Privacy Policy

Adriatic Software d.o.o. ("we," "us," or "our"), with its registered seat at Pilarova ulica 50A, Zagreb (Grad Zagreb), Croatia, registered with the Commercial Court in Zagreb (Trgovački sud u Zagrebu) under MBS 081741353, OIB 63287526422, operates the websites located at adriatic.software and adriaticsoftware.com (collectively, the "Service"). We are the data controller for personal data processed through the Service.

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service, and the choices you have associated with that data. As a company based in Croatia, we are committed to complying with the General Data Protection Regulation (GDPR).

1. Information We Collect

Because our website is hosted as a static site via Cloudflare Pages, we collect minimal personal information. We primarily collect information automatically to ensure the security and performance of our Service.

Types of Data Collected:

• Usage and Log Data: We collect information on how the Service is accessed and used. This Usage Data is collected automatically by our hosting provider (Cloudflare) and may include information such as your device's Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.
• Analytics Data: We use Cloudflare Web Analytics to understand how our Service is used. It is privacy-first: it does not use cookies, does not fingerprint visitors, and does not track individuals across sites or over time. It records aggregate information such as page views, referrers, and general device and country information. We have configured it to exclude visitors in the European Union entirely, so if you are visiting from the EU, no analytics data about your visit is collected at all.
• Contact Form Data: If you submit our contact form, we collect the name, email address, and message you provide. We use this solely to respond to your inquiry.
• Personal Data via Email: If you contact us by email, we will collect your email address and any other information you choose to provide in your message. We use this solely to respond to your inquiry.

2. How We Use Your Data and Legal Bases (GDPR Art. 6)

Under the General Data Protection Regulation (GDPR), we process your personal data only when we have a valid lawful basis to do so. We do not use your data for automated decision-making or profiling. We use the collected data for the following purposes and corresponding legal bases:

• Website Delivery, Security, and Abuse Prevention (Legitimate Interest - Art. 6(1)(f) GDPR): We process Usage and Log Data and utilize Cloudflare Turnstile to deliver our websites, protect our infrastructure against DDoS attacks and automated bots, and detect or address technical issues.
• Responding to Inquiries (Legitimate Interest - Art. 6(1)(f) GDPR & Pre-Contractual Necessity - Art. 6(1)(b) GDPR): We process Contact Form Data and direct email correspondence solely to reply to your questions, support requests, or business inquiries.
• Aggregate Traffic Analysis (Legitimate Interest - Art. 6(1)(f) GDPR): For visitors outside the European Union, we use cookie-free, non-identifying analytics to monitor website performance and general traffic trends.

3. Service Providers and Third Parties

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, or perform Service-related services.

• Cloudflare: Our websites are hosted on Cloudflare Pages, and we utilize Cloudflare's network for security and performance (CDN). Cloudflare may process web log data (including IP addresses) to provide these services. You can read more in the Cloudflare Privacy Policy.
• Cloudflare Web Analytics: We use Cloudflare's privacy-first analytics to measure traffic to our Service. It operates without cookies and does not collect or store any personal identifiers, and we have configured it to exclude visitors in the European Union entirely. See the Cloudflare Web Analytics overview for details.
• Internal communication tools: Contact form submissions (name, email address, and message) are delivered to the internal communication tools we use to receive and answer inquiries. These tools are operated by third-party providers who process the data on our behalf.
• Cloudflare Turnstile: Our contact form is protected by Cloudflare Turnstile, which helps us distinguish human visitors from automated abuse. To do this, Turnstile processes your IP address and browser characteristics when you submit the form.

4. International Transfer and Retention of Data

Transfer of Data:

Because we rely on Cloudflare's global network for hosting, CDN, and security services, technical data (such as IP addresses) may be processed on servers located outside the European Economic Area (EEA), including in the United States. Whenever personal data is transferred outside the EEA, we ensure an adequate level of protection in accordance with Chapter V of the GDPR by relying on European Commission adequacy decisions - specifically the EU-U.S. Data Privacy Framework (DPF), under which Cloudflare is certified - and the European Commission's Standard Contractual Clauses (SCCs).

Data Retention:

We keep contact form submissions and email correspondence for up to 12 months after we last communicate with you, unless we are required by law to keep them longer. After that, they are deleted. Server and security logs are retained by Cloudflare strictly as necessary for security and diagnostic purposes in accordance with its data retention policies.

5. Disclosure of Data

We may disclose your Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of Adriatic Software
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

6. Security of Data

The security of your data is important to us. Our Service is secured via HTTPS, and we rely on Cloudflare's robust security infrastructure. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

7. Your Data Protection Rights (GDPR)

Because we are based in Croatia, you are protected under the General Data Protection Regulation (GDPR). You have the following data protection rights:

• The right to access, update, or delete the information we have on you.
• The right of rectification: You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object: You have the right to object to our processing of your Personal Data.
• The right of restriction: You have the right to request that we restrict the processing of your personal information.
• The right to data portability: You have the right to be provided with a copy of the information we have on you in a structured, machine-readable, and commonly used format.
• The right to withdraw consent: You also have the right to withdraw your consent at any time where Adriatic Software relied on your consent to process your personal information.

You also have the right to lodge a complaint with a supervisory authority. In Croatia this is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), azop.hr.

If you wish to exercise any of these rights, please contact us using the information below.

8. Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Via our contact form
• By email: available with JavaScript enabled, or use the contact form