Privacy

The short version

• This website sets no cookies for visitors and reads nothing from your device.
• We count visits with our own tool on our own server. No IP address is stored and nothing is passed to anyone.
• Fonts, images, styles and scripts come from our own server. Your browser contacts no other company when you open a page here.
• The search runs in your browser, on a list of pages it loads from our server.
• There is no contact form, no newsletter, no advertising and no account for visitors on this website.

Who is responsible

The controller is Tiaro Digital d.o.o. za usluge, Ulica Ivana Meštrovića 35, 10360 Sesvete, Croatia, OIB 50559636036 (details in the legal notice). For anything about your personal data, write to info@tiaro.eu or to the postal address. The person in charge of data protection is Rafael Budimir, Director. We have not appointed a data protection officer under Article 37 GDPR, because the law does not require one for a company of our kind.

Visiting this website

What is processed

Every time a page is requested, the web server receives and records technical data that any browser sends: IP address, date and time, the address requested, the referring page, the HTTP status, the amount of data sent, and the browser and operating system.

Why, and on what basis

To deliver the pages, to keep the site and server secure, and to find faults. The legal basis is our legitimate interest in a secure, working website (Article 6(1)(f) GDPR).

How long

The server logs are kept by our hosting provider only as long as needed for security and troubleshooting and are then deleted in its regular log rotation. We do not combine them with other data and do not use them to identify visitors.

Visitor statistics

What is processed

We count the visits with Tiaro Analytics, a tool we built ourselves that runs on our own server. For each page view it records the page, the time, the website you came from (without search terms), the country derived from the time zone set on your device, the browser language, and the type of device and browser. It also records that a file was downloaded or a link to another website was clicked.

To tell visits apart, the server forms an anonymous code from your IP address and browser details. The code changes every day and cannot be turned back into your IP address. The IP address itself is not stored. No cookie is set and nothing is read from your device.

Why, and on what basis

To understand which pages are useful and what is missing, so that we can improve the documentation. The legal basis is our legitimate interest in that (Article 6(1)(f) GDPR). Because the records cannot be linked to you, we cannot identify your visits among them.

How long

The records are deleted automatically after 25 months. Nothing is passed to third parties.

Opting out

If your browser sends a "Do Not Track" or "Global Privacy Control" signal, your visit is not counted at all.

Writing to us

When you write to us by email, we receive what you choose to send, including your email address. We use it to answer you. Emails stay in our mailbox for as long as the conversation continues and are then deleted, except where a law requires us to keep them. How we handle the data of clients and of people who use the contact form on tiaro.eu is described in the privacy policy of tiaro.eu.

Who else receives data

Only the provider that runs our server, bound by a contract under Article 28 GDPR: hosting.com (A2 Hosting, Inc., USA), for web hosting and backups. The server is located in a data centre in the European Union. Where the provider can access data from the United States, the transfer relies on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses (Article 46 GDPR).

Your rights

You can ask us at any time and free of charge for access to your data, for its correction or deletion, for a restriction of its processing, and for a copy in a common format, and you can object to processing based on our legitimate interest (Articles 15 to 21 GDPR). Write to info@tiaro.eu. We answer within one month and may ask you to confirm your identity first.

You also have the right to complain to a data protection authority. Ours is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, azop.hr. You may also contact the authority in the EU country where you live or work.

Changes

We update this page when our processing changes or the law requires it.

Last updated 12 October 2026.