Privacy policy
We process personal data only where it is necessary to operate this site and to handle your enquiries. This policy sets out what data that is and what rights you have.
1. Controller
Gearstack, obrt za računalno programiranje i usluge, vl. Kristijan Bezjak, Ježdovečka ulica 2A/1, 10250 Lučko, Zagreb, Croatia. Contact: info@sidrano.com.
2. Hosting and server logs
This site runs on Cloudflare, Inc. When you visit, technically necessary data is processed, in particular a truncated IP address, date and time, the address requested, the volume of data transferred and browser and operating system details. This processing serves secure and stable operation and rests on our legitimate interest under Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.
3. Enquiries
When you write to us via the form or by email, we process your name, email address, details about your business and the content of your message in order to answer the enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries relating to a contract, otherwise Art. 6(1)(f) GDPR. To deliver messages sent through the form we use Brevo (Brevo SAS, France) as a processor under Art. 28 GDPR, which keeps the data within the European Union. We delete this data once the enquiry has been dealt with and no statutory retention periods apply, at the latest after three years.
4. Cookies and analytics
This site sets no advertising or analytics cookies and embeds no external fonts, map services or social media elements. No profiling takes place. That is also why no consent banner appears: there is nothing here that would require your consent.
5. Client data
In the course of an engagement we process records such as company name, contact person, address, contact details and billing data. The legal basis is Art. 6(1)(b) GDPR. Content you provide for your website is processed on your instructions. Documents relevant under commercial and tax law are retained for the statutory periods.
6. The Sidrano app
Clients with an active contract receive our app for iPhone and Android. It sends us change requests and shows the progress of the work as well as the billing. We process: your name and, if provided, your email address; the requests you enter including messages and uploaded photos; the link to your website; timestamps of each step; and, with your consent, a device identifier for push notifications. The legal basis is performance of the contract under Article 6(1)(b) GDPR, and for push notifications your consent under (a), which you can withdraw at any time in your device settings. The data is held by Cloudflare, Inc. in the European Union (D1 database and R2 object storage). Push notifications are delivered through the service of Expo Inc., USA; only the device identifier and the message text are transmitted. There is no analysis of your usage behaviour, no advertising identifiers and no disclosure to third parties for advertising purposes. We keep your requests and photos for the duration of the contract and three years thereafter, so that it remains verifiable what was promised and delivered when. On request we delete your account including requests and photos earlier; write to info@sidrano.com.
Voice assistant
You can start a voice assistant on this site. It only loads once you click it; no connection to the provider is made before that. If you start it, ElevenLabs Inc., 169 Madison Ave #2484, New York, NY 10016, USA processes your speech on our behalf in order to turn it into text, produce a reply and read it out. This transfers your voice during the conversation, the text derived from it and technical connection data. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by starting it; you can end the conversation at any time. The transfer to the USA relies on the European Commission's standard contractual clauses. If you give the assistant a name and phone number for a callback, we pass those on like a form enquiry and delete them on the same basis. If you would rather not, use the contact form or write to info@sidrano.com.
7. Deleting your account in the app
You can request deletion of your account at any time and without giving reasons: in the app under Settings, or by email to info@sidrano.com. We then delete your account, your requests, messages and photos within 30 days. Invoicing data that we are required to retain under tax law is excluded.
8. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You may withdraw consent at any time with future effect. Please write to info@sidrano.com.
9. Right to complain
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia. You may also contact the authority where you live.
10. Changes to this policy
We update this policy when our processing or the legal position changes. The version published here is the one that applies.