Privacy Policy

Your privacy and personal data protection are important to us. We are committed to collecting and processing only the data necessary to provide our services.

This Privacy Policy and our GDPR Data Protection Notice describe the same processing: the Privacy Policy is the full notice; the GDPR page highlights EU/EEA legal bases, rights, and cookies in a compact form. If anything ever differs, the more specific or more protective text applies.

Privacy Principles

We follow these principles:

• We collect only necessary data
• We do not use your data for unrelated purposes
• We do not retain data longer than needed
• We do not sell your personal data
• We only share data with trusted service providers when required
• We do not track users without consent
• We implement strong security measures to protect your data

Data Controller

IFIX ELEKTRONIKA, obrt za usluge
Ul. Matice hrvatske 28A
21 000 Split
Hrvatska (Croatia)
Privacy contact: esp32contact@gmail.com

If a Data Protection Officer (DPO) is appointed in the future, DPO contact details will be published here.

Digital Product Context

Our services consist of digital software and related services. No physical products are shipped. All licenses, updates, and add-ons are delivered electronically via email.

What Data We Collect

We may collect the following personal data:

• Email address (required for license delivery and support)
• Name (optional, if provided)

Payment information is processed securely by our payment provider (myPOS). We do not store full payment card details on our servers.

Software Data Collection

The software may collect limited system data ONLY when you explicitly choose to report a bug:

• Operating system
• CPU and RAM info
• App version
• Error logs

This happens only with your consent.

License Verification

To prevent misuse and ensure license validity, the software performs periodic license checks.

This may include:

• Hardware ID (device-based identifier)
• License status
• Last verification timestamp

Legal basis (GDPR Article 6):

• Contract performance
• Legitimate interest (anti-piracy protection)

Suspected license abuse, tampering, or unauthorized sharing may be investigated and reported as described in our Terms of Service.

Purpose of Data Processing

We process your data to:

• Deliver licenses and services
• Provide customer support
• Prevent fraud and misuse
• Improve software performance

Legal Basis (GDPR)

We rely on:

• Contract performance
• Legal obligations
• Legitimate interest
• Consent (for analytics and optional features)

Data Retention

We store data only as long as necessary:

• Customer and order data: up to 7 years (legal obligation)
• License data: duration of license + legal retention
• Support emails: up to 3 years
• Bug reports: up to 90 days

Data Sharing

We do not sell your data.

We may share data with trusted providers (also listed in the GDPR notice):

• Payment processors (myPOS) for checkout and receipts
• Transactional email delivery (Promailer or SMTP you configure on our API host) for license keys and order-related mail
• Website and API hosting (Render and related infrastructure) for license verification and commerce APIs
• Encrypted license database storage and version control (GitHub) as configured for our services
• Static website hosting (Cloudflare Pages or equivalent) for this site
• Analytics providers (Google Analytics) only after cookie consent
• Legal authorities (if required by law)

These providers process data according to their own privacy policies.

International Data Transfers

Your data may be processed outside the EU/EEA by trusted providers. We ensure appropriate safeguards such as GDPR-compliant agreements.

Website Analytics

We use Google Analytics ONLY with your consent.

Data collected may include:

• Page visits
• Device type
• Country (anonymized)

IP anonymization is enabled.

If you reject analytics cookies, no tracking occurs.

Cookies

Non-essential cookies (including analytics) are used only with consent, via the site banner. Technical details and categories are kept in lock-step with our GDPR Data Protection Notice (Cookies & Consent).

Security

We use appropriate technical and organizational measures to protect your data:

• Encrypted connections (HTTPS)
• Secure hosting
• Access control

Your Rights (GDPR)

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

To exercise your rights: esp32contact@gmail.com

We respond within 30 days.

Supervisory Authority

You may file a complaint with:

Croatian Personal Data Protection Agency (AZOP)
https://azop.hr

Marketing

We only send marketing communications if you have given explicit consent. You can withdraw consent at any time.

Policy Updates

We may update this policy to reflect legal or technical changes. We will not reduce your rights under this policy.

Contact

For any questions: esp32contact@gmail.com

Last updated: 15 May 2026