1. Introduction
This Privacy Policy explains how Festina Technology d.o.o. ("Festina", "we", "us") processes personal data when you visit festina.ai (the "Website") or use the Festina.ai platform (the "Service"). We are committed to protecting your privacy and processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Croatian data protection law.
2. Data we collect
Data you provide to us directly:
- Contact details (name, work email, company) when you submit a demo or contact form
- Content of your message and any information you choose to share with us
- Account credentials and profile information when you register for the Service
Data collected automatically:
- Technical data such as IP address, browser type, device information and pages visited
- Usage data within the Service (features used, queries submitted — never used to train public AI models)
Customer content: documents and data you connect to or upload into the Service. This content remains yours; we process it solely to provide the Service and never use it to train public AI models.
3. Purposes and legal basis
- Responding to inquiries and demo requests — legitimate interest / pre-contractual steps (Art. 6(1)(b), (f) GDPR)
- Providing and improving the Service — performance of a contract (Art. 6(1)(b) GDPR)
- Security, fraud prevention and legal compliance — legitimate interest and legal obligation (Art. 6(1)(c), (f) GDPR)
- Product analytics (aggregated) — legitimate interest (Art. 6(1)(f) GDPR)
4. Data storage and infrastructure
The Service is hosted on Microsoft Azure infrastructure. Customer data is stored in the jurisdiction or region selected to align with the laws and regulatory requirements applicable to your organisation. Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards (such as EU Standard Contractual Clauses) are in place.
5. Data sharing
We do not sell personal data. We share data only with:
- Service providers (processors) acting on our behalf under data processing agreements — e.g. cloud hosting (Microsoft Azure), email delivery, analytics
- Authorities where required by law or to protect our legal rights
6. Data retention
We retain personal data only for as long as necessary for the purposes described above: contact inquiries are kept for up to 24 months; account and Service data for the duration of the contract plus any legally required retention period. Customer content can be deleted at any time upon request or contract termination.
7. Your rights
Under the GDPR you have the right to:
- Access, rectify or erase your personal data
- Restrict or object to processing, and data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Croatian Data Protection Agency (AZOP) or your local supervisory authority
To exercise any of these rights, contact us at contact@festina.ai.
8. Cookies
The Website uses only strictly necessary cookies required for its operation, and privacy-friendly, aggregated analytics. We do not use advertising or third-party tracking cookies.
9. Security
We apply enterprise-grade technical and organisational measures: encryption of data in transit and at rest, strict access controls mirroring your permission model, audit logging and infrastructure on Microsoft Azure. Details are available on our Security page.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page, and material changes will be communicated to registered users.
Last updated: 26 July 2026