Privacy Policy

This Privacy Policy describes how we handle personal data collected through our website and in the course of providing custom software design and development services. By using our website or engaging our services, you acknowledge that you have read and understood this policy.

2.1 Personal data you provide

• Contact information: name, email address, phone number, company name;
• Business information: VAT number, company address, position/title;
• Communication data: messages, inquiries, project requirements;
• Financial information: billing address, invoice details (we do not store payment card details).

2.2 Automatically collected data

• Technical data: IP address, browser type, operating system, device information;
• Usage data: pages visited, time spent, referring website;
• Cookie data: as described in our Cookie Policy.

We process your personal data on the following legal grounds:

We use your personal data to:

• Deliver software design and development services;
• Process payments and manage accounts;
• Communicate about projects and services;
• Send service updates and technical notices;
• Comply with legal obligations (tax, accounting);
• Improve our services and website;
• Market to businesses (with consent or legitimate interest for B2B).

5.1 Service providers

We may share data with trusted providers who help us operate our business — for example cloud hosting and infrastructure, payment processing, accounting, and development tooling — only to the extent necessary to deliver our services.

5.2 Legal requirements

We may disclose your data to comply with legal obligations, court orders, or legitimate government requests.

Some of our service providers may be located outside the EU. Where this is the case, we ensure appropriate safeguards are in place, such as:

• The EU–US Data Privacy Framework for certain US providers;
• Standard Contractual Clauses (SCCs) where required; and
• Adequacy decisions for approved countries.

We retain personal data only as long as necessary for the purposes described in this policy:

You have the following rights regarding your personal data:

• Right of access (Art. 15) — obtain confirmation and copies of your data;
• Right to rectification (Art. 16) — correct inaccurate or incomplete data;
• Right to erasure (Art. 17) — request deletion (“right to be forgotten”);
• Right to restrict processing (Art. 18) — limit how we use your data;
• Right to data portability (Art. 20) — receive your data in a machine-readable format;
• Right to object (Art. 21) — object to processing based on legitimate interests;
• Right to withdraw consent — withdraw consent at any time.

To exercise these rights, contact us at hello@alphaprototype.hr.

We implement appropriate technical and organizational measures, including:

• SSL/TLS encryption for all data transfers;
• Secure password policies and two-factor authentication;
• Regular security reviews and updates;
• Access limited on a need-to-know basis;
• Data backup and disaster recovery procedures.

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.

We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through your browser settings.

Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to review their privacy policies.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on our website.

If you have concerns about our data processing, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency:

Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb
Email: azop@azop.hr
Phone: +385 1 4609 000
Website: azop.hr

For any questions about this Privacy Policy or your personal data, contact:

Alpha Prototype d.o.o.
Ulica Jurja Njavre 31, 10020 Zagreb, Croatia
Email: hello@alphaprototype.hr