Last updated: 10 October 2026
1. Data controller
The controller of your personal data is Tena Fistonić, permanent court interpreter for English, Ivana Šibla 20, Središće, Zagreb, Croatia.
For any data protection question: tenafistonic@gmail.com, tel. +385 95 597 5545.
2. What data I process, why and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Replying to your enquiry and preparing a quote | Name, email, phone (optional), service, language direction, message, attached document | Consent (Art. 6(1)(a) - the checkbox in the form) and steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Producing and delivering the translation, certification | Data contained in the document to be translated, contact and delivery details | Performance of a contract (Art. 6(1)(b)) |
| Legal obligations (register of certified translations, accounting and tax) | Client and translation details, payment data | Legal obligation (Art. 6(1)(c)) |
| Protecting legal interests (e.g. proving the content of an agreement) | Communication and order data | Legitimate interests (Art. 6(1)(f)) |
| Secure and correct operation of the website | IP address, date and time of access, browser, requested page (server logs) | Legitimate interests (Art. 6(1)(f)) |
Providing data is voluntary, but without your name, email and document I cannot prepare a quote or translation. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
3. Special categories of data in documents
Documents sent for translation (e.g. medical reports, certificates of no criminal record) may contain sensitive data. I process such data solely to prepare your translation, based on your explicit consent (Art. 9(2)(a)) given by sending the document, and for no other purpose.
4. Retention periods
- Enquiries that did not lead to an order - up to 12 months after the last communication, then deleted.
- Translations and the register of certified translations - for as long as the rules governing permanent court interpreters require.
- Accounting records - periods set by law (generally up to 11 years).
- Server logs - short term, according to the hosting provider’s settings.
After the retention period, data is deleted or irreversibly anonymised.
5. Who has access to the data
I do not sell your data or use it for marketing. It may be received only by:
- the email provider (Google Ireland Limited - Gmail), because enquiries arrive at tenafistonic@gmail.com;
- the website hosting provider, which technically maintains the server;
- an accounting service, where needed to issue and record invoices;
- fellow court interpreters, only if you order a translation into a language I do not cover, with your prior knowledge and a duty of confidentiality;
- competent authorities, where required by law.
Processors are bound by a contract or terms of processing in line with Art. 28 GDPR.
6. Transfers outside the EU/EEA
This website does not transfer your data outside the EU/EEA. The email provider (Google) may process data in the USA; such transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
7. Cookies and tracking
This website does not use cookies, analytics, advertising or social media plugins, so no cookie banner is needed. Fonts are served from this server, not from external services. If I introduce tools that require consent in the future, I will ask for it before activating them and update this policy.
8. Google map
On the Contact page, the map loads only after you click “Show map”. This connects you to Google LLC / Google Ireland Limited, which may process your IP address and set cookies under its own privacy policy. If you do not click, no data is sent to Google.
WhatsApp: the floating button on the site is an ordinary link to wa.me. Nothing is sent until you click it. If you do, a chat opens in the WhatsApp app (Meta), which processes data under its own privacy policy; I use the message you then send only to reply to your enquiry.
9. Security and confidentiality
The website is served exclusively over encrypted HTTPS. I treat documents and communication as confidential; access is limited to me and the processors listed in section 5, and data is used only for the purposes described here.
10. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (“right to be forgotten”, Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time (Art. 7(3)).
Send your request to tenafistonic@gmail.com. I will respond without undue delay and at the latest within one month. I do not use automated decision-making or profiling. This website is not intended for persons under 16.
Erasure and legal obligations: data I am legally required to keep (e.g. the register of certified translations and accounting records) cannot be erased before the legal period expires.
11. Complaints
If you believe the processing breaches data protection law, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority in your own EU country. I would welcome the chance to resolve your concern directly first.
12. Changes to this policy
I may update this policy when services or regulations change. The current version is always published on this page with the date of the last update.