Privacy notice

Who the controller is

The data controller is Ganbu, [full company name], [address], company ID [OIB]. For any question about the processing of personal data, write to us at ganbufirm@gmail.com.

What data we collect

We only collect what you send us through the forms on this site:

• Satisfaction survey: ratings for five questions, your free-text comment and, if you fill them in, your name and email address.
• Quote request: first name, last name, email address, phone number (optional), subject and message.
• Technical data logged by the server on every visit (IP address, browser type, access time) for security and abuse prevention.

Why we process it and on what legal basis

• Answering your quote request — processing is necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Processing survey answers to improve our service — based on our legitimate interest in monitoring and improving quality (Art. 6(1)(f) GDPR).
• Contacting you to resolve a complaint, if you left your details — based on the consent you give by entering those details (Art. 6(1)(a) GDPR).

How long we keep it

Quote requests are kept for up to 24 months from the last communication, unless a contract results from them — in that case statutory retention periods for business records apply.

Survey answers are kept for up to 24 months, after which we delete them or permanently anonymise them for statistics.

Who we share it with

We do not sell your data and do not pass it to third parties for marketing. We share it only with service providers that technically enable the site to work:

• [Hosting provider name] — hosting of the site.
• [Email provider name] — delivery of form messages to our address.
• If you visit our Google reviews page, that visit is governed by Google’s terms and privacy policy, over which we have no control.

Your rights

At any time you may request access to your data, its rectification or erasure, restriction of processing, data portability, and object to processing based on legitimate interest. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Send your request to ganbufirm@gmail.com and we will reply within 30 days. If you believe we have acted unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.