Privacy Policy

1. Data controller

The data controller is ACE TECHNOLOGY jednostavno društvo s ograničenom odgovornošću za proizvodnju i usluge, abbreviated Ace Technology j.d.o.o., Croatian tax ID (OIB) 78852138330, with its registered office at Ulica Vlade Gotovca 5, 10000 Zagreb, Croatia.

For privacy questions and to exercise your rights, contact us at info@ace-tech.hr.

2. Data we process

Depending on how you use the website, we may process:

• full name
• company or sole-trader name
• email address
• phone number, only if you provide it voluntarily
• selected service type
• message content and subsequent business communication
• technical data needed to deliver and secure the website, such as IP address, request time, requested URL, browser type, and basic device information
• a record of your analytics preference
• with consent, website usage data collected by Google Analytics

3. Purposes and legal bases

4. Contact form

We use information entered in the form only to read the enquiry, reply to the sender and, where there is interest, continue communication about possible collaboration. We do not add senders to a marketing list and we do not use the data for automated profiling or advertising.

Name, email, service type, and message are required so we can understand and handle the enquiry. Company name and phone are optional. If required fields are missing, the form cannot be submitted.

The form is delivered technically via Web3Forms to info@ace-tech.hr. More about Web3Forms data processing: web3forms.com/privacy.

5. Server technical logs

The server and hosting provider may automatically process technical logs needed to deliver the website, maintain security, diagnose errors, and prevent misuse. Such logs are not intended for tracking individual visitors.

6. Cookies and local storage

In addition to HTTP cookies, browser local storage (localStorage) also stores information on the user’s device. We use essential local storage to remember your privacy choice. Analytics cookies are set only after explicit consent.

You can change your choice at any time through “Cookie settings” in the website footer.

7. Google Analytics

With your consent we use Google Analytics 4 to understand aggregate website usage, for example pages visited, approximate visit duration, device type, browser, traffic source, and approximate location derived from technical data.

We do not use Google Analytics to identify visitors, for advertising, remarketing, or building user profiles. Google Signals and personalised advertising features are disabled.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google’s related entities and infrastructure may involve processing outside the European Economic Area, subject to the safeguards Google describes in its terms and data-transfer rules. We do not treat analytics data as fully anonymous.

Measurement ID: G-ZQH5V8CD4J.

• Google Privacy Policy
• How Google uses information from sites
• Google data transfer frameworks
• Google Analytics opt-out

8. Recipients

Data may be received by:

• authorised Ace Technology personnel who respond to enquiries
• the hosting and infrastructure provider
• the business email provider
• Web3Forms as the technical intermediary for the contact form
• Google Analytics only after consent
• professional advisers and public authorities only where there is a legal obligation

We do not sell personal data and we do not share it with third parties for their marketing.

9. Transfers outside the EEA

Using Web3Forms, Google or global infrastructure may involve processing or transferring data outside the European Economic Area. Web3Forms, operated by Web3Creative, states in its Data Processing Agreement that Standard Contractual Clauses of the European Commission (SCCs) apply to such transfers. The current transfer terms and the list of sub-processors are available in the Web3Forms DPA.

10. Retention periods

• enquiry without resulting collaboration: up to 12 months from the last communication
• communication that leads to a contractual relationship: during the engagement and afterwards for as long as accounting, tax, and other rules require
• cookie-choice record: six months
• GA cookies: up to six months
• GA4 user-level data: according to the retention period configured in Google Analytics 4
• data linked to a security incident: as long as needed for investigation and legal obligations

11. Data subject rights

You have the right of access, rectification, erasure, restriction, portability where applicable, objection to processing based on legitimate interest, and withdrawal of consent without affecting the lawfulness of earlier processing. You may also lodge a complaint with AZOP.

Send requests to info@ace-tech.hr. Before acting, we may reasonably verify the identity of the requester.

More about data subject rights: AZOP.

12. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

13. Security

We apply reasonable technical and organisational safeguards, including HTTPS, restricted access to communications, backups where needed, and system updates. No transmission or system can be declared completely secure.

14. Changes to this policy

We may change this policy when we change processing methods, service providers, or applicable rules. For material changes we will clear the previously stored analytics choice and ask again.