1. Data Controller
Cloud d.o.o.
Ulica Dragutina Rakovca 3, 42000 Varaždin, Croatia
OIB: 92781041318 · Court registration number (MBS): 070119811
Registered with the Commercial Court in Varaždin, business registration number Tt-14/3840-2
Represented by: Andrijana Mađarić, Managing Director
Contact for data protection matters: office@cloudpro.hr · +385 91 401 0786
For general business inquiries not related to data protection, you can also reach us at office@cloudpro.hr.
2. What Personal Data We Collect and Why
Contact form. When you submit an enquiry through the contact form on our homepage, we collect: your name, email address, company name (if you choose to provide it), and the content of your message. You must actively confirm you have read this Privacy Policy via a checkbox before the form can be sent. The form also includes two hidden technical fields that are not personal data about you: an API key identifying our account with our form-processing provider, and a fixed subject line ("LEAD-preko web stranice") used to sort incoming messages. A hidden honeypot field is used only to detect automated spam and stays empty for real visitors.
We use the contact form for this purpose only. This website has no newsletter sign-up, does not ask for your date of birth, home address, city, postal code, or phone number, and does not use the data collected here for marketing.
Technical data (server logs). Like virtually every website, ours runs on hosting infrastructure that automatically records basic technical information for every visit — such as your IP address, browser type, and the page requested — to operate and secure the website. This happens for every visitor, regardless of whether you use the contact form. See Section 4 for who operates this infrastructure.
3. Legal Basis for Processing
We rely on the following legal bases under Article 6(1) GDPR:
- Contact form (name, email, company, message): primarily Article 6(1)(b) — processing necessary to take steps at your request prior to entering into a contract, since submitting the form means asking us for a quote or information about our products. We additionally rely on Article 6(1)(f) — our legitimate interest in handling enquiries efficiently. The checkbox you tick before submitting confirms that you have been informed about this processing; it is not itself the legal basis for it.
- Technical/server log data: Article 6(1)(f) — the legitimate interest of ourselves and our hosting and security providers in keeping the website operational, secure, and protected against abuse.
We do not use your data for automated decision-making or profiling within the meaning of Article 22 GDPR.
4. Who We Share Your Data With
Your data may be shared with the following recipients, strictly for the purposes described above:
- Web3Creative (operator of the "Web3Forms" service used by our contact form) — based in Palakkad, Kerala, India. Receives and processes the content of the form as our processor.
- Amazon Web Services (AWS) — used by Web3Creative for hosting and database storage, and, via its Amazon SES (Simple Email Service), for the outbound delivery of the resulting email itself. In practice, your message travels: contact form → Web3Creative → Amazon SES → your inbox at office@cloudpro.hr, hosted by our email hosting provider, established in Croatia.
- Other sub-processors engaged by Web3Creative: Cloudflare, Inc. — content delivery network, DNS, and security filtering; Hetzner Online GmbH (Germany/Finland) — application infrastructure; CleanTalk Inc. and Automattic Inc. (Akismet) — spam-prevention services, which receive the sender's IP address and email address for that purpose only.
- Our email hosting provider, established in Croatia — hosts the office@cloudpro.hr mailbox where your message finally arrives.
- Netlify, Inc. — hosts the website itself and, as part of normal web server operation, records the IP address of every visitor in its server logs (see Section 2).
We do not sell your data. We do not share it with advertising, marketing, or analytics partners — we do not use any.
5. International Data Transfers
Some recipients listed in Section 4 are located outside the European Economic Area (EEA):
- Web3Creative (India) and its sub-processors located outside the EEA — Amazon Web Services (US-East region), CleanTalk Inc. (US), and Automattic Inc./Akismet (US): this transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our data processing agreement with Web3Creative. SCCs are standard contractual commitments requiring the recipient to protect your data to a standard equivalent to the GDPR, wherever they are located.
- Netlify, Inc. (United States): Netlify is a certified participant in the EU-U.S. Data Privacy Framework, an adequacy mechanism recognised by the European Commission that permits transfers to certified US companies without additional safeguards, because their data protection commitments are considered adequate.
You can request more information about these safeguards, or a copy of the relevant clauses, by contacting us using the details in Section 1.
6. How Long We Keep Your Data
- Contact-form submissions held by Web3Creative: up to 3 years from submission, after which they are automatically deleted.
- Your message once it reaches our mailbox (office@cloudpro.hr): we keep it for as long as the conversation about your enquiry, and any business relationship arising from it, continues, and after that until applicable statutory retention periods expire. You may request deletion of your message at any time.
- Server logs recording visitor IP addresses at Netlify: in accordance with the retention practices of our hosting provider (Netlify, Inc.); further information is available in their privacy policy.
7. Data Stored in Your Browser (Cookies)
lolaacoustix.com does not set any HTTP cookies. Your browser only stores two small technical entries:
- lolaCookieConsent (localStorage) — remembers that you have seen and acknowledged the cookie notice, so it does not reappear on every visit.
- lolaSection (sessionStorage) — remembers which section of the homepage you were viewing, for smoother in-page navigation; deleted automatically when you close the browser tab.
Neither entry contains personal data, is shared with anyone, or is used to track your activity. For full details, see our Cookie Policy.
8. Your Rights
Under the GDPR, you have the right to:
- Access (Art. 15) — confirmation of whether we process your data, and a copy of it.
- Rectification (Art. 16) — correction of inaccurate or incomplete data.
- Erasure (Art. 17) — deletion of your data, e.g. once it is no longer needed or you withdraw consent.
- Restriction of processing (Art. 18) — limiting how we use your data in certain situations, e.g. while you contest its accuracy.
- Data portability (Art. 20) — receiving data you provided us in a structured, machine-readable format, or having it transmitted to another controller, where technically feasible.
- Objection (Art. 21) — objecting to processing based on legitimate interest, including the legitimate-interest component of the contact form and the processing of technical/server log data.
- Withdrawal of consent (Art. 7(3)) — where any part of our processing relies on your consent, you may withdraw it at any time for the future, without affecting the lawfulness of processing already carried out. Note: the contact form itself is based on Article 6(1)(b) and 6(1)(f), not on consent — ticking the checkbox confirms you have read this notice, it does not itself constitute the legal basis for processing your enquiry.
To exercise any of these rights, contact us using the details in Section 1. We will respond within one month, as required by Article 12(3) GDPR, and may ask you to confirm your identity first.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. As our company is established in Croatia, the lead authority is:
Agencija za zaštitu osobnih podataka (Croatian Personal Data Protection Agency)
Selska cesta 136, HR – 10 000 Zagreb
Tel: 00385 (0)1 4609-000 · Fax: 00385 (0)1 4609-099
Email: azop@azop.hr · Web: www.azop.hr
If you are resident in another EU/EEA member state, Article 77 GDPR also entitles you to lodge a complaint with your own national supervisory authority.
10. Security
We use HTTPS/TLS encryption for all traffic to and from this website, so data submitted through the contact form is encrypted in transit before it reaches our processors.
11. External Links
This website links to external services — Google Maps, Facebook, Instagram, LinkedIn, the Croatian data protection authority (AZOP), and All About Cookies — that open only when you actively click them. We do not embed or auto-load any of these services, and no data is sent to them merely by visiting our website.
12. Changes to This Policy
We update this Privacy Policy whenever the way we process personal data changes, to keep it accurate. Material changes will be announced on this website.
Last updated on 22 August 2026.