Privacy

Privacy notice

Controller and privacy contact: The controller is the operator named in the imprint (NimbusIT, owner Antonio Lovrić). Privacy requests: info@nimbusit.hr

Website hosting, technical services and request logs: The website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the website, Cloudflare processes technical connection data, in particular your IP address, to deliver the pages. Under Cloudflare’s terms, Cloudflare acts as a processor; a data processing addendum forms part of the agreement. According to Cloudflare, such log data is kept only for a limited period; Cloudflare does not publish a specific period. If a network error occurs while loading the website, your browser may send an error report (including the requested address and the type of error) to Cloudflare (Network Error Logging). The website itself sets no cookies. Provider information as of 26 October 2026.

Handling of email enquiries: When you write to info@nimbusit.hr, your message is forwarded by the Cloudflare Email Routing service to a Gmail mailbox of the owner and stored there. According to Cloudflare, Cloudflare Email Routing (Cloudflare, Inc.) forwards messages in real time without looking into, queuing or storing them; the headers are preserved. For forwarding, however, Cloudflare keeps an activity log with metadata about the messages (such as delivery status and sender authentication results); Cloudflare does not publish a retention period for it. The Gmail mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google processes the data under its privacy policy (policies.google.com/privacy). This involves your email address, your name and other details if you include them, the content and attachments, and technical headers (such as timestamps and the mail servers involved). Only the owner reads the messages. Provider information as of 26 October 2026.

Purposes and legal bases: The data is processed to answer your enquiry and to prepare or carry out a possible project. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Retention required by statutory record-keeping obligations is based on Art. 6(1)(c) GDPR. Providing the website, including technical connection data, is based on Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Providing data in an enquiry is voluntary; without an email address no reply is possible.

Retention periods and deletion rules: Enquiries that do not lead to an engagement are deleted six months after the last message. Correspondence that constitutes a business record is kept for as long as statutory retention obligations require.

Recipients, processing locations and transfers: Recipients are Cloudflare, Inc. (USA) for hosting and email forwarding, and Google Ireland Limited (Ireland) for the mailbox. Cloudflare operates a global network of data centres and also processes data outside the EEA, in particular in the United States. According to Cloudflare, it is certified under the EU-US Data Privacy Framework; where that does not apply, the data processing addendum provides for the European Commission’s standard contractual clauses. Google may process data on servers outside your country; according to Google, Google LLC is certified under the EU-US Data Privacy Framework, and Google relies on standard contractual clauses where required. Provider information as of 26 October 2026.

Your rights, right to complain and data protection officer: Subject to Articles 15 to 21 GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on Art. 6(1)(f) GDPR. Please send requests to info@nimbusit.hr. You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in your member state of residence or with the Croatian authority responsible for the owner, the Agencija za zaštitu osobnih podataka (AZOP, azop.hr). No automated decision-making takes place. No data protection officer has been appointed.

Technical notes

This website uses no analytics tools, marketing trackers, externally embedded media or contact forms. Images, SVGs and CSS are served locally with the website; fonts come from the operating system. No client-side JavaScript is used that writes cookies or browser storage. A consent banner is therefore not required.

The email link opens the visitor’s email application. The website does not send the message itself.