Legal

Privacy Policy

Labin, Istria, Croatia

Last updated: 12 October 2026

This Privacy Policy explains how personal data are processed when you visit quantumdesign.hr or contact us. Quantum Design is the brand under which Quantum design j.d.o.o. operates (“we”, “us”).

1. Data controller

Controller: Quantum design j.d.o.o.
Registered address: Prilaz Vala 9, 52220 Labin, Croatia
OIB: 55079661887
Email: info@quantumdesign.hr
Phone: +385 98 178 2750

2. Which data we process and why

Contact form and email enquiries

Data: your name, email address, optional phone number and the content of your message. Your IP address is used briefly to limit repeated submissions.
Purpose: to answer your enquiry and, if you wish, to prepare an offer for our services.
Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
We do not use your enquiry for marketing and do not store it in a database on the website. It is delivered to our mailbox.
Retention: 12 months after our last communication, unless the enquiry leads to a contract, in which case the data are kept as long as required by the contract and by law.

Spam protection (Google reCAPTCHA)

When you start filling in the contact form, Google reCAPTCHA is loaded to check that the form is submitted by a person. Google processes your IP address, information about your browser and device, your interaction with the check, and its own cookies.
Legal basis: our legitimate interest in protecting the form and our mailbox against spam and abuse (Art. 6(1)(f) GDPR).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google’s privacy policy: https://policies.google.com/privacy

Website analytics (Google Analytics 4)

Only if you allow analytics cookies, we use Google Analytics 4 to understand which pages are visited and how the website is used. Without your consent, Google Analytics is not loaded.
Data: pages visited, time of the visit, approximate location derived from the IP address (GA4 does not store IP addresses), device, browser and screen information, and a pseudonymous identifier stored in cookies. We do not send contact form content or other directly identifying data to Google Analytics.
Legal basis: your consent (Art. 6(1)(a) GDPR and the Croatian Electronic Communications Act). You can withdraw consent at any time in the cookie settings; withdrawal does not affect processing carried out before it.
Provider: Google Ireland Limited.

Website hosting and server logs

When you visit the website, our hosting provider automatically processes technical data (IP address, date and time, requested page, browser) to deliver the website and keep it secure.
Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Provider: Kuhada d.o.o., Gajnice 3, 10000 Zagreb, Croatia (OIB 91960356238); the server is in a Hetzner Online GmbH data centre in Falkenstein, Germany (EU).

3. Recipients

Your data are processed only by us and by service providers acting on our behalf under data processing agreements:

hosting provider: Kuhada d.o.o.;
email service that delivers contact form messages: Brevo, France;
Google Ireland Limited (reCAPTCHA; Google Analytics only with your consent).

We do not sell personal data. We disclose data to public authorities only where we are legally obliged to do so.

4. Transfers outside the EU/EEA

Google may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (in which Google LLC participates) and, where applicable, on standard contractual clauses. Contact form messages are delivered by Brevo within the EU. The website and its server logs are hosted in the EU (Germany).

5. Security

The website is served over an encrypted connection (HTTPS). Contact form messages are validated on our server and forwarded to our mailbox without being stored on the website. Access keys for third-party services are kept on the server and are never sent to your browser. Access to enquiries is limited to people who need it to respond.

6. Your rights

Under the GDPR you have the right to:

access your personal data (Art. 15);
have inaccurate data corrected (Art. 16);
have your data erased (Art. 17);
restrict processing (Art. 18);
data portability (Art. 20);
object to processing based on our legitimate interests (Art. 21);
withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

To exercise your rights, write to info@quantumdesign.hr. We will reply within one month. To protect your data, we may ask you to confirm your identity.

7. Right to lodge a complaint

If you believe that we process your personal data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP), www.azop.hr, or with the supervisory authority in the EU member state where you live or work.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you.

9. Changes to this policy

We may update this Privacy Policy when our services or the law change. The current version is always published on this page, with the date of the last update at the top.