Privacy Policy

The controller responsible for processing personal data is:

MONOLIT INTEGRIRANE OPERACIJE, zajednički obrt za uslužne djelatnosti, vl. Mario Lukačević-Verenac i Bojan Pavlović, Velika Gorica, Ulica Mate Lovraka 48

MBO: 99331578 · Croatian Crafts Register

Address:

Ulica Mate Lovraka 48

10410 Velika Gorica

Croatia

Email:

info@monolith-intops.com

In this Privacy Policy, “Monolith,” “we,” “us,” and “our” refer to the controller identified above.

This Privacy Policy explains how we process personal data when you:

• visit our website
• submit the contact form
• request a consultation or information about our services
• contact us by email
• request a callback
• submit a written consumer complaint
• otherwise communicate with us in relation to our services.

Depending on how you interact with us, we may process:

• your full name
• your email address
• your telephone number, when voluntarily provided
• your preferred contact method
• the service in which you are interested
• the contents of your message or inquiry
• whether you requested a callback
• information contained in a written complaint and related documentation
• the date, time and contents of business communications
• technical data required to operate and protect the website, such as IP address, date and time of access, browser type, device type, pages requested and server-security logs.

Please do not submit special categories of personal data, such as health information, biometric information or other particularly sensitive information, through the contact form or ordinary email unless this is necessary and has been agreed in advance.

We process personal data for the following purposes:

a) Responding to inquiries and requests

We process data to respond to your inquiry, provide requested information, arrange a consultation or take steps at your request before a possible contract is entered into.

The legal basis is taking steps at the request of the data subject prior to entering into a contract under Article 6(1)(b) of the General Data Protection Regulation.

Where the communication is not connected with a potential contract, processing is based on our legitimate interest in responding to business inquiries and maintaining orderly business communications under Article 6(1)(f) of the GDPR.

b) Providing and administering contracted services

Where we enter into a contract with you, we process data to perform the contract, communicate with you, coordinate the service, issue invoices and meet related business obligations.

The legal bases are performance of a contract under Article 6(1)(b) and compliance with legal obligations under Article 6(1)(c) of the GDPR.

c) Written consumer complaints

We process information contained in written consumer complaints to receive, record, consider and respond to the complaint and to comply with consumer-protection requirements.

The legal basis is compliance with a legal obligation under Article 6(1)(c) of the GDPR.

d) Website and information-system security

We may process technical information and security logs to maintain website security, identify technical errors and prevent misuse, attempted unauthorized access and other security incidents.

The legal basis is our legitimate interest in protecting the website, our business systems and users under Article 6(1)(f) of the GDPR.

e) Establishing, exercising and defending legal claims

We may process information where necessary to establish, exercise or defend legal claims and to cooperate with competent authorities.

The legal basis is our legitimate interest in protecting our rights and legal interests under Article 6(1)(f), or compliance with a legal obligation under Article 6(1)(c), where applicable.

Providing information through the contact form is voluntary.

However, without the information required to identify and respond to an inquiry, we may be unable to respond, arrange a consultation or provide the requested information.

Information necessary to enter into or perform a contract, issue an invoice or comply with a legal obligation must be provided when required for those purposes.

Personal data is accessible only to persons who require it to perform their duties.

Where necessary, data may be provided to the following categories of recipients:

• website-hosting providers
• business-email providers
• providers of technical support, maintenance and information-security services
• business, accounting and legal advisers
• banks and payment-service providers where required to process payments
• public, regulatory, judicial or other competent authorities where disclosure is required by law or necessary to protect legal interests.

External providers processing personal data on our behalf may process it only according to our instructions, for agreed purposes and subject to appropriate confidentiality and data-protection obligations.

We do not sell, rent or disclose personal data to third parties for their independent marketing purposes.

Some technical-service providers may process data outside the European Economic Area.

Where such a transfer occurs, personal data will be transferred only through a mechanism permitted by the GDPR, such as a European Commission adequacy decision, Standard Contractual Clauses or other appropriate safeguards.

Information about the applicable safeguards may be requested through our contact email address.

We retain personal data only for as long as necessary for the purpose for which it was collected.

Our general retention periods are:

• general inquiries and contact communications are retained for no longer than 24 months after the last relevant communication
• written consumer-complaint records are retained for at least one year from the date the complaint is received
• technical and security logs are normally retained for no longer than six months, unless they are required for longer to investigate a security incident or protect legal claims
• information connected with contracts, invoices and business documentation is retained for the duration of the relationship and after its conclusion for as long as required under applicable accounting, tax, consumer-protection and other laws
• information required for legal claims may be retained until the applicable limitation periods and related proceedings have ended.

After the applicable period expires, information is erased, anonymized or otherwise securely removed unless continued retention is required by law.

Subject to the conditions of the GDPR, you have the right to:

• request access to your personal data
• request correction of inaccurate data or completion of incomplete data
• request erasure of personal data
• request restriction of processing
• object to processing based on legitimate interests
• request data portability where applicable
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to: info@monolith-intops.com

To protect personal data, we may request additional information reasonably necessary to verify the identity of the person making the request.

We will respond without undue delay and normally within one month, in accordance with the GDPR.

You have the right to lodge a complaint with the Croatian supervisory authority if you believe that your personal data has been processed unlawfully:

Croatian Personal Data Protection Agency

Ulica Metela Ožegovića 16

10000 Zagreb

Croatia

Email: azop@azop.hr

Website: azop.hr

You may also contact us first so that we can attempt to address your concern.

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects an individual.

The website uses strictly necessary technologies that are required for its proper, secure and reliable operation. Where legally permitted, these necessary technologies may operate without additional consent because they are essential to provide the service you request.

The website uses Google Analytics 4, a web analytics service provided by Google LLC, to understand website use and performance. Google Analytics is used only when you grant consent for the analytics category. Analytics is disabled before consent: before you have made a choice, no Google Analytics script executes, no analytics cookies are created, and no request is sent to Google Analytics or Google Tag Manager servers.

When you visit the website for the first time, a privacy-preferences banner allows you to accept all optional technologies, reject all optional technologies, or manage your preferences. Google Analytics is activated only if you grant consent for the analytics category.

When Google Analytics is enabled, it may set first-party cookies (such as the _ga cookie and related _ga_ cookies) on your device to measure how you use the website. Google Analytics processes this information to compile reports on website activity and to help us understand how the website is used. IP addresses collected by Google Analytics are anonymized.

Your consent choice is stored locally in your browser under a first-party consent record. No unnecessary personal information is stored as part of this record.

You can review or change your preferences at any time, including withdrawing previously granted analytics consent, using the “Cookie Settings” link in the website footer. When you withdraw consent, Google Analytics collection stops, the analytics_storage consent state is set to denied, the Google Analytics disable flag is applied, and Google Analytics first-party cookies are removed where technically possible. You are not required to clear your browser storage manually.

This website uses Google Analytics for analytics only. No advertising, marketing or profiling cookies are used, and advertising-related consent (ad_storage, ad_user_data, ad_personalization) always remains denied. Google Signals, user-provided data collection, enhanced conversions and cross-domain tracking are not enabled.

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or unauthorized disclosure.

Access to personal data is restricted to authorized persons and providers who require access to perform their duties.

Although we take reasonable security measures, no method of transmitting or storing information can guarantee absolute security.

We may update this Privacy Policy where necessary to reflect changes in our processing, website functionality or applicable law.

The updated version will be published on this page with a revised “Last updated” date.