Privacy policy

Last updated: 29 October 2026

This website does not use cookies, analytics or any other tracking. It does not load anything from third-party services. We only process personal data you choose to send us, for example when you email us.

Who is responsible for your data

The data controller under the General Data Protection Regulation (EU) 2016/679 (GDPR) is:

Cookies and tracking

We do not set any cookies and we do not use local storage, analytics tools, advertising networks, social media plugins or tracking pixels. Fonts and all other files are served from our own server, so visiting this site does not send your data to third parties such as Google.

Server logs

When you visit the site, the web server that hosts it may automatically record technical information such as:

• your IP address,
• the date and time of the request,
• the page requested,
• your browser type and operating system.

This is needed to deliver the site and keep it secure, for example to detect and block attacks. The legal basis is our legitimate interest in operating a secure website (Article 6(1)(f) GDPR). These logs are kept only for a short period, usually no longer than 30 days, unless they are needed to investigate a security incident. We do not use them to identify or profile visitors.

When you contact us

If you email us, we receive your email address, your name if you include it, and the content of your message. We use this only to reply to you and, if relevant, to prepare or carry out a contract with you. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

We keep this correspondence for as long as needed to handle your enquiry. If it leads to a business relationship, we keep it for as long as required by Croatian accounting and tax law.

Sharing your data

We do not sell or rent your personal data. We share it only with service providers that help us run our business, such as our website hosting and email providers, and only to the extent needed for them to provide that service. They process the data on our behalf and under our instructions. We may also disclose data where required by law.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• have inaccurate data corrected,
• have your data deleted,
• restrict or object to how we process it,
• receive your data in a portable format.

To use any of these rights, email us at info@nefertum-it.com. We will respond within one month.

You also have the right to lodge a complaint with the Croatian data protection authority:

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.