Privacy Policy

This Privacy Policy explains how Tunnel Branch processes personal data in connection with its website and related business activities. It applies to visitors, prospective clients, and other individuals who interact with the site.

Policy guidance

This section introduces how personal information, user rights, and support pathways are addressed in the document below.

Use of information
Handled under this policy framework
User rights
Requests and access options are described below
Support channel
Why we process data

Purposes of Processing

We process personal data to operate and maintain the website, respond to inquiries, provide requested services, manage business relationships, support security and fraud prevention, analyse site performance, improve functionality, maintain records, and comply with legal and contractual obligations. Where required, we also use data to manage consent choices and to communicate policy or service updates.

Note
We use personal data only for defined operational and compliance purposes.
Third-party sharing

Sharing with Partners

We may share personal data with service providers, hosting and infrastructure partners, analytics providers, professional advisers, and other operational vendors that assist with website administration, communications, security, business support, or service delivery. These parties may process data only for the purposes we specify and under appropriate confidentiality and data protection obligations.

Note
Recipients are limited to parties that support our operations or provide services on our behalf.
Privacy Contact

Contact Information

Privacy email
Telephone
+385 92 673 6550
Mailing address
Cesta doktora Franje Tuđmana 96, 21217 Kaštela
Privacy inquiries

Subject to applicable law, you may have rights to access your personal data, correct inaccurate information, request deletion, object to certain processing, and request restriction or portability in appropriate cases. Some requests may be limited where we must retain information for legal, contractual, or security reasons.

Available rights may vary depending on the legal basis and the nature of the request.

To exercise your rights, submit a clear request using the contact details in this policy and describe the data or action concerned. We may ask for information needed to confirm your identity and to locate the relevant records. If we cannot fully comply, we will explain the reason where required by law.

We may need to verify identity before acting on a rights request.

We keep personal data only for as long as it is needed for the purpose for which it was collected, including service delivery, recordkeeping, dispute handling, security, and legal compliance. When data is no longer required, we delete it or anonymise it, unless a longer retention period is required or permitted by law.

Retention is based on the purpose of collection, legal obligations, and operational need.

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the services we provide. When changes are material, we will take reasonable steps to make the updated policy available and, where appropriate, provide additional notice through the website or other suitable channels.

We review this policy from time to time and record the effective date of material revisions.
GDPR
EU framework

GDPR Overview

Where the GDPR applies, we process personal data on a lawful basis such as consent, performance of a contract, compliance with legal obligations, legitimate interests, or other grounds permitted by law. We apply data minimisation, purpose limitation, and storage limitation principles in our handling of personal data.

For users in the European Economic Area, the General Data Protection Regulation may apply to our processing of personal data.

This section is intended for individuals whose data is processed under GDPR rules.
GDPR Rights

GDPR Rights

Where applicable, you may request access, rectification, erasure, restriction, portability, or objection to processing. If processing is based on consent, you may withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with a competent supervisory authority.

GDPR rights are available subject to the conditions and exceptions set out in law.

Data handling overview

How information is collected and how cookies are managed

01 · Collection

Data We Collect

We may collect identification details, contact details, account or inquiry content, technical data such as device and browser information, usage data, and cookie-related identifiers. In a business context, this may also include information submitted for project discussions, service delivery, support, billing, or compliance purposes.

The categories collected depend on how the site is used and which features are requested.
02 · Sources

Sources of Data

We receive personal data when you submit forms, communicate with us, request information, or otherwise interact with the website. We also collect certain data automatically through logs, cookies, and similar technologies, and we may receive limited information from service providers or business partners involved in operating the site or delivering services.

Information may come directly from users, from automated systems, or from business interactions.
03 · Cookies

Types of Cookies

The site may use strictly necessary cookies, functional cookies, and analytics cookies. Necessary cookies support core operation and security. Functional cookies remember settings and preferences. Analytics cookies help us understand how the site is used and improve content, navigation, and performance. Where required, non-essential cookies are used only with appropriate consent.

We use a limited set of cookie categories for operation, analytics, and preference management.
04 · Controls

Cookie Controls

You can usually block or delete cookies through your browser settings. If the site provides a cookie preference tool, you may use it to adjust non-essential cookies. Some cookies are necessary for basic site functions and may not be disabled without affecting performance or availability.

Cookie choices can be managed through browser settings and, where available, site controls.