Privacy policy
This policy describes which personal data we collect when you visit our website or contact us, why we process it and what your rights are. The data controller is Ars Pantheon d.o.o., Pile I. 1, 10000 Zagreb, OIB 04231060578.
What data we collect
- Data you send us — first name, last name, company, email, phone number and message content when you write to us by email or through a form.
- Job applications — your CV and the information you provide in your application.
- Technical data — the server that runs the website records basic access data (e.g. IP address, time and requested page) for the security and operation of the website.
- Analytics — we use Google Analytics 4 for anonymous visit statistics, only with your consent. We do not use marketing cookies (see Cookies).
Why we process data
- to respond to your inquiry and prepare a quote,
- to perform a contract with a client and provide support,
- to consider a job application,
- to ensure the operation and security of the website,
- when required by legal obligations.
On what basis we process data
| Purpose | Legal basis (GDPR, Art. 6) |
|---|---|
| Answering an enquiry and preparing a quote | steps at your request before entering a contract, or our legitimate interest |
| Performing a contract and supporting clients | performance of a contract |
| Considering a job application | steps at your request before entering a contract |
| Security and operation of the website | our legitimate interest |
| Form bot protection (Cloudflare Turnstile), when enabled | your consent |
| Visit analytics (Google Analytics) | your consent |
| Legal obligations | compliance with legal obligations |
How long we keep data
We cannot delete business communication routinely, including messages you send us through a form, because it is part of our business records. On your request we can delete your data, unless the law requires us to keep it. We keep other data for as long as necessary for the purpose for which it was collected, or as long as required by law.
Who receives the data and where it is stored
Messages from the forms are received by Ars Pantheon employees: sales enquiries and quote requests at info@pantheon.hr, support requests at help@ars-pantheon.hr, and job applications at posao@pantheon.hr. The servers hosting the website and e-mail are located in the European Union, with a provider that holds appropriate security certificates. With your consent, visit statistics are processed by Google (Google Analytics 4). When Cloudflare Turnstile bot protection is enabled on the forms, it is loaded only after you tick the consent box in the form, and Cloudflare is then a data processor.
Data protection officer
Ars Pantheon has an appointed data protection officer. You can send questions and requests to josip@pantheon.hr.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. You can withdraw your consent at any time. Send your request to info@pantheon.hr.
If you believe the processing is unlawful, you can file a complaint with the Croatian Personal Data Protection Agency (AZOP).
