Privacy Policy
Effective date: 3 October 2026
RedPattern Studio is the business name under which RPS, obrt za usluge operates ("RedPattern Studio", "we", "us", or "our").
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit redpattern.studio or contact us by email.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Croatian data protection legislation.
1. Who is responsible for your data
The data controller responsible for the processing described in this Privacy Policy is:
RPS, obrt za usluge
Operating under the business name RedPattern Studio
For privacy-related questions or requests concerning your personal data, you can contact us at:
2. Personal data we collect
The personal data we process depends on how you interact with our website.
Information you provide directly
If you contact us by email, we may process information such as:
- your name;
- your email address;
- the contents of your message;
- any other information you choose to include in your communication.
We use this information only to respond to your enquiry, communicate with you, and, where applicable, discuss or provide our services.
Information collected through the website
When you visit our website, certain technical and usage information may be collected through analytics and similar technologies, including:
- information about your device and browser;
- pages viewed and interactions with the website;
- approximate geographic information;
- information about how you navigate and use the website;
- technical identifiers and cookie-related information.
This information is used to understand website usage, maintain and improve the website, and identify technical or usability issues.
We do not intentionally submit directly identifying information such as your name or email address to Google Analytics or Microsoft Clarity through the website.
3. Analytics and website measurement
We use the following services to understand how visitors use our website and to improve its performance and usability:
Google Analytics 4
We use Google Analytics 4, provided by Google Ireland Limited, to collect statistical information about website usage.
Depending on the consent provided and the configuration of our Analytics property, Google Analytics may process information such as device and browser information, approximate location, page views, sessions, and interactions with the website.
For visitors in the European Economic Area, Google states that individual IP addresses are not logged or stored by Google Analytics. IP information may be used at the time of collection to derive approximate geographic information and is then discarded.
Google Analytics uses cookies and similar technologies where permitted by your consent settings. Google prohibits customers from sending personally identifiable information to Google Analytics.
Google Tag Manager
We use Google Tag Manager to manage and deploy website tags and scripts.
Google Tag Manager itself is a tag-management system. The tags deployed through it, such as Google Analytics, may process information according to their respective purposes and consent settings.
Microsoft Clarity
We use Microsoft Clarity, provided by Microsoft Corporation, to understand how visitors interact with our website.
Clarity may collect information about interactions such as clicks, scrolling, navigation, and other website activity and may provide session recordings and heatmaps.
Clarity is configured to respect user consent. For visitors in the European Economic Area, United Kingdom, and Switzerland, Microsoft requires a valid consent signal for full Clarity functionality. Where consent is denied, Clarity limits tracking and does not use its first-party and third-party cookies for persistent tracking.
Clarity currently retains playback data for 30 days and click/heatmap data for up to 9 months, subject to Microsoft's applicable retention policies.
4. Cookies and consent
Our website may use cookies and similar technologies that are necessary for the operation of the website, as well as non-essential technologies used for analytics and website measurement.
Where required by applicable law, we ask for your consent before activating non-essential analytics cookies or similar technologies.
You can accept or reject non-essential analytics technologies through our cookie consent mechanism.
If you give consent, you can later withdraw or change your choice.
Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
We do not use analytics technologies for advertising or sale of personal data.
5. Legal bases for processing
Depending on the circumstances, we process personal data on the following legal bases under Article 6 of the GDPR:
Consent
We rely on your consent for non-essential analytics and similar technologies where consent is required.
You can withdraw your consent at any time.
Legitimate interests
We may process limited technical information where necessary for the security, operation, maintenance, and improvement of our website and services, provided that our interests do not override your rights and freedoms.
Contractual and pre-contractual measures
When you contact us about our services, we may process information you provide in order to respond to your enquiry, discuss a potential project, prepare a proposal, or take steps at your request before entering into a contract.
Legal obligations
We may process or retain information where necessary to comply with applicable legal, accounting, tax, or other statutory obligations.
6. Email communications
If you contact us at hello@redpattern.studio, we process the information contained in your email in order to respond to you and manage our communication with you.
Our email and related business communications are provided through Google Workspace, operated by Google.
We do not sell, rent, or otherwise disclose your email address to third parties for their own marketing purposes.
We retain email correspondence for as long as reasonably necessary for the purpose for which it was collected, including managing ongoing business relationships and meeting applicable legal or accounting obligations.
7. Service providers and third parties
We use selected third-party service providers to operate our website and business, including:
- Google, for Google Analytics, Google Tag Manager, and Google Workspace;
- Microsoft, for Microsoft Clarity;
- Cloudflare, for website hosting, delivery, security, and related infrastructure.
These providers may process personal data on our behalf or as independent controllers for certain processing activities, depending on the service and applicable terms.
We use appropriate contractual and technical safeguards where required by applicable data protection law.
8. International data transfers
Some of the service providers we use may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we rely on an applicable legal mechanism under the GDPR, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or Standard Contractual Clauses and other appropriate safeguards.
9. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or where a longer retention period is required by law.
The retention period depends on the type of data and the purpose for which it is processed.
For example:
- email correspondence is retained for as long as reasonably necessary to manage the enquiry or business relationship and satisfy applicable legal obligations;
- Google Analytics user- and event-level data is subject to the retention settings configured for our Analytics property;
- Microsoft Clarity data is subject to Microsoft's applicable retention periods and policies.
10. Data security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. Your rights under the GDPR
Depending on the circumstances, you have the following rights under the GDPR:
- Right of access – to request information about and access your personal data;
- Right to rectification – to request correction of inaccurate or incomplete data;
- Right to erasure – to request deletion of your personal data where the legal requirements are met;
- Right to restriction – to request restriction of processing in certain circumstances;
- Right to data portability – to receive certain personal data in a structured, commonly used, machine-readable format;
- Right to object – to object to certain processing, including processing based on legitimate interests;
- Right to withdraw consent – where processing is based on your consent.
You may exercise applicable rights by contacting us at:
We may need to verify your identity before fulfilling certain requests.
Under the GDPR, requests should generally be answered without undue delay and, in principle, within one month.
12. Right to lodge a complaint
If you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected, you have the right to lodge a complaint with the relevant supervisory authority.
In Croatia, the supervisory authority is:
Agencija za zaštitu osobnih podataka (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb, Croatia
Email: azop@azop.hr
Website: www.azop.hr
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technology, legal requirements, or data-processing practices.
The updated version will be published on this page with a revised effective date.
14. Contact
For questions about this Privacy Policy or the processing of your personal data, contact:
RPS, obrt za usluge
Operating under the business name RedPattern Studio