This policy explains what personal data LaserPlexx d.o.o. receives through the LaserPlexx Nautica website, why we process it, and what rights you have. It covers inquiries sent through our contact form and the correspondence that follows if your inquiry turns into a quotation or an order.

1. Who is responsible for your data

The data controller is:

We have not appointed a Data Protection Officer, as we are not required to do so. All privacy matters are handled directly at the address above.

2. Inquiries sent through the contact form

What we receive

The contact form on this website can contain the following, depending on what you choose to fill in:

• Name
• Company
• Email address
• Phone number
• Country
• Boat or vessel model
• The product or category you selected
• The message you wrote

Only name, email, country, product category and message are required. The remaining fields are optional and are there because they usually help us answer faster. If you later send us photographs, drawings, DXF files or 3D scans by email, those files and any personal data they happen to contain are processed for the same purpose.

Why we process it

• To read and assess what you are asking for
• To reply to you and ask follow-up questions where needed
• To prepare a quotation if you have asked for one
• To keep track of the correspondence relating to your inquiry

Legal basis

Where your inquiry concerns a possible order, we process your data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). Where an inquiry is general and no contract is contemplated, we rely on our legitimate interest in responding to business correspondence addressed to us (Article 6(1)(f) GDPR).

3. Quotations, orders and invoicing

If an inquiry develops into a formal quotation, an order or a business relationship, we may need additional data that the contact form does not collect. Depending on the case this can include a full name, company name, billing and delivery address, OIB or VAT number, and the contact details required for shipping and business correspondence.

We ask for this data at that later stage, directly from you or from the company you represent. It is not gathered through the website.

Legal basis

• Performance of a contract, or steps taken at your request before entering into one (Article 6(1)(b) GDPR)
• Compliance with our legal obligations, in particular accounting, tax and business record-keeping duties under applicable Croatian and EU law (Article 6(1)(c) GDPR)

4. What we do not do with your data

To be explicit, LaserPlexx d.o.o.:

• does not send newsletters, and does not add inquiry contacts to any mailing list
• does not sell, rent or trade personal data
• does not use contact form data for profiling
• does not use it for targeted advertising or remarketing
• does not use it for marketing campaigns of any kind, direct or indirect
• does not carry out automated decision-making that produces legal effects

Your data is used to handle your inquiry, to quote and deliver work you have asked for, to keep the business records the law requires us to keep, and for nothing else.

5. Who else processes your data

We do not share your data with third parties for their own purposes. Two service providers process it on our behalf in order to make the website and our email work:

Netlify

This website is hosted by Netlify, Inc. and the contact form is processed through Netlify Forms, which means the content of your submission passes through and is stored on Netlify's infrastructure before it reaches us. Netlify acts as a processor under a Data Processing Agreement incorporated into its terms, and states that where personal data is transferred to countries without an EU adequacy decision it relies on mechanisms including the European Commission's Standard Contractual Clauses. Netlify's own privacy documentation is available at netlify.com/privacy.

Microsoft

Our email is operated on Microsoft 365. Any message you send to nautica@laserplexx.hr, and any attachment it carries, is stored and processed within that service on our behalf.

6. Cookies, analytics and tracking

This website does not use analytics cookies, advertising cookies, tracking pixels, marketing automation, embedded social media trackers or visitor profiling. We do not set cookies for these purposes, and there is no consent banner because there is nothing to consent to.

Web fonts

The site currently loads its typefaces from Google Fonts. When your browser requests those font files, it connects to Google's servers and your IP address is transmitted to Google as part of that request. Google Fonts does not set cookies, but the connection itself involves your IP address, which is personal data. We are disclosing this because it happens as the page loads, and we are working to serve the fonts from our own server so that no such connection is made.

7. How long we keep it

We do not keep personal data longer than we reasonably need it.

• Data from an inquiry is retained for as long as is reasonably necessary to handle that inquiry and the communication around it.
• Data that becomes part of a quotation, contract, invoice or other business record may be retained for the periods required by applicable accounting, tax and commercial law.
• Data that is no longer needed is deleted or otherwise securely disposed of.

8. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Access — to be told whether we hold data about you, and to receive a copy
• Rectification — to have inaccurate or incomplete data corrected
• Erasure — to have data deleted, where we have no overriding obligation to keep it
• Restriction — to have processing limited, where applicable
• Objection — to object to processing based on legitimate interest, where applicable
• Portability — to receive data you provided in a structured, machine-readable format, where applicable
• Withdrawal of consent — where processing is based on consent, to withdraw it at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, write to nautica@laserplexx.hr. We may need to ask a question or two to confirm who you are before we act, so that we do not disclose data to the wrong person.

9. Complaints

If you believe we have handled your data incorrectly, we would prefer you tell us first so we can put it right. You also have the right to lodge a complaint with the Croatian supervisory authority, the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), azop.hr, or with the supervisory authority in your own country of residence.

10. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be reflected here rather than communicated individually.