Privacy Policy

This Privacy Policy explains how OMNI CODE d.o.o. ("OmniCode", "we", "us") collects, uses, and protects personal data when you visit omnicode.hr, submit a contact enquiry, or book a meeting with us via Calendly.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the applicable Croatian data protection legislation.

1. Data Controller

The data controller responsible for processing your personal data is:

Company	OMNI CODE d.o.o.
Address	Matije Mesića 34, 10000 Zagreb, Croatia
OIB	63586818321
Contact email	info@omnicode.hr

2. Personal Data We Collect

2.1 Contact enquiries (contact form)

When you submit the contact form on our website, we collect the following data that you provide:

Field	Required	Why we ask
Name	Yes	To address you personally in our reply
Company name	Yes	To understand your business context
Work email address	Yes	To send our response
Team size	No	To tailor our response to your situation
Cloud provider	No	To tailor our response to your situation
Engagement type	No	To direct you to the most relevant service
Timeline	No	To understand your urgency
Infrastructure challenge (message)	Yes	Core content of the enquiry

Form submissions are delivered to us via Web3Forms (web3forms.com), a third-party form submission service. Web3Forms processes your submission data solely to deliver it to our inbox and does not use it for any other purpose.

2.2 Meeting scheduling (Calendly)

When you book a call using our scheduling link, the following data is collected and processed directly by Calendly Inc. on our behalf:

• Name and email address
• Selected meeting time and timezone
• Any notes or questions you enter during booking

Calendly is a US-based service. See Calendly's Privacy Notice for full details of how they handle your data.

2.3 Technical and server data

When you visit this website, standard server and network data is processed as part of operating the site. This includes:

• IP address
• Browser type and version
• Referring URL
• Date and time of the request

This data is processed by our hosting and CDN provider, Cloudflare, Inc. We do not independently collect or store server logs. See Cloudflare's Privacy Policy for details.

We also load web fonts from Google Fonts (fonts.google.com). This causes your browser to send a request to Google's servers, which may include your IP address. We do not control how Google processes this data; see Google's Privacy Policy for details.

3. Purposes and Legal Bases for Processing

Purpose	Legal basis (GDPR Art. 6)
Responding to a contact enquiry	Art. 6(1)(b) — processing necessary for steps prior to entering a contract
Scheduling and conducting an introductory call	Art. 6(1)(b) — processing necessary for steps prior to entering a contract
Maintaining records of business correspondence	Art. 6(1)(f) — legitimate interests (keeping accurate records of client communications)
Operating and delivering this website	Art. 6(1)(f) — legitimate interests (making the website available to prospective clients)

4. Third-Party Processors and Recipients

We share personal data only with third-party processors that are necessary to operate our website and respond to enquiries. All processors are bound by data processing agreements and are not permitted to use your data for their own purposes.

Processor	Role	Location
Web3Forms	Contact form submission delivery	India
Calendly Inc.	Meeting scheduling	USA
Cloudflare, Inc.	Website hosting and CDN	USA (with EU points of presence)
Google LLC	Web font delivery (Google Fonts)	USA

We do not sell, rent, or otherwise disclose personal data to any other third party, except where required by applicable law.

5. International Data Transfers

Some of the processors listed above are based outside the European Economic Area (EEA): Calendly, Cloudflare, and Google are based in the United States; Web3Forms is based in India. Neither country currently holds an EU adequacy decision. Transfers to these processors are made on the basis of Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Art. 46(2)(c) GDPR, which provide appropriate safeguards for the protection of your personal data.

You may request a copy of the applicable safeguards by contacting us at info@omnicode.hr.

6. Data Retention

Data	Retention period
Contact form enquiries	24 months from the date of last contact, or until the associated business relationship concludes — whichever is later. After this period, data is permanently deleted.
Calendly meeting records	As governed by Calendly's data retention policy
Cloudflare server logs	As governed by Cloudflare's data retention policy

7. Your Rights Under GDPR

You have the following rights in respect of your personal data, exercisable free of charge, subject to applicable conditions and exceptions:

• Right of access (Art. 15) — obtain confirmation of whether we process your data and receive a copy
• Right to rectification (Art. 16) — request correction of inaccurate or incomplete data
• Right to erasure (Art. 17) — request deletion of your data where there is no legitimate reason to continue processing
• Right to restriction (Art. 18) — request that we limit processing in certain circumstances
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests

To exercise any of these rights, email us at info@omnicode.hr with a description of your request. We will respond within 30 days.

You also have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10 000 Zagreb, Croatia
azop.hr

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• HTTPS (TLS 1.2 or higher) for all data in transit
• Access controls limiting who within OmniCode can access correspondence
• Use of processors that maintain their own security certifications

No method of transmission over the internet is completely secure. In the event of a personal data breach that is likely to result in a high risk to your rights, we will notify you without undue delay.

9. Cookies and Tracking Technologies

This website does not use analytics cookies, advertising pixels, or other non-essential tracking technologies. We do not use Google Analytics, Google Tag Manager, Meta Pixel, or similar tools.

Google Fonts. We load web fonts from Google's servers. This is a standard web request (not a cookie) but does transmit your IP address to Google. No advertising or analytics data is collected through this mechanism.

Calendly widget. The "Book a 30-minute call" feature loads a JavaScript widget provided by Calendly. Calendly may set functional cookies in your browser to support the scheduling process. These cookies are set only in the context of the Calendly booking flow. See Calendly's Cookie Notice for details.

Because we do not use non-essential cookies for our own analytics or marketing purposes, we do not display a cookie consent banner.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable law. Updates will be reflected by a new "Last updated" date at the top of this page.

For material changes that significantly affect your rights, we will make reasonable efforts to notify affected individuals directly, where we hold contact details and can do so practicably.

We encourage you to review this page periodically. Continued use of this website following an update constitutes acknowledgement of the revised policy.

11. Contact

For any questions about this Privacy Policy or to exercise your data subject rights, please contact us:

OMNI CODE d.o.o.
Matije Mesića 34, 10000 Zagreb, Croatia
info@omnicode.hr