Privacy notice
Last updated 10 September 2026
Who is responsible
SevenM Technologies d.o.o., Ulica Ede Murtića 2A, Zagreb, Croatia (OIB 19277070007), is the controller of the personal data described here. You can reach us atinfo@sevenm.tech, or see ourlegal information page.
What we collect
Only what you type into the contact form: your name, email address, optionally your company name and an indicative budget range, and your message. We do not collect anything else, and we set no advertising, analytics or tracking cookies.
Why we collect it
To read and reply to your enquiry. Our lawful basis is legitimate interests under Article 6(1)(f) GDPR — our interest in responding to people who contact us about our services, balanced against your rights, which we consider minimal here because you chose to write to us and decide what to include.
Where an enquiry becomes a discussion about actually working together, we process your details under Article 6(1)(b) instead, as steps taken at your request before entering into a contract.
Because we rely on legitimate interests, you have the right to object to this processing at any time. If you object, we will stop and delete what we hold, unless we are legally required to keep it — for example, correspondence relating to an engagement that Croatian accounting and tax law obliges us to retain — or where we need it to establish or defend a legal claim.
Who processes it
- Cloudflare, Inc. — hosting, CDN, bot protection via Turnstile, and cookieless web analytics.
- Resend — delivers your form submission to our inbox. Sending is configured in the EU region.
- Proton AG — our mailbox provider, based in Switzerland.
Where your data goes
Resend's sending is configured in the EU region, and Proton is based in Switzerland, which the European Commission recognises as providing an adequate level of protection.
Cloudflare, Inc. is based in the United States and operates a global network, so handling your request may involve a transfer outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
Cookies and analytics
We use Cloudflare Web Analytics, which is cookieless and does not collect personal data or fingerprint visitors. We set no advertising or tracking cookies of any kind.
The contact form is protected by Cloudflare Turnstile, which may set strictly necessary cookies (such as cf_clearance) to record that a bot check has been passed. These are security cookies, exempt from consent requirements under the ePrivacy Directive, and they are not used to track or profile you. This is why you have not been asked to accept cookies.
How long we keep it
Enquiries live in our mailbox. We review it periodically and delete enquiries that did not lead to work, and in any case we do not keep them longer than 24 months. This is a manual process, not an automated one — if you would like your enquiry deleted sooner, ask and we will do it.
Correspondence relating to an actual engagement is retained for the period required by Croatian accounting and tax law.
Automated decisions
We do not use automated decision-making or profiling. A person reads every enquiry.
Your rights
You may request access, correction, erasure, restriction, portability, or object to processing. Write to info@sevenm.tech and we will respond within one month. You may also complain to the Croatian Personal Data Protection Agency (AZOP).