Privacy Policy

1. Who we are (data controller)

ACETAS društvo s ograničenom odgovornošću za istraživanje i razvoj (ACETAS d.o.o.), Brezovička cesta 2, 10000 Zagreb, Croatia. Registered at the Commercial Court in Zagreb, MBS 081719394, OIB 39789666002. Contact: [email protected]. We are the controller of the personal data described below within the meaning of the EU General Data Protection Regulation (GDPR).

2. What data we collect, and why

Contact / intake form. If you submit our engagement form, we process the data you provide: your name or organization, email address, the engineering domain you select, and the description of your project. We use it solely to evaluate and respond to your inquiry and to take steps prior to entering into a contract with you. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps taken at your request) and Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).

Technical / hosting logs. Our hosting provider processes standard server logs (including IP addresses) as technically necessary to deliver the website and protect it from abuse. Legal basis: Art. 6(1)(f) GDPR. We do not use this data to identify visitors.

3. Cookies and tracking

This website sets no cookiesand uses no analytics or advertising trackers. Your dark/light theme preference is stored in your browser's local storage on your device only; it never leaves your browser and contains no personal data. Fonts and all other assets are served from our own hosting — no third-party font or CDN requests are made from your browser.

4. Who receives your data (processors)

We use a small number of service providers who process data on our behalf under Art. 28 GDPR data-processing agreements:

• Netlify, Inc. (website hosting; USA) — serves the website and processes technical logs. Transfers to the USA are safeguarded by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
• Email delivery provider — form submissions are delivered to our mailbox by a transactional email service, which processes the submitted data in transit under the same safeguards.

We do not sell personal data and do not share it with anyone else, unless required by law.

5. How long we keep it

Inquiry correspondence is kept for up to 2 years after our last contact, so we can follow up on prospective engagements, and is then deleted. If an inquiry leads to a contract, related records are retained for the periods required by Croatian accounting and tax law (generally 11 years).

6. Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, and to data portability. Where processing is based on legitimate interest, you may object at any time. To exercise any right, email [email protected] — we respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Croatia this is the Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

7. Changes to this policy

We will update this page if our processing changes and adjust the effective date above. Material changes will be highlighted on this page.