Privacy policy

1. Who is responsible

The controller of personal data processed through this website is Moberg d.o.o. for IT services, Strojarska cesta 20, 10000 Zagreb, Croatia (OIB 39497757818), which operates Greiðslur. Any privacy question can be sent to info@moberg.hr.

2. No cookies, no tracking

This website does not use cookies, analytics, advertising or tracking tools of any kind, and it does not store anything in your browser. Fonts and images are served from our own website, so your visit is not shared with third parties such as Google. That is also why there is no cookie banner.

3. When you visit the website

When you open the website, our hosting provider automatically processes the technical data needed to deliver the pages to you and keep the service secure:

• your IP address
• the date and time of the request
• the page requested
• browser and operating system information

This data is used only to operate and protect the website (for example against attacks). It is not combined with other data or used to identify you, and the hosting provider keeps it only for a short period before deleting it. The legal basis is our legitimate interest in running the website securely (Art. 6(1)(f) GDPR).

4. When you contact us

If you email us, we process the information you include, usually your name, email address, company and the content of your message, in order to reply and, if you wish, prepare an offer. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We keep this correspondence for as long as needed to handle your enquiry and any business relationship that follows, and longer only where the law requires it, for example under accounting rules.

5. Who receives your data

We do not sell personal data or share it for marketing. It is processed only by service providers that help us run the website and email (hosting and email providers), under data processing agreements and only on our instructions, and by public authorities where the law requires it. Where a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict how your data is processed
• object to processing based on our legitimate interests
• receive your data in a portable format

To exercise any of these rights, email info@moberg.hr. You also have the right to complain to a data protection authority: in Croatia the Personal Data Protection Agency (AZOP, azop.hr), and in Iceland Persónuvernd (personuvernd.is).

7. Security

We use appropriate technical and organisational measures to protect personal data, and the website is served only over an encrypted connection (HTTPS).

8. Changes to this policy

If we change how we process personal data, we will update this page and the date at the top.