Your data protection rights
The GDPR gives you specific rights over your personal data. Here is what each one means in practice, and how to use it with us.
Last updated: 29 August 2026
Who you are exercising them against
The controller is KriPa Web, obrt za računalno programiranje, vl. Kristijan Pavlic Tumpa, Vankina ulica 8, 10000 Zagreb, Croatia, European Union, OIB 27744574396. What we hold and why is described in our privacy policy. In our case it is usually nothing more than an email exchange you started.
The rights themselves
AccessArticle 15
Ask whether we hold anything about you, and receive a copy of it together with an explanation of why we have it and who else has seen it.
RectificationArticle 16
Have anything inaccurate corrected, and anything incomplete filled in.
ErasureArticle 17
Have your data deleted, unless we are legally required to keep it, for example the accounting records behind an invoice.
RestrictionArticle 18
Have us pause any use of your data while a dispute about its accuracy or our grounds is worked out.
PortabilityArticle 20
Receive the data you gave us in a structured, commonly used, machine-readable format, or have us send it to someone else where that is technically possible.
ObjectionArticle 21
Object to our use of your data where we rely on legitimate interests. We then stop unless we can show grounds that override yours.
Withdraw consentArticle 7(3)
Where we ever rely on your consent, withdraw it at any time. Doing so does not undo what was lawful before you withdrew it.
ComplainArticle 77
Take the matter to a supervisory authority, without needing our agreement and without going through us first.
How to use them
Write to kripaweb@kripaweb.com and say which right you are exercising and what you want. There is no form to fill in and no particular wording required.
- It costs nothing. We only charge, or refuse, if a request is manifestly unfounded or excessive, and we would explain why in writing first.
- We answer within one month. If a request is genuinely complex we may take up to two months more, and we will tell you inside the first month if that happens.
- We may need to check who you are, but only where we have real doubt, and only to the extent needed. We will not use the request as an excuse to collect more data about you.
If you are not satisfied
Tell us, and we will look at it again. You are also entitled to complain to Agencija za zaštitu osobnih podataka (AZOP), the Croatian supervisory authority, at Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, on +385 1 4609 000, or through azop.hr. You may also go to the authority in the EU country where you live or work. You do not need our permission and you do not have to come to us first.