1. Who we are

CloudSculpt d.o.o. is a digital transformation and delivery consultancy registered in Croatia, operating across the DACH and CEE regions. We are an EU entity subject to the General Data Protection Regulation (GDPR).

2. What data we collect

We only collect data that you provide to us directly. This includes:

• Your name and email address when you submit the contact form
• Your company name if you choose to provide it
• The message content you submit
• Basic technical data such as IP address and browser type, collected automatically when you visit the website

We do not collect sensitive personal data. We do not use advertising trackers or sell your data to third parties.

3. Why we collect it

We process your data for the following purposes:

• To respond to your enquiry and assess whether there is a potential fit for working together
• To follow up with a proposal or further information if relevant
• To maintain records of business communications as required

The legal basis for processing is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR — our legitimate interest in responding to business enquiries.

4. How long we keep your data

We retain contact form submissions for up to 24 months from the date of your enquiry. If no business relationship follows, your data is deleted after this period. If a business relationship does begin, we retain relevant data for the duration of that relationship and for up to 7 years afterwards as required by applicable accounting and tax law.

5. Third parties

Your contact form submission is processed via Formspree, a third-party form handling service. Formspree stores form submissions on secure servers. You can review their privacy policy at formspree.io.

We do not use Google Analytics, Meta Pixel, or any other advertising or tracking technology on this website.

6. Cookies

This website uses only technically necessary cookies required for the website to function. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. No cookie consent banner is required as a result.

7. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request restriction of processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at ivan.mihalj@cloudsculpt.io. We will respond within 30 days.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

Imprint

Information required under EU and Croatian law: