Skip to main content

Privacy Policy

This Privacy Policy ("Policy") outlines how Amphinicy d.o.o., located at Ulica Damira Tomljanovića – Gavrana 15, 10 000 Zagreb, acts as the data controller (hereinafter referred to as "Data Controller"). This Policy describes how we collect, use, and manage your personal data on our website www.amphinicy.com (the "Website"). It applies to the main domain, www.amphinicy.com, as well as our subdomains: blink.amphinicy.com and monica.amphinicy.com (collectively referred to as “the Website”).

We operate in accordance with applicable data protection legislation, particularly the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”). As the provider of services through the Website, the Data Controller is committed to protecting and respecting your privacy. We encourage you to read this Policy carefully to understand the nature of the personal data we collect, how we utilize it, and your rights in relation to that data.

If you have any questions regarding this Policy or your personal data, please contact us at:
Name: Amphinicy d.o.o.
Address: Ulica Damira Tomljanovića – Gavrana 15, 10 000 Zagreb, Croatia
Phone: +385 1 4852 814
Email:

Circumstance of Personal Data Collection

We collect various categories of personal data, including your full name, email address, company name, and any other information you provide when accessing our Website, filling out forms, or communicating with us via phone or email.

Your personal data may be collected in the following circumstances to fulfill your needs or for legitimate business purposes:

  • Website Acces: Your IP address is recorder when you visit our Website
  • Inquiries: When you fill out forms, we collect your full name, and contact details to respond to your requests. Additionally, your IP address is recorded for security reasons
  • Technical Information: We gather data such as access times, page clicks, and technical details (browser, hardware, operating system) to enhance Website functionality.
  • Social Media Engagement: We collect the information you share when interacting with us on social platforms.
  • Product Demonstration Requests: When you request a product demonstration, we collect various pieces of information to facilitate the process, including your full name, email address, phone number, and company name. Additionally, we may ask for your address, city or town, state or province, ZIP or postal code, and country. This helps us understand your needs and provide you with the best possible service.
  • Job Applications: For recruitment purposes, we gather your full name, contact information, work permit status, CV, and cover letter.
  • Informational Materials: We may send you newsletters and informational content if you subscribe or based on previous interactions.
  • Manufacturing Contracts: Personal data is processed to meet contractual obligations, comply with legal requirements, and protect our legitimate interests.
  • Legal Compliance: We handle personal data as required by law to respond to inquiries and requests.

 

The specific categories of your personal data are collected either based on the consent presented via a pop-up window upon visiting www.amphinicy.com, or based on legitimate interest, such as Necessary Cookies for Website functionality or notifications sent to existing clients.

Consent through the pop-up window is renewed after 12 months from your last acceptance or rejection of specific cookies.

If we must fulfill our obligations under Croatian regulations, we will not process data based on the legal basis of fulfilling your guaranteed rights under the GDPR.

Please note the mandatory data we request; if you do not provide the required information, you may not be able to engage in certain activities as these may not be technically feasible without the requested data.

The purposes of data collection include:

  • Utilizing all services on www.amphinicy.com
  • Responding efficiently to your inquiries and processing your requests
  • Statistical data processing
  • Direct marketing – sending notifications, offers, and communication
  • Improving content quality, functionality, and services
  • Security

 

Your Privacy Rights

You have the right to request the following from the Data Controller at any time:

Rights Regarding Personal Data Description
Access to Personal Data You may ask what personal data we hold about you and request access to that data. You have the right to know the purpose of processing, categories of personal data stored, entities with whom your data is shared, retention period, and source of data if collected indirectly.
Copy of Personal Data You can request a copy of some or all personal data we hold.
Correction of Incorrect Data If your data is incorrect, outdated, or incomplete, you can request that we correct it. We will ensure any inaccuracies are rectified promptly.
Deletion of Personal Data (Right to be Forgotten) You may request to cease processing or delete personal data we hold about you. If the data is necessary for fulfilling contractual obligations or legal requirements, your request may not be fulfilled.
Restriction of Data Processing If you contest the accuracy of your data or oppose the processing, you can ask us to restrict its use. During this period, we will not process the data until the issue is resolved.
Objection to Data Processing You have the right to object to the processing of your personal data based on a legal basis deemed legitimate by the Data Controller.
Data Portability If you have given consent for data processing, you can request that we transfer your personal data to another service provider in a machine-readable format.

To exercise these rights, contact us at . We will respond to your request within 30 days and ensure your data is protected during the process. In some cases, we may request identity verification to protect your privacy.

If you think your data protection rights have been breached, you may lodge a complaint with your national Data Protection Authority (DPA).

Data Storage

We store the personal data we collect from you in a secure environment. Your personal data is protected against unauthorized access, disclosure, use, alteration, or destruction by any organization or individual with whom we collaborate.

Processing Location Description
Paper Format Some data may still be stored in paper format; however, all personal data is primarily processed in digital format. Any data stored in paper format will be securely destroyed once it has been digitized.
Data Controller Premises Data processing and storage occur within the physical premises of the Data Controller, as well as through secure cloud services. Our cloud providers comply with applicable data protection regulations, ensuring that all personal data is stored and processed securely.
IT Systems of the Data Controller Digital data is stored and processed through the following internal IT systems.
Servers of Trusted Service Providers Data may also be securely stored and processed on servers provided by external trusted service providers.

