Privacy Policy

Numerix d.o.o. ("Numerix", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you visit our website (numerix.hr), how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Croatian law.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you have any questions, you can reach us at info@numerix.hr.

The data controller responsible for your personal data is:

We may collect the following categories of personal data:

Automatic data collection only takes place after you have given your explicit consent via our cookie banner. No analytics cookies are set before consent.

We use your personal data for the following purposes:

• Responding to enquiries and consultation requests you send us
• Understanding how our website is used so we can improve it (analytics, only with consent)
• Complying with legal obligations under Croatian and EU law
• Protecting the security and integrity of our website

We do not use your data for automated decision-making or profiling, and we do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)) — for analytics cookies and any optional data collection
• Legitimate interests (Art. 6(1)(f)) — for handling enquiries you initiate and website security
• Legal obligation (Art. 6(1)(c)) — where processing is required by law

Our website uses Google Analytics 4 (GA4) to collect anonymised usage statistics. GA4 is only loaded after you give explicit consent via our cookie banner. We operate under Google's Consent Mode v2, which means analytics are blocked by default until consent is granted.

If you decline cookies, no analytics data is collected and no tracking cookies are placed on your device. You can change your cookie preference at any time by clearing your browser's local storage or cookies.

We retain personal data only for as long as necessary for the purposes described in this policy:

• Enquiry and contact form data: up to 2 years from last contact
• Analytics data (Google Analytics): 14 months (Google's default retention)
• Cookie consent records: 12 months

Some of our service providers (including Google for analytics) may process data outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data.

As a data subject, you have the following rights, which you can exercise by contacting us at info@numerix.hr:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your personal data ("right to be forgotten")
• Right to restriction — ask us to limit how we process your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw analytics consent at any time without affecting prior processing

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr if you believe your data protection rights have been violated.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies separately.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at: info@numerix.hr