Tomislav Mihelić · Finance Coach

Privacy

Last updated: 2 November 2026

Who processes your data

The data controller is Tomislav Mihelić, owner of the sole-proprietor business ARTHA KONZALTING, obrt za savjetovanje i druge usluge. Business details are at the bottom of this page. For any question about your data, write to [email protected].

When you visit the site

The site runs without tracking cookies or marketing tools. For visit statistics it uses Cloudflare Web Analytics, which records only aggregate data: number of visits, referral source, country, device type and page speed, without identifying individual people.

The site is served by Carrd and, because of the booking window, also connects to Cal.com when it loads. These providers technically receive your IP address and browser details, as with any website. The legal basis for statistics and technical data is legitimate interest in running the site securely and correctly and in understanding its traffic.

When you book a call

Bookings go through Cal.com. I collect your name, email, the chosen time and what you write about your topic, in order to arrange and hold the call. If you answer the optional question about how you heard about me, I use it to see which channels bring clients; the legal basis for that is legitimate interest. The appointment is added to Google Calendar, and the call takes place on Google Meet or by phone. When needed, I keep short notes from our conversations, used only to continue our work together. The legal basis is the service agreement and the steps you request before it.

When you take the quick check

The check runs on Tally and asks only for answers to the questions, without your name, email or phone number. Your answers are used to show your current financial focus and suggest a next step, including the option of a call. Answers are stored in Tally, and a copy reaches me by email. From time to time I use the answers to see how many people complete the check and how many go on to book a call. The legal basis for this, as well as for showing your result and storing answers, is my legitimate business interest.

In the optional text field, share only what you choose to share, leaving out details that could identify you or other people.

When you email me

Messages are kept in Google Workspace in order to reply and continue our communication. The legal basis is legitimate interest in answering your enquiry and, where it concerns working together, the service agreement and the steps you request before it.

How long I keep data

• bookings and call notes, when I keep them: up to 2 years after our last contact
• email correspondence: up to 2 years after our last contact
• quick check answers and their email copies: at most 12 months from receipt
• visit statistics: aggregate data only, in Cloudflare

Who else sees the data

Only the service providers needed to run the site. Each provider and how your data is protected:

• Carrd (website, USA): data processing agreement with EU standard contractual clauses
• Cloudflare (statistics and site delivery, USA): EU–US Data Privacy Framework, with standard contractual clauses as a fallback (privacy policy)
• Cal.com (bookings, USA): data processing agreement with EU standard contractual clauses
• Google (email, calendar and Meet, USA and EU): EU–US Data Privacy Framework and standard contractual clauses (transfer frameworks)
• Tally (quick check, Belgium): answers are stored in the EU (GDPR information). Tally sends email notifications of new answers through SendGrid (Twilio, USA), under Twilio's approved binding corporate rules.

I do not sell your data or share it for marketing purposes.

Your rights

Where the legal conditions are met, you can request access to your data, correction, deletion, restriction of processing or data portability, and object to processing based on legitimate interest. An email to [email protected] is enough. You also have the right to lodge a complaint with the Croatian data protection authority, AZOP (azop.hr), or with the authority in your own EU country.