Privacy Policy

Introduction

This Privacy Policy explains how krandoveli.top d.o.o. ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website krandoveli.top or use our digital certification verification services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller Information

The data controller for your personal information is:

krandoveli.top d.o.o.
Tkalčićeva ulica 56
21478 Split, Split-Dalmatia
Croatia
Registration Number: 963258741
VAT Number: HR85214796357
Email: [email protected]
Phone: +385 211586174

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you use our website and services. The types of data we collect include:

Information You Provide

• Contact Information: Name, email address, phone number, and postal address
• Professional Information: Institution name, job title, and professional role
• Communication Data: Messages, enquiries, and correspondence you send to us
• Service Data: Information related to your use of our verification services

Automatically Collected Information

• Technical Data: IP address, browser type, operating system, and device information
• Usage Data: Pages visited, time spent on site, and navigation patterns
• Cookie Data: Information collected through cookies and similar technologies

How We Use Your Information

We process your personal data for the following purposes and under the following legal bases:

Service Provision (Contractual Necessity)

• Providing digital certification verification services
• Processing your enquiries and requests
• Managing your account and service delivery
• Technical support and customer service

Legitimate Business Interests

• Improving our website and services
• Security monitoring and fraud prevention
• Business development and marketing (with consent where required)
• Compliance with legal obligations

Legal Compliance

• Meeting regulatory requirements
• Responding to legal requests
• Maintaining business records as required by law

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to appropriate privacy protections.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection practices

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Contact enquiries: 3 years from last contact
• Service data: Duration of service relationship plus 7 years
• Marketing data: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months (Google Analytics default)

Your Rights

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

Access and Portability

• Right of Access: Request a copy of your personal data
• Right to Portability: Receive your data in a structured, machine-readable format

Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data

Processing Controls

• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or +385 211586174. We will respond to your request within one month of receipt.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses
• Binding Corporate Rules
• Certification schemes and codes of conduct

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable privacy laws. In Croatia, the supervisory authority is the Croatian Personal Data Protection Agency (AZOP).

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: