PRIVACY POLICY

1. Data Controller

42 Consult Expertise d.o.o.
Email: info@42consult.eu

2. Scope of This Policy

This Privacy Policy explains how we process personal data when you visit our website or voluntarily submit your email address. The website is intended for business users and provides company and news information only.

3. Categories of Personal Data Processed

We process the following personal data:
– IP addresses and related technical data when you access the website
– Email addresses submitted voluntarily via subscription or contact forms

4. Purposes and Legal Bases of Processing

IP addresses are processed to ensure website delivery, security, and operational stability, based on our legitimate interest under Article 6(1)(f) GDPR.
Email addresses are processed to send company news or communications requested by you, based on consent under Article 6(1)(a) GDPR.

5. Service Providers and Sub-Processors

We use the following service providers, which may process IP addresses strictly for service delivery:
– Framer (website hosting and delivery)
– Cloudflare (content delivery network and security)
– DigitalOcean (cloud infrastructure; servers located in Germany, EU)
– Kit (email communication service; processes email addresses submitted by users)
These providers act as processors under GDPR and process data only on our instructions.

6. International Data Transfers

Where service providers process data outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses are applied in accordance with GDPR Chapter V.

7. Data Retention

IP addresses are retained only for as long as required for operational and security purposes, in line with applicable legal limits and provider configurations.
Email addresses are retained until you unsubscribe or request deletion.

8. Automated Decision-Making

We do not use automated decision-making or profiling as defined in Article 22 GDPR.

9. Your Rights

You have the right to access, rectify, erase, restrict processing of, or object to processing of your personal data, as well as the right to data portability where applicable.

10. Exercising Your Rights

You may exercise your GDPR rights by contacting us at info@42consult.eu.

11. Supervisory Authority

You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website.