1. Who we are
This website is operated by Skyway Horizon j.d.o.o. (OIB 68902660998), which is the controller of the personal data collected through it. For anything related to privacy, write to [email protected].
2. What this policy covers
This policy covers the StepAnalyser website at stepanalyser.skyway-horizon.com. It does not cover the StepAnalyser app: patient and gait data recorded in the app are processed under separate agreements with the clinics that use it.
3. What we collect
- When you contact us — your name, email address, clinic or organisation (optional), specialty and message. Please don't include patient health information in the form.
- Analytics, only if you accept — Google Analytics records which pages are viewed, how long visits last, the site that referred you, your device and browser type and an approximate location (country or city). Google Analytics 4 does not store IP addresses.
- Technical logs — our hosting provider records requests to the site (IP address, date and time, page requested, browser) to keep it secure and working.
- Your cookie choice — saved in your browser so we don't ask again on every page.
4. Why, and on what basis
- Answering enquiries and preparing demos or pilots — steps taken at your request before a possible contract (GDPR Art. 6(1)(b)) and our legitimate interest in replying to business enquiries (Art. 6(1)(f)).
- Understanding how the site is used — your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Keeping the site secure and available — our legitimate interest (Art. 6(1)(f)).
- Records we must keep by law — legal obligation (Art. 6(1)(c)).
5. Who receives it
- Microsoft (Microsoft Ireland Operations Ltd.) — our email service, Microsoft 365, delivers and stores the messages you send through the contact form.
- Google (Google Ireland Limited) — Google Analytics, only if you accept analytics cookies.
- Our hosting provider — hosts the website and its server logs on our behalf.
We don't sell personal data or use it for advertising. Where a provider processes data outside the EU/EEA, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Enquiries — as long as needed to reply and follow up. If no business relationship follows, we delete them within 24 months, unless the law requires us to keep them longer.
- Analytics — up to 14 months, after which Google Analytics deletes it automatically.
- Server logs — for the limited period set by our hosting provider.
7. Cookies
Analytics cookies are only set after you click Accept analytics. If you decline, no Google Analytics code is loaded at all.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| stepanalyser-consent | This website (browser storage) | Remembers your cookie choice | Until you clear it |
| _ga | Google Analytics | Tells visits from different browsers apart | 2 years |
| _ga_J2HSZDLD3V | Google Analytics | Keeps track of the current visit | 2 years |
You can change your choice at any time: . Withdrawing consent stops analytics and removes its cookies.
8. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it, or delete it;
- restrict how we use it, or object to processing based on legitimate interest;
- send it to you or another organisation in a portable format.
Write to [email protected] — we reply within one month. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or the supervisory authority where you live.
9. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections, access limited to the people who need it, and keeping service credentials out of the public website.
10. Changes and contact
We may update this policy when the website or the law changes; the date at the top always shows the current version. Questions? Email [email protected]. See also our Terms of Use.