Privacy Policy

The controller of your personal data is: Tivolaro d.o.o. Ulica grada Vukovara 271, 10000 Zagreb, Croatia OIB: 85421763094 Email: privatnost@tivolaro.com For all questions related to the processing of personal data, you can contact us at the email address above.

We collect the following categories of data: - Identification data: Name and surname you enter in the contact form. - Contact data: Email address you provide when sending an inquiry. - Communication content: The text of the message you send us through the form. - Technical data: IP address, browser type, operating system, date and time of access — collected automatically. - Cookie data: Information about your preferences regarding cookies and analytics (see Cookie Policy).

We process your data for the following purposes: - Responding to your inquiries: We use your name, email, and message to respond to questions sent through the contact form. - Website improvement: Technical and analytical data help us understand how users use the site, enabling us to improve the user experience. - Legal obligations: Data processing to fulfill legal obligations under applicable regulations. - Marketing (with consent): Displaying relevant ads through the Google Ads platform, exclusively with your explicit consent through the cookie management system.

We base the processing of your personal data on: - Consent (Art. 6(1)(a) GDPR): For analytics and marketing cookies, and for processing data for personalized content purposes. - Legitimate interest (Art. 6(1)(f) GDPR): For website improvement and security. - Performance of a contract (Art. 6(1)(b) GDPR): For processing inquiries and communication. - Legal obligation (Art. 6(1)(c) GDPR): When processing is necessary to comply with regulations.

We may share your personal data with: - Hosting service providers: Our technical partners who ensure the website operates. - Google LLC: As part of using Google Analytics and Google Ads services (with your cookie consent). - Competent authorities: When required by law. We do not sell your personal data to third parties.

Some of our service providers (e.g., Google LLC) are based outside the European Economic Area (EEA). In such cases, data transfers are carried out based on appropriate safeguards, including: - Standard Contractual Clauses (SCCs) approved by the European Commission. - Adequacy decisions, when available. We regularly review the adequacy of protective measures.

We retain your personal data only for as long as necessary to fulfill the processing purpose: - Contact form data: Up to 12 months after responding to the inquiry, unless further retention is needed for legal claims. - Technical data: Up to 26 months (within Google Analytics). - Cookie preference data: Until cookie expiration or consent withdrawal. After the expiry of retention periods, data is deleted or anonymized.

Under the General Data Protection Regulation (GDPR), you have the following rights: - Right of access: You can request confirmation of whether we process your data and obtain a copy. - Right to rectification: You can request correction of inaccurate data. - Right to erasure: You can request deletion of your data ("right to be forgotten"). - Right to restriction: In certain circumstances, you can request restriction of processing. - Right to portability: You have the right to receive your data in a structured, commonly used format. - Right to object: You can object to processing based on legitimate interest. - Right to withdraw consent: You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact us at: privatnost@tivolaro.com You also have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.

Detailed information about the cookies we use, their categories, and how to manage them can be found in our separate Cookie Policy. By using the Google Consent Mode v2 system, we ensure that cookies are activated exclusively with your consent.

We may periodically update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes through a notice on the website. The date of the last update is always stated at the top of this page.

For all questions related to this Privacy Policy or the processing of your personal data, contact us: Tivolaro d.o.o. Ulica grada Vukovara 271, 10000 Zagreb, Croatia Email: privatnost@tivolaro.com