Privacy Policy

Data processing is carried out in full compliance with the General Data Protection Regulation (GDPR - EU 2016/679) and the Croatian Act implementing the General Data Protection Regulation.

• Company name: ATRIUM ISTRIA d.o.o.
• OIB: 20690833037
• Address: Vrtlarska ulica - Via degli orti 8, 52100 Pula, Hrvatska
• Privacy contact e-mail: atriumgrhr@gmail.com
• Phone: +385 99 3018 171

We collect data in two ways:

A. Data you provide directly:

• Full name.
• Contact details (phone number, e-mail address).
• Information about your project (city, property address, description of works, attached photos, drawings or specifications).
• The content of messages you submit through the external enquiry form or other contact channels (WhatsApp, Telegram, e-mail).

B. Data collected automatically (through cookies and similar technologies):

• IP address, browser type, operating system and time of visit.
• Pseudonymised or aggregated data about website use, collected through web analytics tools only after analytics consent.
• Technical error data, such as browser, route and error details, if the Sentry error monitoring service is enabled.

We process your data only for legally permitted purposes:

• Preparing an offer and taking steps before entering into a contract (Art. 6(1)(b) GDPR): to prepare an estimate and assess the works based on your enquiry.
• Legitimate interest (Art. 6(1)(f) GDPR): for business communication and to ensure the stable operation of the website.
• Consent (Art. 6(1)(a) GDPR): to use analytics cookies (Google Analytics / Google Tag Manager) so that we can understand traffic and improve our service.

The contact widget currently provides links to the enquiry form, phone and email. It does not offer an automated consultation and, in the public placeholder mode, does not send messages to an AI system, webhook or external assistant service.

If you continue from the website to the detailed enquiry form, the form may open in an external form service. Data entered there is used to receive and route your enquiry to our team.

Our website uses browser-side technologies to ensure functionality, show our public business listing and analyse traffic. We describe them in three functional groups:

A. Necessary technical data (LocalStorage)

• We use browser local storage for privacy preferences and limited contact-widget UI state.
• It may contain a random session identifier, locale, page state and policy-acceptance state. In the current public placeholder mode it is not used to store a submitted chat transcript.
• This browser-side data is not used to track you across other websites and is not sent to an assistant backend.
• The site also loads Google Fonts to display typography consistently. This is separate from analytics and marketing tracking.

B. Public Google Maps / Places company block

• When the company block on the page becomes visible, the site may request Google Maps / Google Places resources to display the public company listing, map, rating summary and review links.
• This integration may transmit technical request data such as IP address, browser data and referrer information to Google so that the public map and listing can load correctly.
• This company listing block is separate from analytics cookies and does not itself switch on Google Analytics or Google Tag Manager.

C. Analytics cookies (Google Analytics 4 and Google Tag Manager)

We use these technologies to understand how visitors use our website (for example the number of visitors and traffic sources).

• These cookies collect data in pseudonymised or aggregated form where possible.
• Before consent is given, the website does not load Google Analytics or Google Tag Manager scripts for analytics.
• Google Tag Manager, analytics storage and our analytics events are enabled only after your explicit consent to analytics.
• You can delete cookies at any time in your browser settings or disable tracking using the Google Analytics Opt-out tool.

We do not sell or rent your personal data. Data may be shared only with trusted partners:

• Secure web hosting providers.
• External form and automation providers used to receive and route detailed enquiries.
• Error monitoring provider Sentry, if enabled, for technical diagnostics.
• Web analytics, font and company listing/map providers (Google Ireland Limited) for statistics, typography and public business information display.

The exact provider and any relevant international-transfer basis depend on the service enabled at the time. Further information is available on request.

• Enquiry data from the form or direct contact channels is stored while communication with you is ongoing. The current public contact widget does not create a server-side chat transcript. If we start working together, relevant data is retained in accordance with Croatian tax legislation.
• Technical error data is kept only for diagnostics and service stability according to the configured retention period of the error monitoring service.
• Data collected through analytics cookies is stored according to Google Analytics settings (most commonly up to 14 months), after which it is automatically deleted.

At any time, you have the right to access, rectify, erase ('right to be forgotten'), restrict processing, data portability and withdraw consent for the use of analytics cookies.

Right to lodge a complaint with the supervisory authority:

If you believe that we have violated your rights in the processing of personal data, you have the right to lodge a complaint with:

Agencija za zaštitu osobnih podataka (AZOP)

Selska cesta 136, 10 000 Zagreb, Hrvatska

Web: www.azop.hr

We reserve the right to update this Policy. The current version will always be available on this page.