Privacy Policy

Last updated: 15 January 2026

1. Introduction

BlueOrbitix d.o.o. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your personal information when you visit our website (blueorbitix.world) or use our investment finance volatility management services. We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and Croatian data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is BlueOrbitix d.o.o., a Croatian limited liability company registered at Ulica kneza Mislava 54, 10675 Zagreb, Croatia. Registration Number: 835468712, VAT Number: HR83254671298. For any privacy-related enquiries, please contact us at privacy@blueorbitix.world.

3. Data We Collect

We may collect the following types of personal data from you:

  • Contact Information: Name, email address, phone number, postal address, company details
  • Communication Data: Records of your communications with us, including emails, phone calls, and meeting notes
  • Technical Data: IP address, browser type, operating system, referring URLs, pages visited, time spent on pages
  • Financial Information: Information about your investment portfolio, risk tolerance, financial objectives (only when providing services)
  • Marketing Data: Your preferences for receiving marketing communications and your communication preferences
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy

4. How We Use Your Information

We use your personal data for the following purposes, based on legitimate interests, contractual necessity, or your consent:

  • Service Provision: To provide investment finance volatility management services, assess your requirements, and deliver customised solutions
  • Communication: To respond to your enquiries, provide customer support, and maintain our business relationship
  • Website Functionality: To ensure our website functions properly and provide you with relevant content
  • Legal Compliance: To comply with legal obligations, regulatory requirements, and industry standards
  • Business Operations: To manage our business operations, including administration, risk management, and quality assurance
  • Marketing: To send you relevant marketing communications about our services (with your consent where required)
  • Analytics and Improvement: To analyse website usage, improve our services, and develop new offerings

5. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as providing customer support, improving our services, and maintaining security
  • Legal Obligation: Processing necessary to comply with legal or regulatory obligations
  • Consent: Where you have given specific consent for certain processing activities, such as marketing communications or non-essential cookies

7. Data Sharing and Disclosure

We may share your personal data with the following parties:

  • Service Providers: Third-party vendors who provide services on our behalf, such as IT support, website hosting, and analytics services
  • Professional Advisors: Legal advisors, accountants, and other professional service providers
  • Regulatory Authorities: When required by law or to comply with regulatory requirements
  • Business Transfers: In connection with any merger, sale, or transfer of our business assets

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Generally, we retain contact and communication data for up to 7 years after our last interaction, financial service data for up to 10 years as required by financial regulations, and website analytics data for up to 26 months. We regularly review and delete data that is no longer necessary.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

10. Your Rights

Under GDPR and Croatian data protection law, you have the following rights:

  • Access: Request access to your personal data and information about how we process it
  • Rectification: Request correction of inaccurate or incomplete personal data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request restriction of processing in certain circumstances
  • Portability: Request transfer of your personal data to another controller
  • Objection: Object to processing based on legitimate interests or for marketing purposes
  • Withdraw Consent: Withdraw consent where processing is based on consent
  • Complaint: Lodge a complaint with the Croatian Personal Data Protection Agency or other relevant supervisory authority

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us at:

BlueOrbitix d.o.o.

Privacy Officer

Ulica kneza Mislava 54, 10675 Zagreb, Croatia

Email: privacy@blueorbitix.world

Phone: +385 1 123 5720

We will respond to your enquiries within 30 days as required by applicable law.