Privacy policy

Controller

The controller is Lionord društvo s ograničenom odgovornošću za informatički inženjering. Company identification is in the imprint; the privacy contact is below.

What we process

On every visit, Cloudflare processes your IP address and technical request data to serve and protect the site. This happens even if you do not use the form or Lio.

The contact form sends your name, email address, message, page language and the country the request came from. We do not ask for sensitive data.

Contact form

We use form submissions to answer enquiries and prepare possible work together. Depending on the enquiry, the legal basis is taking steps at your request before entering into a contract or our legitimate interest in answering business enquiries (Article 6(1)(b) and (f) GDPR).

Cloudflare Turnstile protects the form. It processes IP addresses and technical browser data to verify requests and prevent automated abuse. We do not use it for advertising.

Your message reaches us by email. We do not subscribe you to a newsletter or automatically copy the message into a CRM.

Lio, the site assistant

Lio is an optional assistant for questions about our services. Opening the conversation starts a Turnstile check; your question is sent only when you submit it.

Your question, limited conversation history and page language go to our Worker, which uses Cloudflare Workers AI to compose a reply. They are not sent to the Google Gemini API. We do not store conversations in a database or write their content to application logs.

Cloudflare states that standard Workers AI requests are processed without retaining content after processing and delivering the response, and are not used to train models. Limited security and legal exceptions apply. Cloudflare may retain operational metadata such as request times, usage and error codes. We do not use AI Gateway conversation logging or caching.

The conversation and signed session token are kept in your browser’s sessionStorage, separately per language, so the conversation survives site navigation. They disappear when the tab closes. Your choice to dismiss Lio’s invitation is kept in localStorage until you clear site data. We do not use this storage to track visits.

Our legitimate interest in answering questions and preventing abuse is the legal basis (Article 6(1)(f) GDPR). Do not enter personal or confidential data. If you choose to copy questions into the contact form, only your own questions are copied; you can edit them before sending.

When Lio is unavailable or its daily allowance is exhausted, the rest of the site and the contact form remain available.

Visitor analytics

Additional visitor analytics, including Cloudflare Web Analytics, are currently disabled. Technical and security processing needed to operate the site is described below.

Hosting and processors

Cloudflare provides hosting, Turnstile, Workers AI and email sending and routing infrastructure. Processing may involve transfers outside the European Economic Area under the applicable data processing agreement and appropriate safeguards, including Standard Contractual Clauses.

Delivered email is also held by the provider of our destination mailbox. People responsible for answering business enquiries process its contents.

How long we keep data

We keep business correspondence for as long as the relationship requires and no longer than two years after the last message, unless it leads to a contract or another legal retention obligation applies.

Lio conversations are not stored on our servers. Security logs and operational metadata have separate retention periods under the provider’s configuration and policies. You can contact us to request deletion of data we hold.

Your rights

You may request access, rectification, erasure or restriction of processing and, where applicable, portability, and object to processing. Contact us at the address below; we respond within one month.

You may complain to the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority.

Changes

We publish changes here and revise the last-updated date. We will update this policy before enabling additional analytics or changing the assistant’s provider.

Privacy contact

For questions about the processing of your data, write to: info@lionord.hr