Last updated: September 2026

1. Introduction

NORVARIS, obrt za razvoj softvera i digitalne usluge, trading as Norvaris (“Norvaris”, “we”, “us”, or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit norvaris.com or contact us through our website.

2. Data Controller

The data controller responsible for your personal data is:

NORVARIS, obrt za razvoj softvera i digitalne usluge
Owner: Bojan Zlatanović
Ozad Arene 1, 52100 Pula, Croatia
OIB: 94999560219
Email: hello@norvaris.com
Phone: +385 97 6123744

3. Information We Collect

3.1 Information You Provide

We may collect:

  • Name and surname
  • Email address
  • Phone number (if provided)
  • Message content via contact forms
  • Project or business-related information

3.2 Information Collected Automatically

We automatically collect:

  • IP address
  • Browser type and device information
  • Pages visited and time spent
  • Referring URLs
  • Interaction data

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and analyse website performance.

4.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They help us recognise your browser and remember certain information.

4.2 Types of Cookies We Use

  • Essential cookies – required for basic website functionality
  • Analytics cookies – help us understand how visitors interact with our website

4.3 Google Analytics

We use Google Analytics, provided by Google, to analyse website traffic and usage.

Google Analytics collects data such as:

  • pages visited
  • time spent on pages
  • device and browser information
  • approximate location

This data is aggregated and does not directly identify you.

4.4 Cookie Consent

When you first visit our website, you will be asked to consent to the use of non-essential cookies.

You can:

  • accept all cookies
  • reject non-essential cookies
  • change your preferences at any time

4.5 Managing Cookies

You can control cookies through your browser settings.

Disabling cookies may affect certain functionalities of the website.

5. How We Use Your Information

We use your data to:

  • Respond to inquiries and contact requests
  • Provide and manage our services
  • Improve website performance and user experience
  • Understand how visitors find and use the website
  • Ensure website security
  • Comply with legal obligations

6. Legal Basis for Processing (GDPR)

We process personal data based on:

  • Consent (non-essential cookies)
  • Legitimate interest (analytics, security, website improvement)
  • Contract and pre-contractual steps (answering your enquiry, preparing an offer, delivering a project)
  • Legal obligation

7. Data Sharing

We do not sell your personal data.

We may share data with:

  • Hosting providers
  • Analytics providers (Google)
  • Email and communication tools

These providers act as our processors and are bound by written data processing agreements. We do not give them permission to use your data for their own purposes.

8. Data Retention

We retain personal data only as long as necessary:

  • Contact inquiries: up to 24 months
  • Client data: duration of contract + 36 months
  • Analytics data: according to provider policies
  • Invoices and accounting records: for the period required by Croatian tax and accounting law

9. Your Rights

Under GDPR, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent

To exercise your rights, contact:
hello@norvaris.com

You also have the right to lodge a complaint with the Croatian supervisory authority, the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

10. Data Security

We implement appropriate security measures, including:

  • HTTPS encryption
  • Access control
  • Secure hosting infrastructure

However, no system is completely secure.

11. International Data Transfers

Your data may be transferred outside the EU — for example to Google servers in the United States.

Where that happens, the transfer relies on the safeguards required by the GDPR — an adequacy decision such as the EU-US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission.

12. Third-Party Links

Our website may contain links to third-party websites.
We are not responsible for their privacy practices.

13. Children’s Privacy

Our services are not intended for individuals under 16.
We do not knowingly collect data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time.
Changes will be posted on this page.

15. Contact

For any questions regarding this Privacy Policy:

NORVARIS, obrt za razvoj softvera i digitalne usluge
Ozad Arene 1, 52100 Pula, Croatia
OIB: 94999560219 · VAT: HR94999560219
Email: hello@norvaris.com
Phone: +385 97 6123744
Website: norvaris.com

For business information, please see our Impressum page.