Legal

Privacy Notice

Effective 4 June 2026 · Last updated 4 June 2026

This notice explains what personal data Indicio d.o.o. collects through mpcoord.com (the MPC website), why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Croatia’s Personal Data Protection Act. We keep data collection to a minimum: there is no advertising, no analytics tracking, and no selling of your data.

1. Who is responsible for your data

The data controller is:

Indicio d.o.o.
Rapska 37/1, Zagreb, Croatia
OIB: 15921004329
Email: hello [at] mpcoord [dot] com

For any question about this notice or about how we handle your data, contact us at the address above.

2. What we collect & why

Information you send us

When you click an email link on this site, or use the Research Dossier request on the homepage, your email client opens addressed to us. We receive your email address and anything you choose to write only if you actually send that message. We use it to reply to you and, for a dossier request, to send the dossier and occasional related updates — nothing more.

The dossier form does not store your address on this website; it simply composes an email from your own mail program. We hold it only once you send it and we receive it.

Technical information

Like almost every website, our hosting provider may automatically log standard technical data — such as your IP address, browser type, and the date and time of access — in server logs used to operate and secure the site. We do not use this data to identify or profile individual visitors.

No tracking. We do not run Google Analytics or any comparable analytics tool, we do not use advertising or social-media tracking pixels, and we do not build visitor profiles.

3. Legal bases for processing

  • Your consent (GDPR Art. 6(1)(a)) — for sending you the Research Dossier and related updates after you tick the consent box and send your request. You can withdraw consent at any time (see Your rights); withdrawal does not affect processing done beforehand.
  • Our legitimate interests (GDPR Art. 6(1)(f)) — to respond to enquiries you send us, and to operate and protect the security of the website. We balance these interests against your rights and freedoms.

4. Cookies & embedded video

This website sets no cookies of its own for analytics or advertising.

The Research section embeds a short video hosted by Vimeo (Vimeo.com, Inc.). When a page containing the video loads, your browser contacts Vimeo’s servers to fetch the player, which means Vimeo receives your IP address and may process technical data under Vimeo’s own privacy policy. We load the player with Vimeo’s Do Not Track setting enabled, which instructs Vimeo not to set tracking cookies or use your viewing for its own analytics. We have no control over, and are not responsible for, Vimeo’s processing.

5. Who we share your data with

We do not sell, rent, or trade your personal data. We share it only with service providers acting on our behalf as processors, and only as far as needed:

  • our website hosting provider (server logs, site delivery);
  • our email provider (to receive and answer your messages).

We may also disclose data where we are legally required to do so, or to establish, exercise, or defend legal claims.

6. International transfers

Where a service provider is located outside the European Economic Area — for example Vimeo, in the United States, when you view the embedded video — any transfer of personal data is made under appropriate safeguards permitted by the GDPR, such as the EU Standard Contractual Clauses or an adequacy mechanism like the EU–US Data Privacy Framework.

7. How long we keep your data

  • Enquiry emails: kept for as long as needed to deal with your request and to keep a reasonable record of our correspondence, then deleted.
  • Dossier consent: kept until you unsubscribe or withdraw consent, after which we stop using your address and delete it from our mailing records.
  • Server logs: retained by our hosting provider for a short period for security and troubleshooting, then deleted or anonymised.

8. Your rights under the GDPR

Where we process your personal data, you have the following rights. To exercise any of them, contact us using the details in section 9 — it is free, and we will respond within one month.

AccessGet confirmation of whether we process your data and a copy of it.
RectificationHave inaccurate or incomplete data corrected.
ErasureAsk us to delete your data (“right to be forgotten”).
RestrictionAsk us to limit how we use your data in certain circumstances.
PortabilityReceive data you gave us in a structured, machine-readable format.
ObjectionObject to processing based on our legitimate interests.
Withdraw consentWithdraw consent at any time, e.g. unsubscribe from the dossier list.

9. Contact & complaints

For any privacy request or question, email hello [at] mpcoord [dot] com or write to Indicio d.o.o. at the postal address in section 1.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
azop.hr

You may also complain to the supervisory authority in your own EU/EEA country of residence.

10. Changes to this notice

We may update this notice as our practices or the law evolve. When we do, we will revise the “last updated” date at the top of this page. Material changes will be made clear on the website.