Data protection
Privacy Policy
What we collect when you write to us through the forms on arkbel.com, why, how long we keep it, and what your rights are.
1. Controller
ARKBEL, obrt za računalno programiranje i tehničko savjetovanje (a registered Croatian sole-trader business), owner Dario Horvat, Drage Gervaisa 72, 51000 Rijeka, Croatia. Register of Crafts (Obrtni registar), MBO 99359260, VAT ID HR29941599012. E-mail: [email protected], phone +385 99 198 1441. Use that address for any question about personal data.
2. What we collect and how
We collect personal data only when you send it to us yourself:
- Forms on the site (contact and the free price-list check): name, e-mail address, phone (optional), topic, your message and, if you enter it, a link to your website or price list.
- Technical data with a form submission: the page the form was sent from, IP address and browser identifier (user-agent), recorded to protect against abuse and spam.
- E-mail and phone: whatever you send us directly, including attachments.
- Business relationship: if we sign a contract, the data needed for the offer, contract and invoice (business name and address, OIB or VAT ID, contact person).
We do not collect special categories of personal data and we do not use automated decision-making or profiling.
3. Purposes and legal basis
- Answering your inquiry and steps prior to a contract — Art. 6(1)(b) GDPR.
- Concluding and performing a contract, issuing invoices — Art. 6(1)(b) and (c) GDPR (legal obligations under tax and accounting rules).
- Form security, abuse prevention, records of business communication — Art. 6(1)(f) GDPR (legitimate interest).
- Visit statistics (Google Analytics) — only with your consent given in the cookie notice, Art. 6(1)(a) GDPR.
4. Who has access
Data is processed by the controller. For certain technical services we use processors that act only on our instructions:
- an e-mail delivery provider (delivering form submissions to our mailbox),
- the hosting provider for the website and our internal inquiry log,
- Google (Google Analytics 4 and Google Tag Manager) — only if you consented to statistics cookies,
- Cookiebot (Usercentrics) — cookie consent management.
Some providers may process data outside the European Economic Area; such transfers rely on a European Commission adequacy decision or on standard contractual clauses. We do not sell data and do not share it with third parties for marketing.
5. How long we keep it
- Inquiries that do not lead to a contract: until resolved, and at most 12 months after the last communication.
- Offers, contracts and invoices: for the periods required by tax and accounting law.
- Technical records attached to form submissions (IP address, user-agent): at most 12 months.
- Visit statistics: per Google Analytics settings (14 months by default), only with consent.
6. Your rights
You can at any time request access to your data, its rectification, erasure or restriction of processing, object to processing based on legitimate interest, request data portability, and withdraw consent (without affecting the lawfulness of processing before withdrawal). Send your request to [email protected]; we reply within 30 days. If you believe your rights have been infringed, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
7. Cookies
The site uses strictly necessary cookies and, only with your consent, statistics cookies (Google Analytics 4 via Google Tag Manager, with consent mode enabled). You can give, refuse or change consent in the cookie notice, which also lists the cookies in use. Change cookie settings.
8. Security
Data is transmitted over an encrypted connection (HTTPS), access to our systems is password-protected and limited to the people who need it, and the forms are protected against automated submissions.
9. Changes
We update this policy when the way we process data changes. The version published on this page, with the date shown, applies.