Home / Privacy Policy

Privacy Policy

This policy explains what personal data we collect through this website, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

Last updated: 30 October 2026

1. Who we are

The data controller is Eduron IS d.o.o., [Street address], [Postal code] [City], Croatia (OIB: [OIB], company registration number: [MBS]). You can contact us about this policy or your data at info@eduron.info.

2. Personal data we collect

Contact form

When you send a message through our contact form, we collect the information you enter:

  • Name and company or organization
  • Business email address and, optionally, phone number
  • The service you are interested in and organization size, if you select them
  • The content of your message

Website technical data

Our web hosting provider automatically records basic technical data when you visit the site, such as your IP address, the date and time of the request, the pages requested, and your browser type. This data is used to deliver and secure the website.

Spam protection

The contact form includes a hidden field that people do not see or fill in, but automated programs often do. Submissions that trigger this field are discarded. Web3Forms may also run spam filtering on submissions, which may send your IP address and email address to spam-prevention services (see section 4).

Cookies

This website does not use advertising or tracking cookies. Where a technical function requires local storage, it is limited to what is strictly necessary for the site to work. [Update this section if analytics are added.]

3. Why we use your data and the legal basis

  • Responding to your inquiry (including arranging a consultation or proposal): steps taken at your request before a contract, GDPR Article 6(1)(b).
  • Operating and securing the website, and preventing spam: our legitimate interests, GDPR Article 6(1)(f).
  • Meeting legal obligations, such as accounting and tax record-keeping: GDPR Article 6(1)(c).

We do not send marketing email from the contact form. If we ever want to do so, we will ask for your separate consent first, and you can withdraw it at any time.

4. Who receives your data

Contact form submissions are processed by Web3Forms, which acts as our processor. Web3Forms uses the following providers:

  • Amazon Web Services (AWS), for storage of submissions and email delivery (Amazon SES). [Confirm the region in the Web3Forms DPA.]
  • Cloudflare, for content delivery, DNS, and security.
  • Hetzner, for application infrastructure.
  • CleanTalk and Akismet (Automattic), for spam filtering. Your IP address and email address may be sent to these services.

Web3Forms operates from India, so submissions may be accessed from India, and may be stored or processed in other countries. Transfers from the European Economic Area rely on Standard Contractual Clauses, as described in the Web3Forms Data Processing Agreement.

We also receive a copy of each message in our own mailbox, hosted by Microsoft. We do not sell personal data.

5. How long we keep data

  • Contact form submissions held by Web3Forms: deleted automatically after 7 days, the retention period set for this form.
  • Copies of inquiries in our mailbox: kept for 12 months if no contract follows, then deleted or anonymised.
  • Client and engagement records: kept for the duration of the contract and for the period required by Croatian accounting, tax, and contract law.
  • Server logs: kept by our hosting provider for the period it specifies in its own policy.

6. Personal data found during client engagements

When we carry out penetration tests, incident response, or forensic work for a client, we may encounter personal data held on that client's systems. We process this data only on the client's documented instructions, under a separate written agreement that includes a data processing agreement where required. It is protected, retained, and deleted according to that agreement. This section does not apply to data collected through this website.

7. Security

We use technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls on our systems and mailboxes, and restricted access for staff who handle inquiries. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased in certain cases;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with a supervisory authority.

To exercise these rights, email info@eduron.info. We will respond within one month, as the GDPR requires. The supervisory authority in Croatia is the Croatian Personal Data Protection Agency (AZOP).

9. Children

This website is intended for businesses and professionals. We do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be announced on this page.

11. Contact

Eduron IS d.o.o.
Cvetković 191a, 10450 Jastrebarsko, Croatia
info@eduron.info