Privacy
Privacy Policy
Controller
Studio Dom d.o.o., Brune Bušića 22, 10000 Zagreb, Republic of Croatia · OIB 70214267226
Contact for privacy questions: info@srtcloud.eu
1. What data we collect
When you create an account and use SRTCloud on app.srtcloud.eu we process:
- Account data: name and e-mail address, and your password (stored only in protected, hashed form).
- Billing data (when you pay): full name, e-mail, phone number, country, city, postal code and address — needed for the payment and the invoice.
- Order and invoice data: purchased packages, coupons, dates, amounts and invoices.
- Service data: your servers and their settings (for example destinations), server status and traffic used, needed to run and bill the service.
- Technical log data: like any web server, our servers record technical access data such as IP address, time of the request and browser information, for security and to keep the service running.
We do not store payment card data. Card payments are processed by CorvusPay; card details are entered directly into the CorvusPay payment form and never reach our systems. CorvusPay processes the data needed for the card payment under its own rules (see "Security of online payments" in the Terms and Conditions).
The public website srtcloud.eu does not use forms, analytics or advertising tools and does not collect personal data, apart from technical server logs.
2. Why we process the data (legal basis)
- To create your account, provide the service, process payments and communicate with you about your orders — performance of the contract (Art. 6(1)(b) GDPR).
- To issue and keep invoices and accounting records — legal obligation (Art. 6(1)(c) GDPR).
- To protect the service against misuse and attacks (technical logs) — legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for advertising and we do not sell it.
3. Who receives the data
- Hetzner Online GmbH (Germany, EU) — hosting of the website, the application and the SRT servers, as our processor.
- CorvusPay — processing of card payments; it receives the billing data needed for the payment.
- Notifications from the application are sent only to our own address info@srtcloud.eu.
Apart from these, we do not pass your data to anyone, unless we are obliged to do so by law (for example to tax authorities).
Your data is stored and processed in the European Union.
4. How long we keep the data
- Account and service data: as long as your account exists; after you ask us to delete the account, it is deleted unless we must keep it by law.
- Billing data, invoices and accounting records: for the period required by Croatian accounting and tax law.
- Technical logs: only for a limited period needed for security and operation.
5. Cookies and local storage
The website srtcloud.eu does not set cookies. The application app.srtcloud.eu stores a login token in your browser's local storage so that you stay signed in; it is technically necessary and is removed when you log out. No tracking or advertising cookies are used. See also the Cookie Policy.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to data portability. To use these rights, write to info@srtcloud.eu; we will answer within 30 days.
You also have the right to lodge a complaint with the supervisory authority in Croatia: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
7. Security
Access to the application is protected by encrypted connections (HTTPS). Personal data is accessible only to persons who need it to provide the service.
8. Changes
We may update this Privacy Policy when the service changes. The current version is always published on this page.