Privacy Policy

1. Controller Identity

The data controller responsible for the processing of your personal data is Zenlixe, with its registered office at Ul. Dr. Vladka Mačeka 44, 47000 Karlovac, Croatia. You can contact us regarding data protection matters at info@zenlixe.com or by telephone at +385 800 300 417.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through the Zenlixe website at zenlixe.com, including both the English (/en/) and Croatian (/hr/) language versions. It describes what data we collect, the purposes for which we process it, the legal bases for processing, how long we retain it, and your rights as a data subject.

3. Data We Collect

3.1 Contact Form Data

When you submit the contact form on our website, we collect the following data that you voluntarily provide:

• Full name
• Email address
• Telephone number (optional)
• Organisation or group name (optional)
• The content of your message

3.2 Automatically Collected Data

When you visit our website, certain technical data is automatically collected by our web server and, where you have given consent, by analytics tools. This may include your IP address (anonymised), browser type and version, operating system, referring URL, pages visited, and the date and time of your visit.

3.3 Cookie Data

We use cookies on our website. Please refer to our Cookie Policy for full details of the cookies we use, their purposes, and how to manage your preferences.

4. Legal Bases for Processing

We process your personal data on the following legal bases under Article 6 of the General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a) GDPR): For the processing of data submitted via the contact form, where you have provided explicit consent by ticking the privacy checkbox, and for non-essential cookies where you have given consent via our cookie banner.
• Legitimate interests (Art. 6(1)(f) GDPR): For the processing of technical data necessary for the secure and functional operation of our website, where our legitimate interest in maintaining a functioning website does not override your rights and freedoms.

5. Purposes of Processing

We process your personal data for the following purposes:

• To respond to enquiries submitted through our contact form
• To communicate information about our market research services that you have enquired about
• To maintain the security and functionality of our website
• To analyse website usage in aggregate form to improve our service (analytics, where consent is given)

6. Data Retention

We retain personal data submitted through the contact form for a period of 24 months from the date of submission, unless a longer retention period is required for the purposes of an ongoing service relationship or is required by law. After this period, data is securely deleted.

Technical log data is retained for a maximum of 12 months. Cookie data is retained for the periods specified in our Cookie Policy.

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers who assist us in operating our website (such as hosting providers), subject to appropriate data processing agreements ensuring GDPR compliance. We do not transfer personal data to countries outside the European Economic Area without appropriate safeguards in place.

8. Your Rights as a Data Subject

Under the GDPR and applicable Croatian data protection law (Zakon o provedbi Opće uredbe o zaštiti podataka), you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of it.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate personal data we hold about you.
• Right to erasure (Art. 17 GDPR): You have the right to request deletion of your personal data in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at info@zenlixe.com. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP), Selska cesta 136, 10000 Zagreb, Croatia. Website: azop.hr

10. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website uses HTTPS encryption for all data transmissions.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically.

12. Contact

For any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

Zenlixe
Ul. Dr. Vladka Mačeka 44
47000 Karlovac, Croatia
Email: info@zenlixe.com
Phone: +385 800 300 417