Privacy notice

This notice explains what personal data we collect on energoloyalty.hr, why, who we share it with and what rights you have. It covers this website. The platform at charger.energoloyalty.hr, used to run chargers and cards, has its own terms of use.

1. Who the controller is

The controller for personal data collected on this site is Appliment d.o.o., Utinjska ulica 19, 10000 Zagreb, Croatia, VAT ID HR32696391835. EnergoLoyalty is a product of that company.

For any question about personal data, write to info@energoloyalty.hr.

2. Who this notice applies to

Visitors to the website and anyone who contacts us through the form, by email or by phone. Guests of venues that use EnergoLoyalty chargers are not covered here — in that relationship the venue (hotel, restaurant, shop) is the controller and Appliment is the processor.

3. What we collect and why

Contact form. Your name and email address, and optionally your company, phone number, type of venue and message. The purpose is to answer your enquiry and, if you ask, arrange a demo. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the box in the form and withdrawable at any time.

Direct contact. If you email or call us, we process the details you give us in order to reply. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f)).

Technical data. This site sets no cookies. We measure visits with Cloudflare Web Analytics, which records the number of page views, your approximate country, the type of browser and the page you arrived from; it stores nothing on your device and does not link your visits across different sites. Your IP address is processed in passing and is not used to identify you. Like any web server, the server that delivers this site may briefly log your IP address and the time of the request for security purposes. We do not use those logs to identify visitors. See the Cookies page for details.

4. Who receives the data

The contents of the contact form are processed by Web3Forms (privacy policy), which delivers them to us by email and acts as a processor in this relationship (Art. 28 GDPR). Our email provider and the hosting provider for this site also technically receive the data.

Visit data is processed by Cloudflare (privacy policy), which acts as a processor in this relationship (Art. 28 GDPR).

We do not sell personal data and do not share it with third parties for marketing.

5. Transfers outside the EU

Where a provider processes data outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses or another mechanism the GDPR allows.

6. How long we keep it

We keep contact-form enquiries for as long as the conversation lasts and a reasonable time afterwards — at most for as long as the purpose you contacted us for still exists. If it leads to a contract, data is kept for as long as accounting and tax law require.

7. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, objection and data portability. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Send requests to info@energoloyalty.hr. We reply within one month at the latest. Details are on the Data protection page.

8. Cookies

This site does not use cookies. See the Cookies page.

9. Changes to this notice

We may amend this notice when the way we process data changes. The version published on this page applies, with the date of the last change at the top.

10. Supervisory authority

If you believe we are infringing your rights, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.