1. General
This Privacy Policy describes how OCTOPUS Rijeka d.o.o., Milutina Barača 19, 51000 Rijeka, Tax ID: 48040192055 (hereinafter: "OCTOPUS"), collects, uses and protects users' personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
We take your privacy seriously and process personal data lawfully, fairly and transparently, exclusively for the purposes for which the data was collected.
2. Types of Data We Collect
Through our website and contact form, we collect the following data:
- Name and surname
- Email address
- Phone number (if entered)
- User message
- IP address and basic device data (automatically recorded by some systems)
Data is stored in our internal administrative system (admin panel).
3. Purpose of Data Processing
We process your personal data for the following purposes:
- Responding to inquiries received through the contact form
- Preparing offers or communication regarding business cooperation
- Recording interest in services
We do not collect more data than necessary, nor do we use data for marketing purposes without explicit consent.
4. Legal Basis
We process personal data based on:
- Your consent (e.g., filling out the contact form)
- Legitimate interest (responding to business inquiries)
- Contractual obligations (e.g., communication with clients)
5. Who Has Access to Data
Access to personal data is exclusively available to authorized persons within OCTOPUS Rijeka d.o.o. Data is not transferred to third parties unless required by law.
6. Where and How Long We Store Data
Data is stored on our secure server, accessible only to our administrators.
Data retention periods:
- Contact via form: up to 12 months from receipt
- Contractual relationships: according to legally prescribed periods (accounting, etc.)
7. User Rights
As a data subject, you have the following rights:
- Right to access data
- Right to rectification of inaccurate data
- Right to deletion ("right to be forgotten") in accordance with GDPR
- Right to restriction of processing
- Right to data portability
- Right to object
To exercise your rights, you can contact us via email: octopus@octopus.hr
8. Cookies and Web Analytics
Our website currently does not use cookies for analytics purposes such as Google Analytics. If this changes, users will be notified through a cookie banner and an updated version of this policy.
9. Data Security
We implement technical and organizational security measures to prevent unauthorized access, loss or misuse of personal data.
10. Advertising via Google Ads Platform
For the purpose of promoting our services, we use Google Ads, an advertising platform by Google Ireland Limited. Through Google Ads, we display advertisements to users on Google search and other websites participating in the Google advertising network.
By clicking on an ad, the user is redirected to our website. As part of advertising, we may use features such as:
- Conversion tracking (e.g., how many users filled out a form after clicking)
- Tracking visits to pages related to ads
Google Ads may use cookies or similar technologies to measure ad effectiveness. These technologies enable the display of aggregated data (e.g., number of clicks, visits), but we do not process or share users' personal data with Google.
Users can manage their advertising settings through their Google account and learn more at: https://policies.google.com/privacy
11. Applicable Laws
This Privacy Policy is based on the following laws and regulations:
- General Data Protection Regulation (EU) 2016/679 (GDPR)
- Law on Implementation of the General Data Protection Regulation (Official Gazette 42/2018)
- Personal Data Protection Act (Official Gazette 106/12 – ceased to be valid, but may be relevant for previous processing)
In case of disagreement between national laws and GDPR, Regulation (EU) 2016/679 takes precedence.
Last updated: June 2025
