN FLOW does not have access to the buyer’s card details, and PayPal is considered the data controller. The data transferred to PayPal includes your name, surname, email address, IP address, phone number/mobile number, and purchase details. PayPal processes this data to complete the transaction, verify the buyer’s identity, prevent fraud, and share information with credit agencies in accordance with their privacy policy. Information is provided directly to third-party payment processors, whose use of your personal data is governed by their Privacy Policy. These payment processors comply with PCI-DSS standards managed by the PCI Security Standards Council, a joint effort of brands

Contact Forms – Third-Party Service

To make it easier for you to use our services or to learn more about them, you can contact us through the available platforms on our websites. In such cases, we will collect your personal data, such as:

  • Name and surname
  • Email address

After receiving your inquiry, we will contact you via email to respond to your query and provide the requested information. Data retention period: If we do not enter into a contract, we will keep the data based on legitimate interests until you object to the processing of your personal data for that purpose or, if consent was given, until you withdraw your consent.

Social Media – Third-Party Service

On our website, the data controller may integrate or have integrated components of Facebook. If you have initiated communication with us through social media profiles, the personal data we collect through social media includes:

  • Name and surname
  • Email address

Additional information and applicable data protection provisions of Instagram can be found at: https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/

IN FLOW has the following social media pages/profiles:
Instagram: @indream7
Instagram: @splendourofheart

Newsletter – Third-Party Service

The personal data collected through newsletter sign-up includes:

  • Name and surname
  • Email address

The personal data collected through newsletter sign-up is used solely for the delivery of newsletters to the email address entered by the user during registration and is not used for any other purpose. By giving consent to the use of personal data during newsletter registration, you permit us to use and store your personal data for marketing purposes until you withdraw your consent or unsubscribe from receiving newsletters. Your email address is stored on the business’s server and is also forwarded to the Mail chimp service we use to send newsletters. We will retain your email address until you unsubscribe from the newsletter. You may withdraw your consent at any time. Such withdrawal does not affect the lawfulness of the processing based on consent before its withdrawal. You can unsubscribe from receiving our newsletters at any time by clicking the “Unsubscribe” icon, which will be included in every edition of the newsletter. By withdrawing your consent, you will no longer receive our newsletters but will still be able to use our website and other services.

The legal basis for processing personal data is your consent for us to inform you about our products and services, in accordance with Article 6(1)(a) of the GDPR Regulation.

Reviews and Impressions

For the purpose of gathering information and feedback regarding our services and client satisfaction, we directly collect your opinions and reviews on the specific service you are using. To improve our services, we may collect the following data:

  • Name and surname
  • Email address
  • Photograph
  • Your review or opinion

The legal basis for processing personal data is our legitimate interest in monitoring client satisfaction to improve and adapt our services, in accordance with Article 6(1)(f) of the GDPR Regulation.
We may publish certain reviews on our websites, in newsletters, or on social media, where your name, surname, and photograph will be visible, or only the personal data you allow us to publish in a specific case.

When You Browse Our Website – Third-Party Service (e.g., Google Analytics)

We use cookies to collect information used either in aggregate form to help us understand how our website is being used or to assess the effectiveness of our marketing campaigns, or to help us tailor our website to your preferences.
The personal data we collect: typically, we collect IP addresses, browser type, pages you visited and the order in which you visited them, as well as whether you are a new or returning visitor. This data is processed only in a way that does not identify anyone, but helps us maintain and improve our website and business. For more information, please read our Cookie Policy.
Legal basis for data collection: Consent (GDPR Article 6(1)(a)).

Compliance with Legal Obligations

The regulations in force in the Republic of Croatia require us to collect and process data for certain purposes, such as accounting (e.g., issuing invoices) and providing data in compliance with judicial authority requests.

Privacy Policy of Other Websites

Our website contains links to other websites. Our Privacy Policy applies only to our website, so if you click on a link to another website, you should read their privacy policy. We are not responsible for the protection and privacy of any information you provide while visiting other websites. You should be cautious and review the privacy statement applicable to the website in question.

Do We Share or Disclose Your Data?

We retain your data for as long as it is necessary to fulfil our obligations to you or as prescribed by law. Once this period has passed and we no longer need or are legally required to retain your data, we will delete it.

How Can You Withdraw Your Consent?

If you change your mind after giving consent, you can withdraw your consent to contact you, or for the continued collection, use, or disclosure of your data at any time by accessing the privacy centar or contacting us at: hello@splendourofheart.com.

What Are Your Data Protection Rights?

Your rights regarding our processing of your personal data, collected in accordance with this Policy, are as follows:

  • The right to obtain confirmation on whether your personal data is being processed, and if so, the right to access your personal data and receive a copy of the personal data we are processing.
  • The right to request the correction of any data you believe is inaccurate, or to complete any data you believe is incomplete.
  • The right to request the deletion of your personal data if it is no longer necessary for the purpose for which it was collected, if it has been processed unlawfully, if you withdraw, either fully or partially, the consent you gave us for processing your personal data, and if there are no other legal grounds for processing, or if it must be deleted to comply with a legal obligation under applicable regulations.
  • The right to restrict processing if you dispute the accuracy of your personal data, for the period that allows us to verify the accuracy of the personal data; if the processing is unlawful but you oppose the deletion of your personal data and instead request the restriction of its use; if we no longer need the personal data for processing purposes, but you require it for establishing, exercising, or defending legal claims; or if you have objected to the processing of your personal data based on legitimate interests, awaiting the verification of whether legitimate reasons override your personal interests.
  • The right to object at any time to the processing of your personal data for direct marketing purposes, including profiling to the extent related to such direct marketing.
  • If we process certain personal data based on your consent, you have the right to withdraw your consent at any time; however, this does not affect the legality of processing based on consent prior to its withdrawal.
  • The right to request, under certain conditions, that we transfer the data we have collected to another organization or directly to you.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that we are unlawfully processing your personal data, you have the right to file a complaint with the data protection supervisory authority. In the Republic of Croatia, this is the Croatian Data Protection Agency (www.azop.hr). If your usual place of residence, place of work, or the place of the alleged violation is within the European Economic Area, or if you believe that your rights have been violated, you can lodge a complaint with the supervisory authority of that country.

You can find the contact information of national data protection authorities here:
http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

Cookies

Please read our Cookie policy

Minors

Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from individuals under 18. If we discover that a person under 18 has provided us with personal data, we will promptly delete it from our servers. If you are a parent or guardian and are aware that your child has provided us with personal data, please contact us at hello@splendourofheart.com so that we can take appropriate actions.

Security

We will process your personal data in a way that ensures appropriate security, including protection against unauthorised or unlawful processing, as well as accidental loss, destruction, or damage, using appropriate technical or organisational measures.

Changes to Our Privacy Policy

In flow, owned by Ingrid Blažina, reserves the right to modify this Privacy Statement if we believe it is necessary for legal reasons. Once we change the Security and Privacy Statement, it becomes effective immediately upon publication. If you disagree with these changes, please stop using our services and website. Please check these Rules from time to time to stay updated on any changes.

How to Contact Us

If you have any questions about our Privacy Policy, the data we hold about you, wish to exercise any of your data protection rights, or have any complaints or requests related to our processing of your personal data, please contact us at: hello@splendourofheart.com or phone: +385 951985264.

CONTACT INFORMATION:

IN FLOW, creative services, visual communication, and travel agency, owned by Ingrid Blažina
Phone: +385 95 1985 264
Email: ingrid@inflow.hr
Website: www.splendourofheart.com