Privacy
Privacy notice
Last updated 28 October 2026
Who we are
IMR (In Medias Res) is being set up by Grgur Damiani and Fran Stilinović. Until the company is registered, they are jointly responsible for this website. You can reach both at [email protected].
What this website does not do
- It sets no advertising or tracking cookies, and it does not profile visitors.
- It loads no third-party fonts, advertising or social media embeds.
What is processed, and why
Server logs. Our hosting provider, Cloudflare, processes technical data such as your IP address, browser type and the time of your request in order to deliver the site and protect it from abuse. This is our legitimate interest in running a secure website (Article 6(1)(f) GDPR). We do not use these logs to identify or profile visitors.
Visitor statistics. We use Cloudflare Web Analytics to count page views, referring sites, countries and device types. It sets no cookies, does not use your IP address to track you across sites, and shows us only totals, never individual visitors. This is our legitimate interest in knowing how the site is used (Article 6(1)(f) GDPR).
Contact form. If you use the form, we receive your name, email address, the company or show you name (optional), the topic and your message. We use them only to reply and to follow up on what you asked about (Article 6(1)(b) and (f) GDPR). The message is emailed to us and stored with Cloudflare so it is not lost, and it is deleted automatically after 12 months, or sooner on request. To keep out spam, the form uses Cloudflare Turnstile, which checks technical signals from your browser and connection when you send it; it does not set advertising cookies.
Email. If you write to us, we receive your address and whatever you include in your message, and we use it only to reply and to follow up on what you asked about. The legal basis is your request and our legitimate interest in answering it (Article 6(1)(b) and (f) GDPR). We keep correspondence only as long as the conversation is useful, and we delete it on request.
Private pages. Some pages are shared only with investors and partners and need a password. Signing in sets one strictly necessary cookie that keeps you signed in (30 days, or 12 hours for our own team). It contains no personal data and is not used for anything else.
Who else receives data
Cloudflare, Inc. hosts this website. Our email provider stores the messages you send us. Cloudflare also stores contact form messages and sends them to our mailbox. Both act as processors under data processing terms. Cloudflare may process data outside the EU under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
You can ask us for access to your data, its correction or deletion, a restriction of processing, or a copy to take elsewhere, and you can object to processing based on our legitimate interest. Write to [email protected]. You can also complain to the Croatian data protection authority, AZOP (azop.hr).
Changes
We update this page before we change how the website handles data. The date at the top shows the last change.