Privacy Policy
Last updated: January 2026
1. Data Controller
The controller of your personal data is Norvaliq d.o.o., registered at Heinzelova 62a, 10000 Zagreb, Croatia, OIB (Tax ID): 45712890316, registered with the Commercial Court in Zagreb under MBS: 081547293 (hereinafter: 'Norvaliq', 'we', or 'us'). For all inquiries regarding the protection of personal data, you can contact us via email at: privacy@norvaliq.com.
2. Personal Data We Collect
We collect personal data that you directly provide to us when using our platform. This includes: first and last name, email address, and the content of messages you send us through the contact form. We automatically collect technical data such as IP address, browser type, operating system, and site usage data through cookies and similar technologies.
3. Purpose of Data Processing
We process your personal data for the following purposes: responding to your inquiries and communicating with you; improving the functionality and user experience of our platform; fulfilling legal obligations, including tax and regulatory requirements under Croatian legislation; and conducting statistical analysis of site usage to improve our services.
4. Legal Basis for Processing
Processing of personal data is based on: your consent — for analytical and marketing cookies; legitimate interest — for improving our services and responding to your inquiries; fulfillment of legal obligations — where processing is necessary for compliance with applicable legislation, including the General Data Protection Regulation (GDPR) and the Croatian Act on Implementation of the General Data Protection Regulation.
5. Data Recipients
We do not sell your personal data to third parties. We may share data with service providers who assist us in our operations (e.g., hosting, analytics, marketing platforms), but solely based on contractual obligations that ensure adequate protection of your data. In cases of legal requirements, we may disclose data to competent authorities.
6. Data Transfers Outside the EEA
Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that data transfers are conducted in accordance with applicable safeguards, including standard contractual clauses approved by the European Commission, or based on adequacy decisions.
7. Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Data from contact inquiries is retained for up to 24 months from the last communication. Technical data collected through cookies is retained in accordance with the periods specified in our Cookie Policy.
8. Your Rights
In accordance with the GDPR and Croatian legislation, you have the following rights: the right to access your personal data; the right to rectification of inaccurate data; the right to erasure ('right to be forgotten'); the right to restriction of processing; the right to data portability; the right to object to processing; and the right to withdraw consent at any time. To exercise your rights, contact us at privacy@norvaliq.com.
9. Cookies
Our website uses cookies and similar technologies. Detailed information about the types of cookies, their purposes, and ways to manage them is available in our Cookie Policy.
10. Data Security
We apply appropriate technical and organizational security measures to ensure the safety of your personal data from unauthorized access, loss, destruction, or alteration. We regularly review and improve our security practices.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our operations or legislation. All changes will be published on this page with a new update date. We recommend regularly reviewing this page.
12. Contact and Complaints
For all inquiries or complaints regarding the processing of your personal data, you can contact us at: Norvaliq d.o.o., Heinzelova 62a, 10000 Zagreb, Croatia, email: privacy@norvaliq.com. You also have the right to file a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.