Privacy Policy

Introduction

Nocturne Bloom d.o.o. ("we," "our," or "us") operates the nocturne-bloom.com website and provides smart home automation services for hospitality properties. This Privacy Policy describes how we collect, use, and share information about you when you interact with our website or engage our services.

We take your privacy seriously. This document aims to be straightforward about our practices so you can make informed decisions about the information you share with us.

Information We Collect

Information You Provide Directly

When you contact us through email or request information about our services, we may collect:

• Your name and job title
• Email address
• Company or property name
• Business address
• Details about your property and project requirements
• Any other information you choose to include in your communications

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website or source
• Device identifiers

For detailed information about our cookie practices, please see our Cookies Policy.

How We Use Your Information

We use the information we collect for the following purposes:

• Responding to your inquiries and providing information about our services
• Preparing proposals and project documentation
• Managing client relationships and delivering contracted services
• Sending relevant updates about our services (with your consent where required)
• Improving our website and understanding how visitors use it
• Complying with legal obligations and protecting our rights

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on one or more of the following legal grounds:

• Contractual necessity: Processing required to perform a contract with you or take steps at your request before entering a contract
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and marketing to potential clients, provided these interests don't override your rights
• Consent: Where you have given specific consent for particular processing activities
• Legal obligation: Processing necessary to comply with legal requirements

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: We work with third-party companies that help us operate our business, such as website hosting providers and email services. These providers are contractually bound to protect your information.
• Business partners: For certain projects, we may share relevant project information with installation partners or subcontractors who assist with service delivery.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority.
• Business transfers: If our company is acquired or merges with another entity, your information may be transferred as part of that transaction.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:

• Client records and project documentation: 10 years after project completion (for warranty and legal purposes)
• Marketing inquiries: 3 years from last contact, unless you request earlier deletion
• Website analytics data: 26 months

After these periods, we securely delete or anonymize your information.

Your Rights

Under GDPR and Croatian data protection law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request that we limit how we use your data
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

International Transfers

Your information is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit and at rest
• Access controls limiting who can view personal data
• Regular security assessments
• Staff training on data protection practices

While we take reasonable precautions, no method of transmission over the internet is completely secure.

Children's Privacy

Our services are intended for business professionals in the hospitality industry. We do not knowingly collect personal information from individuals under 16 years of age.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy regularly.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Nocturne Bloom d.o.o.
Trg bana Josipa Jelačića 15
10000 Zagreb, Croatia
Email: [email protected]

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) if you believe we have not handled your data appropriately.