Data Sharing Practices

Amphinicy d.o.o. collaborates with other companies, which means that in this context, we sometimes share your personal data using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with EU legislation.

Amphinicy d.o.o., as the data controller, may transfer personal data outside the EU if it is necessary for the execution of a contract between our company and the data processor and/or another data controller or to fulfill legal obligations. In the latter case, personal data is transferred outside the European Economic Area only to countries that provide an appropriate level of protection, and this is done through contract models containing binding provisions (standard contractual clauses and additional measures) or through binding corporate rules; or in accordance with an approved certification mechanism and/or a privacy shield framework adopted by the European Commission – Adequacy Decisions.

In addition to the above, we may share your personal data with our affiliate office based in Luxembourg (EU), Amphinicy Luxembourg Sàrl, to help provide comprehensive services and support. Both offices adhere to the same data protection standards outlined in this policy to ensure your data remains secure and compliant with legal requirements. We do not share personal data with third-party entities beyond those specified in this policy without your prior consent unless required by law.

We conduct an annual review of all our partners to ensure that the protection of your personal data remains at the required level and is in compliance with applicable regulations.

Social Media Platforms

Additionally, we use business profiles on services such as Facebook, X, YouTube, and LinkedIn, which may collect personal data like your IP address, browsing history, and interactions with our profiles. You can review their respective privacy policies to understand how they process your data:

 

Data Transfers Outside the EU

Our policy does not apply to third-party services, which operate under their own privacy policies. However, in line with applicable data protection regulations, Amphinicy d.o.o. is obliged to inform users about any personal data that might be collected by these services when engaging with us through their platforms.

Please note, as these services are not based in the European Union, they may transfer your data to the United States, where it could be subject to U.S. legal requirements, including possible access by intelligence services. While we strive to protect your data, we cannot fully control how these third parties process it. We encourage you to review their privacy policies and manage your data through the privacy settings they provide.

Use of Google Analytics

Our Website uses Google Analytics to collect and analyze general data to improve user experience and optimize site performance. Google Analytics gathers information such as shortened IP addresses, device and browser types, and interaction data on our site. This data is collected using cookies and other tracking technologies, but it does not identify individual users.

To comply with GDPR, we have enabled IP anonymization, which means that IP addresses are shortened before processing or storage, ensuring no user can be identified. This data collection is based on our legitimate interest in improving Website functionality and user experience. While Google may store this data on servers outside the EEA, it follows EU data protection standards through approved safeguards.

You have the right to object to this data processing, and if you prefer, you can prevent data collection by Google Analytics by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

For more information about Google’s privacy practices, please see the Google Privacy Policy.

Use of Google ReCAPTCHA

To protect our forms from spam and misuse, we use Google reCAPTCHA, which verifies that submissions are made by real people, not automated bots. Google reCAPTCHA analyzes information such as IP addresses, user behavior (like mouse movements), and click patterns to differentiate genuine users from bots. This processing is based on our legitimate interest in maintaining the security and integrity of our services.

Google reCAPTCHA may store this data on servers outside the EEA; however, Google has committed to meeting EU data protection standards through approved safeguards. By submitting a form, you agree to this data collection for security and anti-spam purposes. If you prefer not to consent, you can contact us directly through other available channels listed on our Website.

For more information on Google reCAPTCHA and its data practices, please refer to Google’s Privacy Policy and Terms of Service.

Retention of Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Specific retention periods include:

  • Cookies: We store out cookie preferences for one year before asking for renewal.
  • Job Applications: We retain personal data collected during the recruitment process for six months following a negative hiring decision, after which it is securely deleted. For hired candidates, application data is incorporated into the employee record and retained per our internal data retention policy.
  • Marketing Communications: Your contact details will be stored for the duration of your subscription to our marketing content. If you unsubscribe, your data will be deleted within 30 days.

 

For any specific inquiries regarding retention periods, feel free to contact us at .

Cookies

We use cookies on our website to enhance your browsing experience and analyze site traffic. Cookies are small text files stored on your device when you visit our site. We utilize both essential cookies, which are necessary for the proper functioning of the site, and non-essential cookies, which require your explicit consent. Non-essential cookies include those used for performance and analytics purposes.

For more detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy. You have the right to withdraw your consent at any time by adjusting your cookie preferences in your browser settings, or using the options provided in our cookie consent banner at the bottom of the page.

Communication with Our Office

Should you contact our office directly or via any available communication channels, we will require your contact information to address the inquiry or issue you present. The data you provide will be used solely for this purpose. /p>

Links to Other Websites

The Website may contain links to third-party websites. Please be advised that this privacy policy apply exclusively to our Website. We recommend reviewing the privacy policies of any third-party websites you visit.

Data Breach Notification

In the unlikely event of a data breach that compromises your personal data, Amphinicy d.o.o. is committed to notifying both you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by the GDPR. This notification will include:

  • A description of the nature of the breach and the types of data affected
  • The likely consequences of the breach
  • Measures we have taken or plan to take to address the breach and minimize its impact

 

If the breach poses a high risk to your rights and freedoms, we will inform you directly with steps you can take to protect yourself.

Effective Date and Amendments to the Privacy Policy

This Privacy Policy shall take effect upon its publication on www.amphinicy.com. The Data Controller reserves the right to amend this policy at any time by publishing a revised version on this Website. The amended policy will be effective immediately upon publication.

This Privacy Policy was last revised in November 2024.