Privacy Policy

We process your data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): For sending marketing materials and using analytics cookies.
• Legitimate interest (Art. 6(1)(f) GDPR): For improving our website and services, and preventing misuse.
• Performance of a contract (Art. 6(1)(b) GDPR): For processing your inquiries and providing requested services.

We may share your personal data with:

• Providers of hosting and website maintenance services.
• Google LLC (for Google Analytics and Google Ads) — data is transferred to the USA based on Standard Contractual Clauses (SCC).
• Competent authorities, where required by law.

We do not sell your personal data to third parties.

Some of our service providers are located outside the European Economic Area. In such cases, we ensure an appropriate level of data protection through Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact data from inquiries: 2 years from the last communication.
• Analytics data: 14 months from collection.
• Cookie consent data: 12 months from the date of consent.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: You can request access to the personal data we process about you.
• Right to rectification: You can request correction of inaccurate data.
• Right to erasure: You can request deletion of your data ("right to be forgotten").
• Right to restriction: You can request restriction of processing of your data.
• Right to data portability: You can request transfer of your data in a structured format.
• Right to object: You can object to the processing of your data.
• Right to withdraw consent: You can withdraw consent for data processing at any time.

To exercise these rights, contact us at info@smart-method-lab.com. We will respond to your request within 30 days.

If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with the competent supervisory authority — the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. We regularly review and update our security practices.

We may update this Privacy Policy from time to time. All changes will be published on this page with an updated date. We recommend regularly reviewing this page.