Znaor Gradnja

Privacy

How we process personal data about visitors and people who send us enquiries.

Last updated: 22 October 2026.

Controller and contact

The controller is ZNAOR GRADNJA j.d.o.o. za usluge, Ulica Drage Gervaisa 36, 10090 Zagreb, Croatia, OIB 93269954909. For questions and rights requests, contact [email protected] or write to this postal address.

Data, purposes and legal bases

For enquiries we process your name, email or telephone, message, and location, property and work details that you provide. We use them to reply, arrange an inspection and prepare a quote. Data necessary for a quote you request is processed to take steps before entering into a contract (GDPR Article 6(1)(b)). For correspondence with representatives of businesses, the basis is our legitimate interest in business communication (Article 6(1)(f)).

When you visit, the hosting provider may process your IP address, access time, requested URL, browser details and technical logs to deliver content, prevent abuse and maintain security. The basis is the legitimate interest in a secure, available website (Article 6(1)(f)).

If a contract or written complaint follows, we process necessary data to perform the contract and meet legal obligations, including accounting and consumer protection (Article 6(1)(b) and (c)). We do not use your data for newsletters, advertising profiles or automated decision-making.

Providing contact details for an ordinary enquiry is not a statutory requirement, but we cannot reply without a way to contact you. Do not send identity documents, health information, passwords or card details.

Recipients and services

Authorised company personnel and service providers have access as needed. Cloudflare, Inc. provides hosting, DNS and security. Business email uses Zoho Mail with a selected European data centre.

The form uses Cloudflare Turnstile to check for abuse; Cloudflare processes technical device and connection data for this check. After successful verification, Resend (Plus Five Five, Inc.), using the selected Ireland (eu-west-1) sending region, delivers the message to our Zoho mailbox. A success response means the service has accepted the message for delivery.

Providers also use subprocessors. A European region does not mean that all technical or support processing is confined to the EU. Applicable safeguards for transfers outside the EEA include European Commission standard contractual clauses and other applicable transfer mechanisms. Provider information and safeguards are linked below; you may request more information about our processing by email.

We do not sell your data. Accountants, competent authorities or legal advisers receive only data necessary for the relevant legal obligation or claim.

Retention

Enquiries that do not lead to a contract are retained for no more than 12 months after the last contact. Where necessary for a specific dispute or legal claim, relevant data is kept for as long as that purpose requires.

Contract and accounting records are retained for the statutory periods applicable to each document type. Written consumer complaint records are kept for one year after receipt, with longer retention only where another applicable obligation or specific legal claim requires it.

Provider technical logs and backups are subject to their policies and retention schedules. The 12-month business enquiry period is not a promise that every provider backup is immediately deleted.

Your rights

Subject to the applicable basis and GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Email [email protected]. We verify identity only as necessary and respond within GDPR time limits.