1. Data Protection at a Glance
Who is responsible for data collection on this website?
Data processing on this website is carried out by the data controller named in Section 2 of this document.
How do we collect your data?
Some data is collected because you provide it to us — for example, data you enter into the contact form. Other data is collected automatically when you visit the site, through our hosting infrastructure — mainly technical data (such as your browser, operating system, or the time the page was accessed).
What do we use your data for?
Some data is collected to ensure the website functions correctly. Data submitted through the contact form is used solely to respond to your enquiry.
What rights do you have regarding your data?
You have the right, at any time, to request free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of that data, and if you have given consent for processing, you may withdraw it at any time. You also have the right to request restriction of the processing of your personal data under certain circumstances, and the right to lodge a complaint with the competent supervisory authority. See Section 8 for details on all of these rights.
2. Data Controller
Cloud d.o.o.
Ulica Dragutina Rakovca 3, 42000 Varaždin, Croatia
OIB: 92781041318 · Court registration number (MBS): 070119811
Registered with the Commercial Court in Varaždin, business registration number Tt-14/3840-2
Represented by: Andrijana Mađarić, Managing Director
Contact for data protection matters: office@cloudpro.hr · +385 95 369 60 19
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, and the like).
3. Hosting
This website is hosted by an external provider. The personal data collected on this website is stored on that provider's servers. This is mainly IP addresses, contact-form submissions, and other data generated through use of the website.
External hosting is carried out for the purpose of performing a contract with our prospective and existing customers (Article 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our services by a professional provider (Article 6(1)(f) GDPR). Our hosting provider processes your data only to the extent necessary to fulfil its obligations and follows our instructions regarding this data.
We use the following hosting provider:
Netlify, Inc.
https://www.netlify.com/
4. Legal Basis for Processing
Where you have given consent to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR. Where your data is necessary for the performance of a contract or to take pre-contractual steps, we process it on the basis of Article 6(1)(b) GDPR. Where data is required to fulfil a legal obligation, processing is based on Article 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal basis applicable in each case is explained in the relevant sections of this Privacy Policy.
We do not use your data for automated decision-making or profiling within the meaning of Article 22 GDPR.
5. Recipients of Personal Data
As part of our business activities, we work with various external service providers, which sometimes requires forwarding personal data to them. We only pass personal data to external parties where necessary to perform a contract, where legally required to do so, where we have a legitimate interest under Article 6(1)(f) GDPR in the disclosure, or where another legal basis permits the disclosure.
Specifically, on this website these are the recipients:
- Web3Creative (operator of the "Web3Forms" service used by our contact form) — based in Palakkad, Kerala, India. Receives and processes the content of the form as our processor.
- Amazon Web Services (AWS) — used by Web3Creative for hosting and database storage, and, via its Amazon SES (Simple Email Service), for the outbound delivery of the resulting email itself. In practice, your message travels: contact form → Web3Creative → Amazon SES → your inbox at office@cloudpro.hr, hosted by our email hosting provider, established in Croatia.
- Other sub-processors engaged by Web3Creative: Cloudflare, Inc. — content delivery network, DNS, and security filtering; Hetzner Online GmbH (Germany/Finland) — application infrastructure; CleanTalk Inc. and Automattic Inc. (Akismet) — spam-prevention services, which receive the sender's IP address and email address for that purpose only.
- Netlify, Inc. — hosts the website itself and, as part of normal web server operation, records the IP address of every visitor in its server logs.
We do not sell your data. We do not share it with advertising, marketing, or analytics partners — we do not use any.
6. International Data Transfers
Some recipients listed in Section 5 are located outside the European Economic Area (EEA):
- Web3Creative (India) and its sub-processors located outside the EEA — Amazon Web Services (US-East region), CleanTalk Inc. (US), and Automattic Inc./Akismet (US): this transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our data processing agreement with Web3Creative. SCCs are standard contractual commitments requiring the recipient to protect your data to a standard equivalent to the GDPR, wherever they are located.
- Netlify, Inc. (United States): Netlify is a certified participant in the EU-U.S. Data Privacy Framework, an adequacy mechanism recognised by the European Commission that permits transfers to certified US companies without additional safeguards, because their data protection commitments are considered adequate.
You can request more information about these safeguards, or a copy of the relevant clauses, by contacting us using the details in Section 2.
7. Retention Period
Unless a more specific retention period is stated in this Privacy Policy, your personal data remains with us until the purpose for its processing no longer applies. If you make a justified request for deletion or withdraw consent to processing, your data will be deleted unless we have another legally permissible reason to retain it (e.g. statutory tax or commercial retention periods) — in which case deletion follows once those periods expire.
