Effective date: 30 September 2026
This policy explains how BYOMIQA collects, uses and protects your personal data when you visit byomiqa.com, send us an enquiry or download our free resources. We process data in accordance with the General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.
1. Data controller
BYOMIQA društvo s ograničenom odgovornošću za savjetovanje u području medicinskih poslova, znanstvenih komunikacija i dodataka prehrani Šestinski Kraljevec 65, 10000 Zagreb, Croatia OIB (VAT ID): 54842598431 · Court registration number (MBS): 081718792 · Company registration number: 06284604 Director: Vedrana Drkelić Email: info@byomiqa.com · Phone: +385 (0) 998700307
For any data protection questions, contact us at info@byomiqa.com.
2. What data we collect and why
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| You send an enquiry via the contact form or email | Name, email, phone (if provided), message content | Responding to your enquiry and arranging cooperation | Legitimate interest and pre-contractual steps (Art. 6(1)(b) and (f) GDPR) | 12 months after last contact. If a contract is concluded, we keep the data for the periods required by accounting and tax regulations. |
| You visit the website or download a free resource | IP address, browser and device type, pages visited | Website security and proper operation | Legitimate interest (Art. 6(1)(f) GDPR) | Briefly, only as long as needed for website security, after which the hosting provider deletes it automatically. |
You can download our free resources without providing your name or email address. We record only the total number of downloads, with no information about who downloaded them.
We do not collect health data through this website. Please do not include it in the contact form. If you complete our self-assessment checklist, your result stays with you and is not sent to us.
3. Who we share data with
We do not sell your data or share it with third parties for marketing purposes. We use trusted service providers who process data only on our instructions and under a data processing agreement:
- MyDataKnox (SETCOR d.o.o.), Croatia: website hosting
Where a provider processes data outside the European Economic Area, appropriate safeguards apply, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
4. Cookies
The website uses only essential cookies required for it to function securely. We do not use analytics or marketing cookies. If we introduce them in the future, we will use them only with your consent and will update this page accordingly.
5. Your rights
You have the right at any time to:
- request access to your data and a copy of it
- request correction of inaccurate data
- request erasure of your data
- request restriction of processing
- object to processing based on legitimate interest
- request transfer of your data to another controller
- withdraw consent, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, email info@byomiqa.com. We will respond within 30 days.
If you believe your rights have been violated, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
6. Data security
We apply appropriate technical and organisational safeguards: encrypted connections (HTTPS), restricted access to data, and trusted service providers.
7. Changes to this policy
We may update this policy from time to time. The current version is always published on this page, together with its effective date.