Privacy policy
Last updated · 2026-05-26
Data controller
Qubic d.o.o., registered at Ulica sv. Ane 50, 31000 Osijek, Croatia. Tax ID (OIB) 83111940436. For any questions about how we process your personal data, write to info@qubic.hr. We have not formally appointed a Data Protection Officer (DPO) — the GDPR does not require one for a company of our size — but we answer all privacy questions at the address above.
What data we collect
Through the contact form: your name, email address, phone (if you choose to provide it), company name, and the contents of your message. Through site analytics (only with your consent): page views, scroll depth, device type, browser, operating system, truncated IP address (Google drops the last octet for visitors from the EEA), referrer URL, and session duration. Through technical site operation: server logs (Vercel) containing IP address, user agent, timestamp, and the URL requested — used for security and abuse detection.
Legal basis for processing
Analytics cookies (Google Analytics 4): consent — Article 6(1)(a) of the General Data Protection Regulation. Contact form: performance of pre-contractual steps at your request — Article 6(1)(b), together with our legitimate interest in business communication. Server logs: legitimate interest in the security and operational integrity of the site — Article 6(1)(f).
Third parties that process your data
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): provides Google Analytics 4 and Google Tag Manager. Measurement ID: G-QK364MV51Q. Data retention in GA4: 14 months (default), after which data is aggregated. Transfers to the United States rely on Standard Contractual Clauses (SCCs) and Google's certification under the EU-US Data Privacy Framework. Details: policies.google.com/privacy. Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA): provides web hosting and CDN. See server logs above. Transfers rely on SCCs and Vercel's DPA. Details: vercel.com/legal/privacy-policy. We do not sell your data and do not share it with any third parties outside the processors listed here.
Cookies and Consent Mode
A detailed list of cookies by category is in our Cookie policy. In short: essential cookies (always active), analytics cookies (only with consent), marketing cookies (currently inactive). When you decline or have not yet decided, no analytics or marketing cookies are set. Google Consent Mode v2 ensures that, until you make a choice on this site, Google does not receive identifying data about your visit.
Your rights
Under the GDPR you have the following rights: right of access to your data (Article 15), right to rectification (16), right to erasure ("right to be forgotten", Article 17), right to restrict processing (18), right to data portability (20), right to object (21), and the right to withdraw consent at any time (Article 7(3)) — withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, email info@qubic.hr. We respond within 30 days.
Supervisory authority
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): Selska cesta 136, 10000 Zagreb, azop@azop.hr, +385 1 4609 000.
Changes to this policy
We update this policy from time to time to reflect changes in our services or applicable law. The last-updated date is shown at the top of the document. Material changes will be communicated through an on-site notice or by email (if you are in contact with us).
Contact for privacy questions
For any questions about this policy, our processing of your data, or to exercise your rights: info@qubic.hr.