Privacy Policy
This Privacy Policy explains how Civerro processes personal data of website visitors and people who contact us through the contact form.
1. What data we collect
Through the contact form, we may collect your name, email address, type of inquiry and the content of the message you voluntarily send us. For security purposes, technical data necessary to protect the website may also be processed, such as an IP address in the context of rate limiting.
2. Purposes and legal bases
- Responding to inquiries: We process contact-form data to respond to your inquiry and take steps at your request before a possible contract is concluded.
- Website security: Technical data may be processed to protect the system from abuse, unwanted automated requests and attacks, where an appropriate legal basis exists.
- Legal obligations: Certain data may be retained where necessary to comply with legal obligations or establish, exercise or defend legal claims.
3. Recipients and processors
Data may be accessible to service providers required for website hosting, email infrastructure and system security, to the extent necessary to provide those services. Such providers may act as processors where applicable.
The specific providers should be listed and updated before publication based on the actual hosting, SMTP/email provider, analytics and other services used in production.
4. Cookies
This version of the website uses only technical cookies necessary for application functionality, including the language-selection cookie. No advertising or analytics cookies are activated in this version.
If Google Analytics, Meta Pixel, advertising tools, embedded media or other technologies that set or read non-essential cookies are introduced later, this policy and the consent mechanism must be updated before activation.
5. How long we retain data
We retain inquiry data for as long as necessary to handle the inquiry and communicate with you and, if a business relationship arises, for periods required to perform the contract and comply with legal obligations. Retention periods should be aligned with the actual business and accounting requirements.
6. Your rights
Subject to the GDPR and applicable conditions, you may request:
- access to your personal data;
- rectification of inaccurate or incomplete data;
- erasure where the legal conditions are met;
- restriction of processing;
- data portability where applicable;
- objection to processing where it is based on legitimate interests;
- withdrawal of consent where processing is based on consent.
7. Security
We implement appropriate technical and organisational measures to protect personal data, including HTTPS, security headers, anti-forgery protection for the contact form and request-rate limiting.
8. Right to lodge a complaint
If you believe that the processing of your personal data infringes your rights, you may lodge a complaint with the competent supervisory authority. In Croatia, this is the Croatian Personal Data Protection Agency (AZOP).
9. Changes to this policy
We may update this Privacy Policy from time to time due to changes in our business, technology or applicable law. The current version will be published on this page.
← Back to home