Privacy policy

Who is responsible for your data?

The controller is IDE Enterprise d.o.o., Klanječka ulica 18, 10110 Zagreb, Croatia, company identification number (OIB) 20297920676. For privacy questions and requests, email office@id-enterprise.com.

Visiting the website and sending an enquiry

This website has no user accounts or newsletter. When you submit the enquiry form, your name, email address, selected topic and message are sent to our server and delivered to our business inbox through Resend. You can review your enquiry before sending. The website has no separate enquiry database and does not log the contents of your message. Delivery providers process the message and delivery records. Please do not include sensitive information. Fonts and images load from our domain. We do not use marketing pixels or visitor-tracking analytics scripts.

When you email us, we process your email address, your name if provided, and the message and attachments you send. We use these to respond, discuss services and prepare possible cooperation. Please send only information necessary for your enquiry.

Purposes and legal bases

Steps before entering a contract at your request and performance of a contract rely on GDPR Article 6(1)(b), where you are the contracting party. General enquiries and communication with company representatives rely on our legitimate interest in business communication, under Article 6(1)(f). Website security and reliable operation are also legitimate interests. Legal obligations relating to business records rely on Article 6(1)(c).

Providing information is voluntary, but we may be unable to handle an enquiry without the information needed to respond. We do not carry out profiling or automated decisions producing legal or similarly significant effects.

Service providers and technical information

Cloudflare delivers and protects the website, processing technical information such as IP addresses and request data. The website also provides Cloudflare network error reporting (NEL) settings; supported browsers may send diagnostic reports. Cloudflare Turnstile protects the enquiry form against automated abuse. It loads when you open the enquiry review and processes technical browser and network information, including the IP address, to verify the request. Resend processes the enquiry content and delivery information to send it to our inbox; the sending domain uses the Ireland region. This region setting does not mean all provider processing remains within the EEA. We use Google Workspace for business email. We do not enable email open or click tracking for these enquiries. Authorised people and technical service providers access data within their assigned roles; competent authorities receive data where required by law.

Providers may process information outside the European Economic Area. Applicable transfer mechanisms are described in their processing terms, including standard contractual clauses where required. You can ask us for information or a copy of relevant safeguards.

Cloudflare: privacy · Cloudflare: data processing · Google: data processing · Resend: privacy · Resend: data processing

How long is information kept?

We keep correspondence while it is needed to handle your enquiry and agreed communication. We then delete information no longer needed for a contract, legal obligations, or establishing, exercising or defending legal claims. Relevant statutory retention and limitation periods apply to these exceptions. Technical log retention depends on the service and provider settings; you can ask us about a specific request.

Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction and portability. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email us to exercise your rights. We normally respond within one month and explain any extension permitted by law.

You may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

External links and changes

LinkedIn is an external link, with no embedded content. Clicking it takes you to a platform governed by its own privacy rules. Read our separate cookie policy. We update this notice when website functions or processing practices change.