Privacy Policy

Last updated: 2 May 2026 · Effective: 2 May 2026

The full text of this policy is provided in English as the binding legal version. Croatian and Bulgarian summaries are available on request at info@ekohvok.com.

1. Data Controller

EKO HVOK d.o.o., registered in Croatia, is the data controller responsible for the personal data collected through this website.

Contact: info@ekohvok.com

2. What We Collect

We collect personal data only when you choose to provide it (contact form, email, phone) or when you browse the site (technical and analytics data).

Contact data: name, email address, phone number, company, country, message content
Technical data: IP address, browser type, device information, referring URL
Analytics data: page views, session duration, click events (collected via Google Analytics 4 if you accept analytics cookies)

3. Legal Basis & Purpose

Consent (GDPR Art. 6(1)(a)) — analytics cookies, marketing communication
Contract / Pre-contractual measures (GDPR Art. 6(1)(b)) — responding to inquiries, sending quotes
Legitimate interest (GDPR Art. 6(1)(f)) — site security, fraud prevention
Legal obligation (GDPR Art. 6(1)(c)) — tax records, compliance documentation

4. Data Retention

Inquiry data is retained for up to 24 months unless a contractual relationship is established (in which case it follows our standard tax/contract retention period of 11 years per Croatian law). Analytics data is retained 14 months in Google Analytics 4.

5. Third-Party Processors

Cloudflare — site hosting, DDoS protection (EU/US adequacy framework)
Google Analytics 4 — usage analytics (consent-based, IP anonymisation enabled)
Formspree — contact form processing (US, Standard Contractual Clauses)
Forward Email — email forwarding for info@ekohvok.com

6. Your Rights (GDPR)

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure / "right to be forgotten" (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right to withdraw consent at any time
Right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) — azop.hr

To exercise any of these rights, contact us at info@ekohvok.com. We will respond within 30 days.

7. Cookies

This site uses cookies. Necessary cookies are always active for security and basic functionality. Analytics cookies (Google Analytics 4) are loaded only after you grant consent via the cookie banner.

You can change your cookie preferences at any time by clicking the "Cookie settings" link in the site footer.

8. International Transfers

Some service providers (Google, Formspree, Cloudflare) may process data in jurisdictions outside the EU/EEA. Such transfers are protected by the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

9. Security

The site runs over HTTPS with HSTS, modern TLS, and Cloudflare WAF protection. Personal data is encrypted in transit and at rest by our processors. We do not store payment data.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be communicated via the site footer or, where appropriate, by email.