Last updated: 1st September 2026
Who we are
Appex d.o.o., Mikulićeva ulica 19, 10000 Zagreb, Croatia (OIB 33141258759) is the controller of the personal data described in this policy. You can reach us at info@appex-tech.com or +385 (1) 2229 508.
What we collect, and why
When you contact us. If you use the contact form or email us, we receive your name, email address, company, whatever you write in the message, and any file you attach. We use it for one purpose: to answer you and, if it goes further, to discuss and deliver work. The legal basis is our legitimate interest in responding to business enquiries, and — once we are working together — the performance of a contract.
When you browse. Our website runs on GoDaddy Websites + Marketing. GoDaddy's built-in analytics records technical information such as pages visited, approximate location, referring site, browser and device type. This is aggregated traffic data, not an attempt to identify you. Where this relies on non-essential cookies, the legal basis is your consent, which you give or refuse in the cookie banner.
We do not run advertising or retargeting pixels, we do not use Google Analytics, and we do not buy or sell personal data.
Who else sees it
We use two service providers, and only for the purposes above:
Both may process data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
We do not share your data with anyone else unless the law requires it.
Client project data
This policy covers our website and the enquiries we receive through it. When we build or operate systems for a client, any personal data inside those systems is processed on that client's instructions, under a separate agreement and, where required, a data processing agreement. In that relationship the client is the controller and Appex is the processor.
How long we keep it
Enquiries that do not lead to work are deleted within 24 months. Contract and accounting records are kept for 11 years, as Croatian accounting law requires. Website analytics is retained according to GoDaddy's own retention periods.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it over in a portable format. You can object to processing based on legitimate interest, and you can withdraw cookie consent at any time.
Write to info@appex-tech.com and we will answer within 30 days. If you are not satisfied, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Changes
If we change this policy we will update the date at the top. Material changes will be announced on this page.
Appex d.o.o.
Mikulićeva ulica 19, 10000 Zagreb, Croatia
+385 (1) 2229 508
© 2026 Appex d.o.o. · OIB 33141258759 · Registered at the Commercial Court in Zagreb, MBS 081637423.