Privacy Policy

Introduction

QuantumBroker d.o.o. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website or use our services.

We are the data controller for the personal information we process. Our registered office is located at Vlaška ulica 66, 52363 Pula, Istria, Croatia. Registration Number: 351647984.

Data We Collect

The data we collect falls into several categories depending on how you interact with our services:

• Contact Information: Name, email address, phone number, and postal address when you contact us or request our services
• Technical Information: IP address, browser type, operating system, referring URLs, and pages visited on our website
• Usage Data: Information about how you use our website, including time spent on pages, clicks, and navigation patterns
• Communication Data: Records of your correspondence with us, including emails, phone calls, and chat messages
• Service Data: Information related to the test preparation platform analysis services you request

How We Use Your Information

We use the personal data we collect for various purposes, and how we use your information depends on the legal basis for processing:

• Service Provision: To provide our test preparation platform analysis and consultation services
• Communication: To respond to your enquiries, provide customer support, and send service-related communications
• Website Improvement: To analyse website usage and improve our user experience and content
• Marketing: To send you relevant information about our services (with your consent)
• Legal Compliance: To comply with legal obligations and protect our legitimate interests

The legal basis for processing your data includes contract performance, legitimate interests, legal compliance, and your consent where required.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with any merger, acquisition, or sale of company assets
• Protection of Rights: To protect our rights, property, or safety, or that of our users or others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of data and the purpose for processing:

• Contact and Communication Data: Retained for up to 7 years for business records and legal compliance
• Website Analytics Data: Typically retained for 26 months as per Google Analytics settings
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Service Data: Retained for the duration of our service relationship plus 3 years for legal purposes

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request access to your personal data and information about how we process it
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on your consent

To exercise these rights, please contact us using the contact information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security
• Incident response procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data unlawfully. In Croatia, the relevant authority is the Croatian Personal Data Protection Agency (AZOP).