Privacy Policy

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

We collect personal data that you voluntarily provide to us and information that is automatically collected when you use our website and services. The types of data we collect include:

Personal Information You Provide

• Contact information (name, email address, phone number, company name)
• Account information when you register for our services
• Communication data when you contact us through forms or email
• Project and bidding information when using our services
• Payment information processed by our secure payment providers

Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Website usage data (pages visited, time spent, click patterns)
• Technical data for service functionality and security
• Cookie data as described in our Cookie Policy

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and legal obligations:

• Providing and improving our construction bidding automation services
• Processing your enquiries and providing customer support
• Managing your account and service subscriptions
• Communicating with you about our services and updates
• Analysing website usage to improve user experience
• Ensuring security and preventing fraud
• Complying with legal and regulatory requirements
• Marketing our services where you have provided consent

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers who assist us in operating our business (hosting, payment processing, analytics)
• Professional advisers (lawyers, accountants, auditors)
• Regulatory authorities when required by law
• Third parties in connection with business transfers or acquisitions
• Google and other advertising platforms for remarketing purposes (with your consent)

All third parties are required to maintain appropriate security measures and use your data only for the specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact enquiries: 3 years from last contact
• Customer account data: Duration of service plus 7 years for legal compliance
• Website analytics data: 26 months (Google Analytics standard retention)
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Legal and regulatory data: As required by applicable laws

Your Rights

Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing or cookies

To exercise these rights, please contact us at [email protected] or +385 517547858.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure hosting with regular security updates
• Access controls and authentication measures
• Regular security assessments and monitoring
• Staff training on data protection principles

International Data Transfers

We primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent protection
• Binding corporate rules for multinational service providers

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority if you believe we have not handled your personal data appropriately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on luxoravexia.top and updating the "Last updated" date. We encourage you to review this policy periodically.