( Effective as of 1st January 2025 )

Privacy policy

How we collect, use, and share your personal information.

We are dedicated to keeping your personal information confidential. We do not sell, rent, or lease your data to third parties, we will not provide your personal information to any third party, individual, government agency, or company without legal ground.

Within this Privacy Policy we inform you of how we take care of personal data and what are your rights according to GDPR – General Data Protection Regulation (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

We will handle your personal data respecting basic GDPR principles. We do not collect more personal data than necessary and we process it in a lawful, fair, and transparent manner. We've implemented appropriate security measures to make sure personal data isn't accessed by hackers or accidentally leaked as part of a data breach. We keep data in a form that permits identification for no longer than is necessary for the specific purpose while the specific purpose is being explicitly described and justified. If certain data ceases to be accurate, they will be removed or rectified.

Personal Data We May Collect

We may collect the following personal data anonymously:

  • IP addresses (anonymized)
  • Browser and system information
  • Language settings
  • Device type and operating system
  • Pages visited and navigation paths
  • Time spent on pages
  • Clicks and interactions
  • Geographic location (country/region level)

Your Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure ('right to be forgotten')
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision making including profiling

To exercise these rights, please contact us using the information provided at the end of this policy.

Regulatory Body in Croatia

In Croatia, the regulatory body responsible for protecting users' rights under GDPR is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka - AZOP). You have the right to lodge a complaint with AZOP if you believe that the processing of your personal data infringes the GDPR.

Contact information for AZOP:

Agencija za zaštitu osobnih podataka
Selska cesta 136
HR - 10 000 Zagreb
Tel: +385 1 4609-000
Fax: +385 1 4609-099
Email: azop@azop.hr
Website: www.azop.hr

We are committed to ensuring the protection of your personal data and complying with all applicable data protection laws and regulations. If you have any questions or concerns about our privacy practices, please contact us.

Information Security

You can rely on that all of our processes, protocols, systems, transfers, databases, etc. are tested, secure, and verified. In short, this means that in order to protect data privacy, we implement physical, technical, and administrative measures such as:

  • Regular updating and testing our systems and security technology
  • Implementing technology of highest security standards
  • Ensuring that our partners are GDPR compliant
  • Providing access to personal data only to authorized employees using multiple level password systems
  • Training employees about GDPR and taking appropriate disciplinary measures to enforce employees' privacy responsibilities