1. Data controller

The controller of your personal data is:

PURANOVA d.o.o.
Brunjakova ulica 6B, 52100 Pula, Croatia
VAT ID / OIB: 18295083351

2. Data we collect

Depending on how you use the website, we may process:

• your first and last name;
• the name of your company or institution;
• your email address and phone number;
• the content of your message and information you voluntarily provide;
• the date and time of submission and the page from which the form was sent;
• basic technical and security logs automatically recorded by the web server and hosting provider.

Please do not submit health information, diagnosis details or other special-category personal data through the form.

3. Purposes and lawful bases

We process personal data to:

• respond to inquiries and provide requested product or cooperation information;
• take steps at your request before entering into a contract or to perform a contract;
• maintain ordinary B2B communication and business contact records;
• protect the security, reliability and operation of the website;
• comply with legal obligations and establish, exercise or defend legal claims.

Our lawful bases are steps taken before entering into and performing a contract, Puranova's legitimate interests in communication, security and business development, and compliance with legal obligations. Where consent is required, we will request it separately.

4. Contact forms

Required fields are marked with an asterisk. Without your name, email address and message, we cannot process and respond to your inquiry. Company name and phone number are optional.

Form data is delivered by email to authorised Puranova personnel and may be temporarily stored in the website administration system for inquiry management. It is not used for newsletters or direct marketing without a separate lawful basis.

5. Recipients and processors

Data may be accessed only by authorised Puranova personnel and contracted providers required to operate the website and communications, such as hosting, maintenance, backup and email delivery providers. The website uses WordPress and Elementor, including Elementor Forms and email delivery services.

Providers may process data only as necessary to deliver their services and subject to appropriate contractual and security obligations. We may disclose information to competent authorities where required by law.

6. Transfers outside the European Economic Area

Certain technology providers may process data outside the European Economic Area. In such cases, transfers rely on an adequacy decision, Standard Contractual Clauses or another permitted safeguard under the GDPR.

7. Retention periods

• Inquiries that do not lead to a business relationship are generally retained for no longer than 12 months after the last communication.
• If communication leads to a business relationship, relevant data is retained during that relationship and afterwards for the periods required by law, limitation periods and the protection of legal claims.
• Technical and security logs are retained only as long as needed for security and reliable system operation, according to provider settings.
• Data may temporarily remain in backups until the regular backup deletion cycle is completed.

8. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure. Access is limited to people who need it for their work. However, no transmission or storage system can be considered absolutely secure.

9. Your rights

Subject to applicable conditions, you may request:

• access to your personal data;
• rectification of inaccurate or incomplete data;
• erasure of data;
• restriction of processing;
• an objection to processing based on legitimate interests;
• data portability, where applicable;
• withdrawal of consent at any time where processing is based on consent.

To exercise your rights, contact info@puranova.hr. We may need to verify your identity. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) via azop.hr.

10. Automated decision-making

We do not use contact-form information for automated decision-making or profiling that produces legal or similarly significant effects.

11. Cookies and external links

Information about cookies and similar technologies will be available in a separate Cookie Policy. The website may contain links to third-party websites and social networks. Puranova is not responsible for their privacy practices, and we recommend reviewing their policies.

12. Policy updates

We may update this policy to reflect changes to our services, technology or applicable law. The revised version will be published on this page with an updated revision date.