Privacy policy

Altaora is a brand of Arbona d.o.o. Arbona d.o.o. is the controller of your personal data collected through this website.

For any questions about the processing of your personal data, to exercise your rights or to withdraw your consent, please use the data protection contact details in the table above.

We collect only the data we need for the purpose for which you contacted us.

• Data you enter in the contact form yourself: full name, email address, phone number and company name if you provide them, and the text of your enquiry.
• Data you enter when booking a call in the calendar: name, email address and chosen time slot, plus any message you add.
• The email address you enter to subscribe to the newsletter, together with a record of your consent.
• Data generated automatically when you visit: IP address, browser and device data, date and time of the visit, and the pages visited.
• Our correspondence with you, including emails and records of phone calls where these are needed to provide the service.

We do not collect special categories of personal data (such as health data or political or religious beliefs) and we do not ask you for them. The website is not intended for anyone under the age of 16.

Each processing activity has its own purpose and its own legal basis under Article 6 of the General Data Protection Regulation (GDPR).

We do not use data from the contact form or call bookings for marketing unless you give separate consent to it. Accepting the website terms of use does not constitute consent to marketing.

We keep personal data in a form that permits your identification only for as long as necessary for the purpose for which it was collected, unless the law requires longer retention for a particular purpose. We irreversibly anonymise or securely destroy data that is no longer needed.

If you request erasure of your data at any time, we will erase it without delay, except for data we are legally required to keep.

We do not sell your data and we do not give it to third parties for their own purposes. To run the website, we use service providers that act as processors: they process data solely on our behalf and on our instructions.

We have arrangements in place with our service providers governing the processing of personal data, in accordance with Article 28 GDPR. We may also disclose data to competent authorities where we are required to do so by law, and to our legal or accounting advisers where this is necessary to exercise or defend legal claims.

Some service providers are based outside the European Economic Area, usually in the United States. In those cases, the transfer is based on an adequacy decision of the European Commission or on the standard contractual clauses adopted by the European Commission, together with supplementary measures.

Strictly necessary cookies, which the website needs for its basic operation and security, are set without consent because the website cannot work without them. All other cookies, including analytics and marketing cookies, are set only if you consent to them in the cookie banner.

You can withdraw or change your consent at any time by clicking “Cookie settings” in the footer of every page. Until you give consent, we do not set analytics or marketing cookies and we do not send data to traffic measurement tools.

We send the newsletter only to people who have consented to it. You give consent by ticking a separate box below the sign-up form. The box is not pre-ticked, and you cannot sign up without it.

We record the date and time of consent and the text you agreed to, so that we can demonstrate that consent was given. You can withdraw your consent at any time using the unsubscribe link in every email or by writing to our data protection contact. Unsubscribing is free of charge and requires no explanation. Once you unsubscribe, we no longer contact you for that purpose.

You have the following rights in relation to your personal data:

• Right of access: to request confirmation as to whether we process your data and a copy of that data.
• Right to rectification: to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure: to request the erasure of your data where there is no longer a basis for processing it.
• Right to restriction of processing in the cases provided for by the GDPR.
• Right to data portability: to request your data in a structured, commonly used format.
• Right to object to processing based on legitimate interest and, at any time, to processing for direct marketing purposes.
• Right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request by email to gdpr@arbona.hr or by post to Horvatova ulica 82, 10000 Zagreb, Croatia. We respond without delay and in any event within one month of receiving the request.

If you believe that we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority: the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.

We apply technical and organisational measures to prevent unauthorised processing, and we review and adjust these measures regularly. We require the same of the service providers that operate systems on our behalf.

• Access to data is limited to the people who need it for their work, and only for the purposes you have been informed of.
• Data transferred between your browser and our systems is encrypted.
• Access to systems is monitored to detect and prevent misuse.

We may change this policy when the way we process data, the tools we use or the applicable regulations change. The date of the last update is shown at the top of the page, and we announce significant changes on the website.