Privacy policy

Who processes your data

The data controller is Appliment d.o.o. za informatičke usluge, Utinjska ulica 19, 10000 Zagreb, Croatia, OIB (tax ID) 32696391835, VAT ID HR32696391835.

For any question about data processing, write to info@appliment.eu or call +385 99 2633 060.

What data we collect

Through the contact form we collect the data you enter yourself: your name, email address and the content of your message, and, if you choose to give them, your phone number and company name.

Providing data is not a legal or contractual obligation, but without your name, email address and a description of your enquiry we cannot reply. We do not carry out automated decision-making or profiling.

We do not collect special categories of data and we do not ask for information we do not need in order to answer your enquiry.

Why we process it and on what basis

We use the data from the form solely to reply to your enquiry and, if it comes to that, to arrange cooperation.

The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in responding to a business enquiry (Art. 6(1)(f) GDPR). The processing is not based on consent.

We do not use your data for marketing messages and we do not sell it to third parties.

Who we share data with

The contact form is technically handled by the Web3Forms service, operated by Web3Creative from India. Web3Forms receives your message and forwards it to our email address, acting as our data processor. To filter spam, Web3Forms checks the sender's IP address and email address through its sub-processors CleanTalk and Akismet in the United States.

Transfers outside the European Economic Area in this context are based on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914), which form part of the provider's data processing agreement. Web3Forms stores submitted forms for a maximum of three years from submission, after which they are deleted automatically, unless we delete them earlier.

We receive messages in a mailbox on Microsoft 365, whose provider acts as our data processor.

The website is served by our web hosting provider, which processes the technical data described below in order to deliver the site and acts as our data processor.

If you accept measurement cookies, data about your use of the site is shared with Google, as described under "Cookies and measurement".

Beyond the above we do not share data with anyone, unless required by law.

Technical data

When you visit the site, the server records technical data needed to deliver and protect it: IP address, date and time of access, the page requested and the browser type. The same applies to Web3Forms when you submit the form.

We process this data on the basis of our legitimate interest in the security and proper operation of the site (Art. 6(1)(f) GDPR). Server logs are kept for a limited time and are not used to track or profile visitors.

Cookies and measurement

Without your consent this website sets no measurement cookies and loads no third-party tools. On your first visit we offer you a choice of "Accept" or "Decline"; both options are equally available.

We remember your choice in your browser's local storage (localStorage, entry "appliment_consent") so that we do not ask on every visit. The entry holds only your choice and its date, is necessary to respect that choice and is kept for 12 months, after which we ask again.

Google Ads: if you click "Accept", we load the Google Ads tag, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure how many enquiries through the contact form come from our ads on Google. It sets the cookies _gcl_au and, if you reached the site by clicking an ad, _gcl_aw, which last 90 days. Google processes the ad click identifier, the fact that an enquiry was sent (not its content and not the data you entered in the form), the page visited, device and browser data and your IP address.

Personalised advertising and remarketing are switched off. For conversion measurement Google acts as an independent controller under its Google Ads Data Protection Terms; see Google's privacy policy (https://policies.google.com/privacy).

The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 43(4) of the Croatian Electronic Communications Act). Google may transfer data to the United States; such transfers rely on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's Standard Contractual Clauses.

If you click "Decline", Google's tools are not loaded and no measurement cookies are set. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer of every page: click "Decline" and we delete the Google cookies (_gcl_*, _ga*) and reload the page without Google's tools. You can also delete cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

How long we keep data

Enquiries that do not lead to cooperation are kept for a maximum of two years, after which they are deleted.

If a business relationship begins, we keep the data for the duration of the contractual relationship and for as long as record-keeping regulations require.

Your rights

At any time you may request access to your data, its correction or erasure, restriction of processing, data portability, and you may object to processing.

Send your request to info@appliment.eu. We respond within 30 days.

If you believe we process your data unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Security

The site is served over an encrypted HTTPS connection. Access to received enquiries is limited to employees who need it in order to reply.

Changes to this policy

We may update this policy from time to time. The date of the last change is shown at the top of this page.