Privacy Policy
Last updated: 13 June 2026
Data Controller: Elysium Management d.o.o., Ilica 71, 10000 Zagreb, Croatia. Company ID (OIB): 75993484281. Email: info@elysium-grupa.com, phone: +385 91 606 5188. (hereinafter: "Elysium" or "we")
1. Introduction
Your privacy matters to us. This Privacy Policy explains what personal data we collect through the website elysium-grupa.com, the purposes for which we process it, and what your rights are. We process data in accordance with the General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation.
2. What data we collect
When you contact us through the contact form, we collect: your name and surname, email address, phone number, company name (if you are a legal entity or sole trader), the type of service you are interested in, the content of your message, and how you heard about us. We also automatically collect technical data through cookies (see our Cookie Policy).
3. Purposes and legal bases of processing
We process your form data in order to respond to your inquiry and provide the requested information about our services, based on your consent (Art. 6(1)(a) GDPR) and in order to take steps at your request prior to entering into a contract (Art. 6(1)(b)). We process technical data based on our legitimate interest in the secure and functional operation of the website, or on your consent for non-essential cookies.
4. Recipients of data
We store your form data in our system and forward it to our customer relationship management (CRM) system for the purpose of processing your inquiry. In doing so, we use service providers (processors) who provide us with technical infrastructure (CRM platform, server and email services). We have data processing agreements in place with these providers. We do not sell your data to third parties.
5. Retention period
We retain inquiry data for as long as necessary to process your inquiry and to potentially establish a business relationship, and for no longer than 24 months from the last contact, after which we delete or anonymise it, unless we are legally required to retain it longer.
6. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, data portability, and the right to object. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal. You can submit a request to info@elysium-grupa.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb.
7. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse.
8. Changes
We may update this Policy from time to time. The current version is always published on this page with the date of the last revision.