Privacy Policy
1. Controller
The controller responsible for processing personal data in connection with this website is:
Stipe Čikeš
SOFTWAREPILOT, obrt za računalno programiranje
Vele Meje 33
21215 Kaštel Lukšić, Croatia
Email: stipe.cikes@softwarepilot.ai
2. Scope
This Privacy Policy describes how I collect, use and protect personal data when you use this website and contact me, in accordance with the General Data Protection Regulation (GDPR) and applicable local law.
3. Data I process
- Contact form: name, email address, company (optional), message content and technical metadata required to deliver your message (e.g. timestamp).
- Server and API logs: IP address, date and time, browser type and related technical data for security, abuse prevention and stability. This includes my contact endpoint (form submissions).
- Language choice: if you choose a language yourself, I store that choice in your browser and in one cookie named site_lang, so the next visit to the homepage opens in that language. I do not load analytics or marketing tools.
- Default language: if you have not chosen a language, the server reads the approximate country from the connection IP with a local database, only to open the matching language page. The IP is not sent to a third party and is not stored for this purpose. An address you open directly stays in that language.
4. Purposes and legal bases
- Responding to enquiries — performance of pre-contractual measures or legitimate interests (Art. 6(1)(b) / (f) GDPR).
- Website operation and security — legitimate interests (Art. 6(1)(f) GDPR).
- Remembered language — legitimate interests (Art. 6(1)(f) GDPR), kept in the browser and in the site_lang cookie after you choose a language.
- Analytics and marketing — not used.
- Default language selection — legitimate interests in presenting content in a suitable language (Art. 6(1)(f) GDPR); you can change the language at any time.
5. Recipients and processors
Hosting is provided by Hetzner Online GmbH, Germany. Contact messages are delivered by Resend, Inc. (USA) under a data processing agreement and Standard Contractual Clauses.
6. Retention
Contact enquiries are kept for up to 24 months after the last message, unless a longer statutory period applies. Application logs are deleted after 30 days.
7. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, where applicable. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
8. Security
I implement appropriate technical and organisational measures to protect personal data. The contact form is submitted over HTTPS when the site is served over HTTPS.
9. Changes
I may update this Privacy Policy. The current version is always published on this page with an updated “Last updated” date.