Privacy Policy - ZDXPLR Tech
Last updated: 24 July 2026
1. Controller
The controller responsible for this website is:
Xplore, Olga Grubesic, obrt
Ul. Andrije Kacica Miosica 20D, 23000 Zadar, Croatia
OIB: 84940350729
Email: tech@zdxplr.com
Phone: +385 91 151 4111
2. What this policy covers
This Privacy Policy explains how ZDXPLR Tech processes personal data when you visit tech.zdxplr.com, send an inquiry, contact us by email, contact form or WhatsApp, or communicate with us about consulting, automation, AI agent or related technology services.
3. Personal data we process
Depending on how you use the website, we may process:
- name and surname
- email address
- phone number
- company name, role and business context if provided
- message content and service inquiry details
- technical website data such as IP address, browser type, device information, pages visited and time of access
- cookie consent preferences
4. Purposes and legal bases
We process personal data for the following purposes:
- Responding to inquiries: to answer messages and prepare service proposals. Legal basis: steps prior to entering into a contract or legitimate interest.
- Providing services: to deliver agreed consulting, automation, AI agent or related technology services. Legal basis: contract.
- Business communication: to manage ongoing client communication and support. Legal basis: contract or legitimate interest.
- Website security and operation: to operate WordPress, prevent abuse and keep the website available. Legal basis: legitimate interest.
- Legal and accounting duties: to comply with Croatian and EU legal obligations where applicable. Legal basis: legal obligation.
- Optional marketing: only if you request it or consent to it. Legal basis: consent.
5. Contact forms, email and WhatsApp
If you contact us through a form, by email or via WhatsApp, we process the data you provide in order to respond to your inquiry. WhatsApp is operated by Meta Platforms and may process data according to its own terms and privacy policy. Please do not send sensitive information through WhatsApp unless necessary.
6. Website technology and third-party services
The website is built with WordPress and may use WordPress plugins for forms, security, display, cookie consent and website functionality. Based on the current public website, the site may load services or assets related to WordPress, Contact Form 7, CookieYes/Cookie Law Info, Google Fonts, Google Maps API and theme/page-builder plugins.
If analytics, marketing pixels, newsletter tools, CRM tools or additional third-party services are added later, this Privacy Policy and the cookie settings must be updated before or at the time those tools are activated.
7. Cookies
The website uses cookies and similar technologies. Some cookies are necessary for website functionality, security and cookie consent management. Optional analytics or marketing cookies should only be used after consent where legally required. You can manage cookies through the website cookie banner where available and through your browser settings.
8. Recipients of personal data
Personal data may be shared with:
- hosting and website infrastructure providers
- email and communication providers
- IT, website maintenance and security providers
- professional advisers such as accounting or legal advisers where necessary
- public authorities where legally required
We do not sell personal data.
9. International transfers
Some service providers may process data outside Croatia or outside the European Economic Area. Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.
10. Retention
Inquiry data is kept for as long as needed to respond and manage possible follow-up communication, normally up to 24 months unless a longer period is necessary. Client and accounting records are kept for the period required by applicable Croatian law. Technical logs and cookie consent records are kept for a limited period necessary for security, compliance and website operation.
11. Your rights
Under the GDPR, you may have the right to request access, correction, deletion, restriction, portability, objection to processing and withdrawal of consent where processing is based on consent. To exercise your rights, contact us at tech@zdxplr.com.
12. Supervisory authority
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): https://azop.hr/.
13. Changes
We may update this Privacy Policy from time to time. The updated version will be published on this page.