Data Privacy Policy

Introduction

AstroLuxora d.o.o. ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect the data we collect from visitors to our website and users of our e-commerce analytics services.

As a company based in Croatia and operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. This policy applies to all personal data processing activities conducted by AstroLuxora.

Data Controller Information

The data controller responsible for your personal information is:

Data Collection

We collect personal data through various channels when you interact with our website and services. The data we collect includes information you provide directly to us and information collected automatically through your use of our services.

Information You Provide Directly

• Contact Information: Name, email address, phone number, and company details when you contact us or request our services
• Communication Data: Messages, enquiries, and feedback you send to us through contact forms, email, or other communication channels
• Service Data: Information related to your use of our analytics services, including project requirements and business objectives
• Account Information: If you create an account with us, we collect login credentials and profile information

Information Collected Automatically

• Website Usage Data: Pages visited, time spent on our website, click patterns, and navigation behaviour
• Technical Information: IP address, browser type, device information, operating system, and referring websites
• Cookies and Tracking Data: Information collected through cookies, web beacons, and similar tracking technologies

How We Use Your Information

We use the personal data we collect for legitimate business purposes and in accordance with the legal bases provided under GDPR. How we use your data depends on the type of information and the context in which we collect it.

Service Provision

• Providing e-commerce analytics and conversion optimization services
• Responding to your enquiries and providing customer support
• Processing service requests and managing client relationships
• Delivering reports, insights, and recommendations

Business Operations

• Managing our business relationships and contracts
• Improving our services and developing new offerings
• Conducting business analysis and performance monitoring
• Ensuring the security and integrity of our systems

Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our legal rights and interests
• Preventing fraud and ensuring system security

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our use of cookies and similar technologies includes:

• Essential Cookies: Necessary for website functionality and security
• Analytics Cookies: Google Analytics to understand website performance and user behaviour
• Functional Cookies: To remember your preferences and enhance user experience
• Marketing Cookies: For advertising, remarketing, and personalised content delivery

For detailed information about our cookie practices, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing our services or entering into a contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interest: When we have legitimate business interests that do not override your privacy rights

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in providing our services, subject to appropriate data protection agreements
• Legal Requirements: When required by law, legal process, or government request
• Business Transfers: In connection with mergers, acquisitions, or business asset transfers
• Protection of Rights: To protect our legal rights, prevent fraud, or ensure security

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Our data retention practices include:

• Client Data: Retained for the duration of our business relationship and up to 7 years after termination for legal and tax purposes
• Website Data: Analytics and usage data retained for up to 26 months
• Communication Records: Enquiries and correspondence retained for up to 3 years
• Marketing Data: Retained until consent is withdrawn or the purpose is no longer relevant

We regularly review our data retention practices and securely delete information that is no longer needed.

Your Rights

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

• Right of Access: Request information about the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at privacy@astroluxora.pro or +385 17851047. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and monitoring
• Employee training on data protection practices
• Secure data storage and backup systems

International Data Transfers

We primarily process personal data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or certification schemes

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority if you believe we have not complied with applicable data protection laws.