Privacy Policy

This policy explains what personal data TITAN NEXUS d.o.o. processes when you visit titannexus.io or contact us, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Croatian data protection law.

Who is responsible for your data

The controller of your personal data is:

TITAN NEXUS d.o.o.
Avenija Većeslava Holjevca 36, 10010 Zagreb, Croatia
OIB: 90216849596 · MBS: 081569943 (Commercial Court Zagreb)
Email: hello@titannexus.io

We have not appointed a data protection officer, as we are not required to. Please send any privacy question or request to the email address above.

What data we process and why

When you visit this website

When you open a page, your browser automatically sends technical information to our hosting provider, Cloudflare: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system type.

• Purpose: delivering the website to you, keeping it secure and available (for example, protecting it against attacks and abuse), and fixing technical problems.
• Legal basis: our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR).
• Retention: we do not keep our own access logs or build visitor profiles. Cloudflare processes this data on our behalf and keeps it only as long as needed for these purposes.

This website does not use analytics, advertising or tracking tools, and it does not set cookies. Fonts and images are served from our own website, so no third party receives your data when a page loads.

When you contact us

If you email us or contact us through LinkedIn, we process your name, contact details, the content of your message and any information you choose to share.

• Purpose: answering your enquiry and, where relevant, preparing or carrying out a contract with you.
• Legal basis: taking steps at your request before entering into a contract, or performing a contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in responding to messages we receive (Art. 6(1)(f) GDPR).
• Retention: we delete enquiries that do not lead to a business relationship once they are resolved, and no later than 12 months afterwards. If a contract follows, we keep the related correspondence and documents for the periods required by Croatian accounting and tax law.

Embedded videos

Some blog posts contain videos hosted by YouTube (Google Ireland Limited) or Vimeo (Vimeo.com, Inc.). Videos are not loaded automatically: you see a placeholder, and the video is only loaded from the provider when you click “Play”. At that point the provider receives your IP address and browser information, and it may set cookies or similar technologies under its own privacy policy. YouTube videos use Google’s privacy-enhanced mode, and Vimeo videos are requested with “do not track”.

• Legal basis: your consent, given by clicking “Play” (Art. 6(1)(a) GDPR). You can withdraw it at any time by leaving or reloading the page, which stops the video from loading again until you choose to play it.
• More information: Google Privacy Policy · Vimeo Privacy Policy

Links to other websites

Our website links to other sites, such as LinkedIn and the sources cited in blog posts. We are not responsible for how those sites handle your data; please read their privacy policies.

Who receives your data

We only share personal data where necessary for the purposes above:

• Cloudflare, Inc., which hosts and delivers this website, acting as our processor under a data processing agreement.
• Microsoft Ireland Operations Limited (Microsoft 365), which hosts our email and stores correspondence on our behalf as our processor.
• Professional advisers and authorities, such as our accountant or public bodies, where we are legally required to.

We do not sell your personal data or use it for advertising.

Transfers outside the EU

Cloudflare, Microsoft and the video providers may process data in the United States. Where data is transferred outside the European Economic Area, it is protected by an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework, for certified companies) or by the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you and receive a copy (Art. 15).
• Rectification of inaccurate or incomplete data (Art. 16).
• Erasure of your data, where there is no longer a reason for us to keep it (Art. 17).
• Restriction of processing in certain circumstances (Art. 18).
• Data portability, meaning receiving data you gave us in a structured, machine-readable format (Art. 20).
• Object at any time to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21).
• Withdraw your consent at any time, without affecting processing that took place before you withdrew it (Art. 7(3)).

To exercise any of these rights, email us at hello@titannexus.io. We will respond within one month, free of charge. We may ask you to confirm your identity before acting on a request.

Your right to complain

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the alleged infringement took place. In Croatia this is:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
azop.hr · azop@azop.hr

We would appreciate the chance to resolve your concern first, so please feel free to contact us before you complain.

Other information

• Do you have to give us data? No. Browsing the website does not require you to provide any information beyond what your browser sends automatically. If you contact us, we need your contact details to reply.
• Automated decisions: we do not use automated decision-making or profiling.
• Children: this website is intended for businesses and professionals and is not directed at children under 16. We do not knowingly collect data from children.
• Security: the website is served only over encrypted connections (HTTPS), and we limit access to personal data to people who need it.

Changes to this policy

We will update this policy when our website or data practices change. The date at the top shows when it was last updated.