Privacy policy

1. Who is responsible for your data

The data controller is MLM Signature Veritas društvo s ograničenom odgovornošću za informatičke usluge, Iločka ulica 9, 21216 Kaštel Stari, Croatia, OIB 78982880822.

For any question about this policy or about how we handle your data, contact us using the contact details published on this website. We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the GDPR.

2. What we collect and why

Enquiries you send us

When you submit the contact form we process the name, email address, company name (if given) and the message content you provide. We use this solely to read and answer your enquiry.

• Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the consent box, and — where your enquiry concerns a possible engagement — steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Retention: enquiries are kept for up to 24 months from our last exchange, then deleted. If the enquiry leads to a contract, the related records are kept for as long as statutory accounting and tax obligations require.

Booking a call

If you book a call through the scheduling link on this site, that booking is handled by an external scheduling provider on its own pages. The data you enter there — typically your name, email address and chosen time — is processed under that provider’s privacy policy as well as this one.

Server logs

Our hosting provider automatically records technical information for every request: IP address, date and time, the page requested, referrer, and browser user agent. These logs exist to keep the site available and to detect abuse.

• Legal basis: our legitimate interest in operating a secure and reliable website (Article 6(1)(f) GDPR).
• Retention: short-term, in line with our hosting provider’s standard log retention.

What we do not do

• We do not use advertising or tracking cookies.
• We do not build profiles of visitors.
• We do not carry out automated decision-making, including profiling, as described in Article 22 of the GDPR.
• We do not sell or rent personal data to anyone.

See our cookie notice for details on what this site stores in your browser.

3. Who else processes your data

We share personal data only with service providers who process it on our instructions under a data processing agreement, and only as far as they need it to provide their service:

• Hosting — Vercel Inc., which serves this website and keeps the server logs described above.
• Email delivery — the provider that transmits contact form submissions to our inbox.
• Scheduling — the calendar provider behind our booking link, if you choose to use it.

Some of these providers are established outside the European Economic Area. Where data is transferred outside the EEA, that transfer is covered by the European Commission’s Standard Contractual Clauses or another safeguard permitted by Chapter V of the GDPR.

We may also disclose data where we are legally obliged to do so, for example to a court or a public authority acting within its powers.

4. How we protect your data

This site is served over encrypted HTTPS connections. Access to enquiries is limited to the people who need it to reply to you, and to client data only as far as an active engagement requires. Where we process personal data belonging to a client, we do so as a processor under a separate data processing agreement with that client.

5. Your rights

Under the GDPR you have the right to:

• obtain confirmation of, and access to, the data we hold about you;
• have inaccurate data corrected;
• have your data erased where the conditions for erasure are met;
• restrict how we process your data;
• receive your data in a structured, commonly used, machine-readable format, and have it transmitted to another controller;
• object to processing based on our legitimate interests, on grounds relating to your particular situation;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month, as required by Article 12(3) GDPR. Exercising your rights is free of charge.

6. Complaints

If you believe we have handled your data unlawfully, you may lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
azop.hr

You may also complain to the supervisory authority of the EU member state where you live or work.

7. Changes to this policy

We update this policy when our services or our legal obligations change. The date at the top of this page always shows the current version.