Privacy
Policy

Effective date: 21 September 2026

1. Who we are

This website (eleganceai.vip) and the services described in it are operated by EleganceAI, 10000 Zagreb, Croatia, (“EleganceAI”, “we”, “us”). We are the data controller within the meaning of the EU General Data Protection Regulation (GDPR).

Contact for all privacy matters: Ured @ EleganceAI.vip.

2. What this policy covers

This policy explains how we process personal data in two situations:

  • when you visit this website or contact us through it, and
  • when we use our internal marketing tools, including the application named “EleganceAI Ads API”, to access Google services (Google Ads, Google Analytics, Google Tag Manager) on behalf of our clients.

3. Website visitors: data we collect

Server logs. Our hosting provider automatically records technical data such as IP address, date and time of access, requested page, browser type and referring page. We use this data to keep the website secure and operational (legal basis: our legitimate interest, Art. 6(1)(f) GDPR). Logs are deleted within a reasonable period, typically 30 days.

Contact form and e-mail. If you contact us, we process the data you provide (name, e-mail address, company, message) to respond to your enquiry and, where applicable, to prepare an offer (Art. 6(1)(b) GDPR, steps prior to entering into a contract). We keep this correspondence for as long as needed to handle your request and for a maximum of 3 years thereafter, unless a contract requires longer retention.

Cookies and analytics. This website uses only cookies that are technically necessary for its operation. We do not use advertising cookies. You can control cookies in your browser settings.

4. Our use of Google user data (Google API Services)

EleganceAI manages advertising and analytics accounts for its business clients. To do so, our internal application “EleganceAI Ads API” connects to Google services through Google’s official APIs, using OAuth 2.0 authorisation granted by the account owner.

What we access. Depending on the authorisation granted, the application may access:

  • Google Ads accounts (scope https://www.googleapis.com/auth/adwords): campaigns, ads, keywords, budgets, conversion settings and performance statistics;
  • Google Analytics properties (read-only scope analytics.readonly): aggregated traffic, conversion and event reports;
  • Google Tag Manager containers (scopes tagmanager.readonly and tagmanager.edit.containers / edit.containerversions): tag, trigger and variable configuration.

We access only accounts that belong to our clients and to which the client has explicitly granted us management access, or accounts that we own. Google Ads and Google Analytics reports contain aggregated statistics; they do not include names or contact details of the people who saw or clicked an advertisement.

Why we access it. To set up, optimise and manage advertising campaigns, to configure conversion measurement, and to prepare performance reports for the respective client (legal basis: performance of our contract with the client, Art. 6(1)(b) GDPR, and our legitimate interest in providing the agreed services, Art. 6(1)(f) GDPR).

How we store and protect it. Data retrieved through Google APIs is stored on company-controlled devices located in Croatia (European Union). Authorisation tokens are kept in protected configuration files, are never published, and access is restricted to authorised EleganceAI staff. Reports derived from this data are shared only with the client whose account they concern.

What we do not do. We do not sell Google user data. We do not share it with third parties other than the respective client and Google itself. We do not use it for advertising unrelated to the client’s own campaigns, for credit assessment, or for training artificial-intelligence or machine-learning models. Individual EleganceAI staff view the data only to provide the agreed services, for security purposes or where required by law.

Limited Use. EleganceAI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and revocation. We keep data obtained through Google APIs for the duration of the client relationship and for up to 12 months thereafter for reporting and accountability purposes, after which it is deleted. An account owner can revoke our application’s access at any time at myaccount.google.com/permissions; revocation takes effect immediately for future API access.

5. Recipients and processors

We share personal data only with:

  • our web hosting provider (for operating this website);
  • Google LLC and Google Ireland Limited, as provider of Google Ads, Google Analytics and Google Tag Manager, when we act on a client’s account;
  • the client to whom the respective account and reports belong;
  • public authorities where we are legally obliged to do so.

We do not sell personal data.

6. International transfers

Google may process data outside the European Economic Area. Such transfers are covered by the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, as described in Google’s own privacy documentation.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, write to Ured @ EleganceAI.vip. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, azop.hr) or the supervisory authority of your EU member state.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access to credentials, and regular local backups. No method of transmission or storage is completely secure; if we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the competent authority and, where required, the affected persons.

9. Children

Our services are directed at businesses. We do not knowingly collect personal data from persons under 16 years of age.

10. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, is always available at eleganceai.vip/privacy-policy/.