Privacy Policy

1. Data controller

The Office Company d.o.o., Poljačka ul. 56, 10000 Zagreb, Croatia. For any data protection questions, contact us at info@theofficecompany.eu or +385 91 3011 552.

2. What data we collect and why

• Contact form: name, e-mail address, phone number (optional) and your message — so we can respond to your enquiry. Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
• Technical data: when you visit the site, our hosting provider automatically records your IP address and basic browser information in server logs, for security and correct operation of the site. Legal basis: legitimate interest (Art. 6(1)(f)).
• Language cookie: remembers your language choice (HR/EN). It is functional and not used for tracking.

3. Processors and recipients

We use trusted service providers who process data on our behalf:

• Vercel Inc. — website hosting (server logs).
• Supabase — the database powering the site content (catalog, blog); data is stored on servers within the EU (Ireland region).
• Web3Forms — delivery of contact form messages to our e-mail address.
• Google LLC — the Google Maps embed on the contact page, which loads only after you click "Load map".

4. Transfers outside the EU/EEA

Our database is located within the EU. Some other listed providers (e.g. hosting and contact form delivery) may process data on servers outside the European Economic Area (e.g. in the USA). In such cases the transfer is based on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

5. How long we keep data

Messages received through the contact form are kept for as long as needed to handle your enquiry and any follow-up business communication, and no longer than two years after the last contact, unless the law requires longer retention. Server logs are retained short-term according to our hosting provider’s settings.

6. Your rights

Regarding your personal data, you have the right to:

• access the data we process about you,
• rectify inaccurate data,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• object to processing based on legitimate interest.

7. Complaint to the supervisory authority

If you believe our processing of your data violates the law, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr, or your local EU supervisory authority.

8. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date of the last change.