1. Introduction

IV Ci d.o.o. (hereinafter referred to as “we”, “our”, “the company”) takes the privacy and security of your personal data seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the applicable legislation of the Republic of Croatia.

2. Types of Personal Data We Collect

We collect the following categories of personal data when you visit our website, use our services, or contact us:

• First and Last Name
• Email Address
• Phone Number
• Postal Address
• IP address and website usage data (e.g., access dates and times, pages viewed)
• Technical device and browser data (e.g., device type, operating system, browser)
• Data collected via cookies and similar technologies (see Cookie Policy)

3. Purposes of Personal Data Processing

We process your personal data for the following purposes:

• To provide the requested services and fulfill contractual obligations
• To respond to your inquiries, requests, or complaints
• To improve the functionality and security of our website
• To send notifications and marketing materials (only with your explicit consent)
• To fulfill legal obligations and prevent fraud

4. Legal Basis for Processing

The processing of your personal data is based on:

• Your consent (Art. 6. para. 1, point (a) GDPR) – for marketing activities and the use of non-essential cookies.
• Performance of a contract (Art. 6. para. 1, point (b) GDPR) – when processing is necessary for providing our services.
• Compliance with legal obligations (Art. 6. para. 1, point (c) GDPR).
• Legitimate interests (Art. 6. para. 1, point (f) GDPR) – e.g., for protecting our systems and preventing misuse.

5. User Rights

As a user, you have the following rights:

• Right of access – to request confirmation of whether we process your data and to obtain a copy.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – under certain conditions.
• Right to restriction of processing – when you contest the accuracy of the data or object to its processing.
• Right to data portability – to receive your data in a structured, machine-readable format.
• Right to object – to processing based on legitimate interests or for direct marketing.

To exercise these rights, please contact us using the details in point 11. If you believe your rights have been violated, you have the right to lodge a complaint with the competent authority – the Personal Data Protection Agency (AZOP).

6. Data Storage

We retain your personal data only for as long as necessary for the purposes for which it was collected or as required by law (e.g., accounting data – 11 years). Upon expiration of this period, the data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational security measures to prevent unauthorized access, loss, destruction, or alteration of your data. This includes encryption, access control, and regular testing of security systems.

8. Data Sharing

We may share your data with:

• Service providers (e.g., hosting, IT support, delivery services) who act as our data processors and are obliged to comply with this Privacy Policy.
• Public authorities, when we are legally obliged to do so.

We never sell, rent, or otherwise commercialize your personal data.

9. Cookies

Our website uses cookies to ensure functionality, personalize content, and analyze traffic. Read more about the use of cookies in our Cookie Policy.

10. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy at any time. All changes will be published on this page, along with an updated effective date.

11. Contact

For all questions or requests related to this Privacy Policy and the processing of your personal data, please contact us at:

IV Ci d.o.o.
Address: Ulica Koste Vojnovića 40, 10 000 Zagreb
OIB: 90126776586
Email: [email protected]
Phone: +385 91 54 52 058