Privacy Policy

The data controller of your personal data is: Cyrvanta d.o.o. Ul. grada Vukovara 271, 10000 Zagreb, Croatia Tax ID (OIB): 58312976043 Email: privacy@cyrvanta.com For any questions related to the processing of your personal data, please contact us at the email address above.

We collect the following categories of personal data: • Data you provide directly: first and last name, email address, and message content through the contact form. • Data collected automatically: IP address, browser type, operating system, pages visited, access time, and cookie data (with your consent). • Data through cookies: analytical and marketing data is collected only with your explicit consent via the cookie banner.

We process your personal data based on: • Legitimate interest (Art. 6(1)(f) GDPR): to respond to your inquiries, improve site functionality, and ensure system security. • Consent (Art. 6(1)(a) GDPR): for the use of analytical and marketing cookies, including Google Analytics and Google Ads. • Legal obligation (Art. 6(1)(c) GDPR): when processing is necessary to comply with legal obligations.

We do not sell your personal data to third parties. We may share data with: • Service providers (Google LLC — analytics and advertising) who act as our data processors under contractual obligations. • Competent authorities when legally required. All service providers are obligated to comply with GDPR and applicable data protection standards.

We store your data only for as long as necessary to fulfill the purpose for which it was collected: • Contact form data: up to 12 months from the date of inquiry. • Analytics data: up to 26 months (in accordance with Google Analytics settings). We apply appropriate technical and organizational measures to protect your data from unauthorized access, loss, or destruction.

Under the General Data Protection Regulation (GDPR), you have the right to: • Access your personal data • Rectification of inaccurate data • Erasure of your data ("right to be forgotten") • Restriction of processing • Object to processing • Data portability • Withdraw consent at any time To exercise your rights, contact us at privacy@cyrvanta.com. We will respond to your request within 30 days.

If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP) Selska cesta 136, 10000 Zagreb www.azop.hr

We reserve the right to modify this Privacy Policy. We will inform you of any significant changes through a notice on the site. We recommend regular review of this page.