Privacy Policy

This policy explains which personal data we collect when you visit www.panonzg.hr or contact us, why we collect it and what your rights are. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Croatian Act on the Implementation of the GDPR.

1. Data controller

PANON d.o.o.
Horvaćanska cesta 37, 10000 Zagreb, Croatia
OIB / VAT number: HR67721055247
E-mail: panon@panonzg.hr
Telephone: +385 1 3668 573

For any questions about the processing of your personal data or to exercise your rights, contact us at panon@panonzg.hr or by post at the address above.

2. What data we collect and why

Contact form, e-mail and telephone

When you send us an inquiry through the contact form, we process the data you enter: name, company, e-mail address, telephone number and the content of your message. We process the same data when you contact us directly by e-mail or telephone.

  • Purpose: replying to your inquiry, sending offers and information about our products, and preparing or performing a business agreement.
  • Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to inquiries (Art. 6(1)(f) GDPR).
  • Retention: as long as needed to handle your inquiry, and no longer than 2 years after our last communication. If a contract is concluded, data is kept for the period required by tax and accounting regulations.

Messages from the form are sent to us by e-mail and are not stored in a separate database on the website. Providing data is voluntary, but without an e-mail address or telephone number we cannot reply to you.

Website visits (technical data)

When you visit the website, the server automatically records technical data: IP address, date and time of access, the page visited, browser and operating system type.

  • Purpose: displaying the website, protecting it against attacks and misuse, and fixing technical problems.
  • Legal basis: our legitimate interest in a secure and properly functioning website (Art. 6(1)(f) GDPR).
  • Retention: logs are deleted automatically within a short period, as a rule within 30 days, unless they are needed to investigate a security incident.

3. Cookies

This website does not use cookies for analytics, tracking or advertising. Only strictly necessary cookies are used:

  • a security cookie set by our hosting provider to protect the website from malicious traffic,
  • login cookies for the website administration, set only for authorised editors.

Strictly necessary cookies do not require your consent. You can delete or block cookies at any time in your browser settings.

4. Location map

The Contact page shows a map with our location. The map is loaded from OpenStreetMap servers (OpenStreetMap Foundation, United Kingdom), which receive your IP address because it is technically necessary to display the map. OpenStreetMap does not set cookies and does not use the data for tracking or advertising. The European Commission has adopted an adequacy decision for the United Kingdom.

The legal basis is our legitimate interest in showing visitors where we are located (Art. 6(1)(f) GDPR). More information: OpenStreetMap Foundation Privacy Policy.

Fonts and all other website content are loaded from our own server, without connecting to external services.

5. Recipients of data

We do not sell your data or share it with third parties for marketing purposes. Data may only be processed by processors who provide technical services to us, strictly on our instructions:

  • the website and e-mail hosting provider (Plus Hosting Grupa d.o.o., Croatia),
  • the e-mail delivery provider used to deliver messages from the contact form,
  • providers of security solutions that protect the website from attacks.

We may disclose data to competent authorities where required by law.

6. Your rights

Regarding your personal data, you have the right to:

  • access your data and receive a copy,
  • rectification of inaccurate data,
  • erasure (“right to be forgotten”),
  • restriction of processing,
  • data portability,
  • object to processing based on legitimate interest.

You can send a request to panon@panonzg.hr. We will reply without undue delay and at the latest within one month.

If you believe that the processing of your data is unlawful, you have the right to lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr.

7. Data security

The website uses an encrypted connection (HTTPS), and we protect data with appropriate technical and organisational measures against unauthorised access, loss or misuse. We do not carry out automated decision-making or profiling.

8. Changes to this policy

We may update this policy from time to time, for example due to changes to the website or regulations. The current version is always published on this page.

This policy is effective as of 12 November 2026.