Who we are
Kingfisher Software d.o.o. is the data controller for personal data collected through this website. Our full registration details (registered seat, OIB, registration court) are in the footer of every page.
To exercise any of the rights described below, write to us through the contact form on this site. We reply within 30 days, as required by GDPR.
What we collect
We only collect personal data that you actively give us, plus minimal technical information needed to operate the site.
Contact form. When you fill in the contact form, we collect your name, email address, and the message you write.
Estimator. When you use the price estimator, we collect your answers (project type, feature count, design needs, deployment, timeline) and an optional project description. If you click "Discuss My Project" after seeing the estimate, we additionally collect your name and email address.
Server logs. Our hosting provider records standard web-server logs (IP address, user agent, request URL, timestamp) for security and abuse prevention.
Anonymous usage analytics. We record anonymous browser family, page path, time on page, and scroll depth. These are not linked to any name, email, or persistent identifier and are used only in aggregate. We do not use Google Analytics or any third-party advertising tracker.
Cookies. We use a single browser-storage entry called cookie_consent to remember whether you accepted or declined cookies. That is the only cookie or storage entry we set.
Why we use it
Contact-form messages and estimator submissions are processed to reply to your inquiry and prepare a quote. The legal basis is pre-contractual measures (GDPR Art. 6(1)(b)).
Server logs and aggregate analytics are processed for site security, abuse prevention, and improving the site. The legal basis is our legitimate interest (GDPR Art. 6(1)(f)).
The cookie-consent storage entry is set to honour your stated preference.
Sub-processors
We use the following third-party services to run the site. Each processes a limited subset of the data above on our behalf, under a written data processing agreement.
Mailjet (Mailjet SAS, France) delivers contact-form submissions to our inbox.
Google Gemini API (Google LLC, United States) generates the price-estimate text from your estimator answers. Transfers to the United States are covered by Standard Contractual Clauses approved by the European Commission.
Plus Hosting d.o.o. (Croatia) hosts the website. Plus Hosting is established in the EU, so no third-country transfer mechanism is required.
We do not sell or rent personal data to anyone.
Retention
Contact-form messages and estimator submissions are kept for 12 months from your last contact with us, then deleted. Server logs are kept for 30 days. Aggregate analytics retains no per-visit personal data.
If we are required by law to keep some data longer (for example, accounting records under Croatian tax law), we keep only what the law requires and only for the period the law requires.
Your rights
Under GDPR you have the right to access the data we hold about you, have inaccurate data corrected, have your data deleted, restrict our processing, receive your data in a portable format, object to processing based on legitimate interest, and withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us through the contact form on this site.
You also have the right to lodge a complaint with the Croatian data protection authority:
Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb
azop@azop.hr · +385 (1) 4609 000
Changes to this policy
If we materially change how we handle personal data, we will update this page and revise the "Last updated" date at the top. The current version is always at this URL.