Specifically, on this website that means:
- Contact-form submissions held by Web3Creative: up to 3 years from submission, after which they are automatically deleted.
- Your message once it reaches our mailbox (office@cloudpro.hr): we keep it for as long as the conversation about your enquiry, and any business relationship arising from it, continues, and after that until applicable statutory retention periods expire. You may request deletion of your message at any time.
- Server logs recording visitor IP addresses at Netlify: in accordance with Netlify's retention practices; further information is available in their privacy policy.
8. Your Rights
Under the GDPR, you have the right to:
- Access (Art. 15) — confirmation of whether we process your data, and a copy of it.
- Rectification (Art. 16) — correction of inaccurate or incomplete data.
- Erasure (Art. 17) — deletion of your data, e.g. once it is no longer needed or you withdraw consent.
- Restriction of processing (Art. 18) — limiting how we use your data in certain situations, e.g. while you contest its accuracy or while it is unclear whether our grounds override yours following an objection.
- Data portability (Art. 20) — receiving data you provided us in a structured, machine-readable format, or having it transmitted directly to another controller, where technically feasible.
- Objection (Art. 21) — at any time, for reasons relating to your particular situation, you may object to processing based on legitimate interest (Art. 6(1)(f)), including related profiling. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
- Withdrawal of consent (Art. 7(3)) — where any part of our processing relies on your consent, you may withdraw it at any time for the future, without affecting the lawfulness of processing already carried out. The contact form itself is based on Article 6(1)(b) and 6(1)(f), not on consent.
- Lodging a complaint with a supervisory authority (Art. 77) — in the event of a GDPR breach, you have the right to lodge a complaint with a supervisory authority in the member state of your habitual residence, place of work, or place of the alleged breach. As our company is established in Croatia, the lead authority is:
Agencija za zaštitu osobnih podataka (Croatian Personal Data Protection Agency), Selska cesta 136, HR-10000 Zagreb · Tel: 00385 (0)1 4609-000 · azop@azop.hr · www.azop.hr
To exercise any of these rights, contact us using the details in Section 2. We will respond within one month, as required by Article 12(3) GDPR, and may ask you to confirm your identity first.
9. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the padlock icon in the address bar. When SSL/TLS encryption is active, data you submit to us cannot be read by third parties.
10. Cookies
Websites generally use so-called "cookies" — small files stored on your device either temporarily (session cookies) or permanently (persistent cookies), which can be technically necessary or used to analyse user behaviour and for marketing purposes.
lolaacoustix.com does not currently set any HTTP cookies and does not use analytics, marketing, or third-party cookies. Your browser only stores two small technical entries (locally, not as classic cookies): lolaCookieConsent, which remembers that you have seen the cookie notice, and lolaSection, which remembers which section of the homepage you were last viewing, for smoother navigation — deleted when you close the browser tab. Neither is shared with third parties or used for tracking. See our Cookie Policy for details.
11. Server Log Files
Our hosting provider (Netlify) automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and IP address. This data is not combined with data from other sources.
Collection of this data is based on Article 6(1)(f) GDPR — we have a legitimate interest in the technically error-free presentation and optimisation of our website, which requires collecting server log files.
12. Contact Form
When you send us an enquiry via the contact form, your details from the form, including the contact information you provide, are stored with us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on without your consent.
Processing of this data is based on Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to taking pre-contractual steps. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries addressed to us (Article 6(1)(f) GDPR).
Technical details of our contact form. When you submit an enquiry through the contact form on our homepage, we collect: your name, email address, company name (if you choose to provide it), and the content of your message. You must actively confirm you have read this Privacy Policy via a checkbox before the form can be sent. The form also includes two hidden technical fields that are not personal data about you: an API key identifying our account with our form-processing provider (Web3Forms), and a fixed subject line used to sort incoming messages. A hidden honeypot field is used only to detect automated spam and stays empty for real visitors. See Section 5 for who receives and processes this data behind the scenes (Web3Forms, AWS, Cloudflare, Hetzner, CleanTalk, Akismet).
Data you enter into the contact form remains with us until you request its deletion, withdraw your consent to storage, or the purpose for storing it no longer applies (e.g. once your enquiry has been fully handled) — see the retention periods in Section 7. Mandatory statutory provisions, in particular retention periods, remain unaffected.
13. Changes to This Policy
We update this Privacy Policy whenever the way we process personal data changes, to keep it accurate. Material changes will be announced on this website.
Last updated on 25 August 2026.