Privacy Policy
Last updated: January 15, 2026.
Xelvarionexari d.o.o. (hereinafter: "we", "our" or "the Company"), with its registered office at Ulica grada Vukovara 271, 10000 Zagreb, Croatia, OIB: 78432165091, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process and protect your personal data when you use our website xelvarionexari.com and related services.
1. Data Controller
The controller of your personal data is Xelvarionexari d.o.o., registered at the Commercial Court in Zagreb under number Tt-23/12847-4, OIB: 78432165091. For all questions regarding personal data processing, you can contact us at: info@xelvarionexari.com.
2. What data we collect
We collect the following categories of personal data: (a) Data you directly provide: name, email address and message content when using the contact form. (b) Automatically collected data: IP address, browser type, operating system, pages you visit, visit duration and referral pages. (c) Cookie data: user preferences, analytics data and cookie consent data (detailed in our Cookie Policy).
3. Legal basis and purpose of processing
We process your data based on: (a) Your consent — for analytics and marketing cookies, sending promotional materials; (b) Legitimate interest — for improving our services, platform security and abuse prevention; (c) Contract performance — for processing your inquiries and providing requested information; (d) Legal obligation — when required to comply with applicable regulations of the Republic of Croatia and the European Union.
4. Sharing data with third parties
We do not sell or lease your personal data to third parties. We may share data with: (a) Service providers who assist us in operations (hosting, analytics, email services) — exclusively to the extent necessary for their services; (b) Competent authorities — when legally required; (c) Google LLC — within Google Ads and Google Analytics services, in accordance with your consent (Google Consent Mode v2).
5. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to: access your personal data; rectification of inaccurate data; erasure of data ("right to be forgotten"); restriction of processing; data portability; object to processing; withdraw consent at any time. To exercise your rights, contact us at: info@xelvarionexari.com.
6. Data storage and security
We retain your data only as long as necessary to fulfill the purpose for which it was collected or as required by applicable regulations. We apply appropriate technical and organizational measures to protect your data from unauthorized access, loss or destruction.
7. International data transfers
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure an appropriate level of protection through standard contractual clauses or other legally prescribed mechanisms.
8. Policy changes
We reserve the right to amend this Privacy Policy at any time. All changes will be published on this page with an updated date of last modification. We recommend regularly checking this page.
9. Supervisory authority
If you believe that the processing of your data is contrary to the GDPR, you have the right to file a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.