This is a translation for information purposes; the Croatian version is legally binding.
This policy applies to the lexeya.com website and the data you leave with us through the forms on the website. Data processing within the Lexeya application itself, for firms that use it, is governed by the service agreement.
1. Controller
The controller of personal data is Tvister Terato d.o.o., Pavlenska put 5, Zagreb, OIB (Croatian ID number) 80373390070 (hereinafter: we). Lexeya is a software solution of Tvister Terato d.o.o.
For any questions about the protection of personal data, you can write to us at info@tvisterterato.hr.
2. What data we collect
Data you send us yourself through the demo or contact form: first name, last name, name of the firm or organisation, email address, phone (optional), number of users, current system (optional), the model you are interested in, and the topic and content of your message.
Technical data sent with an enquiry: IP address, browser type, the page from which the enquiry was sent, and the date and time it was sent. We use this data to protect the forms against misuse.
Visiting the website: like any web server, the server keeps technical access logs (IP address, time, requested page) for security purposes and to resolve technical problems.
Analytics and ad measurement, only with your consent: if you choose “Accept all” or “Analytics only” in the cookie banner, we use Google Analytics 4, and with “Accept all” also Google Ads. Pseudonymised visit data is then collected: pages visited, source of the visit (e.g. a search engine or an ad), device and browser type, approximate location (country, city) and the fact that an enquiry was sent, without its content. Google Analytics 4 does not store IP addresses. Details are on the Cookies page.
3. Purpose and legal basis of processing
| Purpose | Legal basis (General Data Protection Regulation) |
|---|---|
| Responding to an enquiry, arranging and holding a demo, preparing a quote | Steps taken at the request of the data subject prior to entering into a contract, Article 6(1)(b) |
| Protecting the forms against misuse and website security | Legitimate interest, Article 6(1)(f) |
| Automatic confirmation of receipt of an enquiry | Steps taken at the request of the data subject, Article 6(1)(b) |
| Measuring website visits and ad performance (Google Analytics, Google Ads) | Consent, Article 6(1)(a); you can withdraw consent at any time |
We do not use data from enquiries to send newsletters or promotional messages without your explicit consent.
4. How long we keep data
We keep data from enquiries for as long as communication about your enquiry continues. If no cooperation follows, we delete it no later than 24 months after the last communication. If cooperation follows, the data is processed further in accordance with the contract and statutory obligations to retain documentation.
We keep server technical logs for 30 days, unless they are needed to resolve a security incident.
We keep Google Analytics data for 14 months, after which Google deletes it automatically.
5. Recipients of data
We do not sell your data or pass it on to third parties for their own purposes. The data is held on servers we manage, located in data centres in Croatia, Germany and Finland, and in the email system. We do not transfer enquiry data outside the European Economic Area.
If you have consented to cookies, data about your visit is processed by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may also transfer it to the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. More in Google’s privacy policy.
6. Your rights
Under the General Data Protection Regulation, you have the right:
- to access your data and obtain a copy
- to rectification of inaccurate data
- to erasure of data
- to restriction of processing
- to data portability
- to object to processing based on legitimate interest
- to withdraw consent at any time via the “Cookie settings” link in the page footer, without affecting the lawfulness of processing before withdrawal
Send your request to info@tvisterterato.hr. We respond without undue delay, and at the latest within one month.
If you consider that the processing does not comply with the regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).
7. Security
The website runs exclusively over an encrypted HTTPS connection. The forms are protected against automated submission, and only authorised persons with a password have access to the enquiries received.
8. Changes to this policy
We may update this policy. The current version is always published on this page.
Last updated: 5 October 2026