GDPR, Cookies & Co.
How it works What we check Pricing FAQ
Free Website Review

Privacy Policy

Last updated: 25 September 2026

This is a general-purpose template, not legal advice. Replace every bracketed placeholder with your own details before publishing, and have it reviewed for your specific setup.

1. Who we are

This website is operated by GDPR Cookies & Co. d.o.o., Ivana Gundulića 6, 44320 Kutina, Croatia ("we", "us"). For any privacy question, contact us at contact@gdprcookiesandco.world.

2. What data we collect

  • Contact details you submit through our forms: name, email address, and the website URL you ask us to review.
  • Correspondence you send us by email.
  • Basic technical data generated by your browser when you visit this site (see our Cookie Policy).

3. Why we process it

  • To carry out the free preliminary review and, where purchased, the detailed compliance report.
  • To respond to enquiries sent through the contact form.
  • To process payment for the detailed report via our payment provider, Stripe.

The legal basis is performance of a contract (Art. 6(1)(b) GDPR) for review and payment requests, and legitimate interest (Art. 6(1)(f) GDPR) in responding to general enquiries.

4. Who we share it with

We do not sell personal data. We may share limited data with service providers strictly to deliver the service, including:

  • Stripe, for payment processing (Stripe's own privacy policy applies to payment data).
  • Our email provider, to send and receive correspondence.
  • Our hosting provider (GitHub Pages and/or Vercel, depending on where this site is deployed).

5. How long we keep it

We keep review requests and correspondence for 24 months after the last contact, unless a longer period is required by law (e.g. invoicing records).

6. Your rights

Under the GDPR you have the right to access, correct, delete, or restrict the use of your personal data, the right to data portability, and the right to object to processing. You can also lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at contact@gdprcookiesandco.world.

7. International transfers

Where a service provider is located outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Changes to this policy

We may update this policy from time to time. The date at the top shows the most recent revision.

GDPR, Cookies & Co.

Independent website compliance reviews.

Privacy Policy Cookie Policy Terms Legal Notice Contact