Privacy policy

Who this applies to

This policy describes how we process personal data of visitors to oovala.com and of people who request a demo through it. It does not cover use of the Oovala application itself, which is governed by a separate agreement.

What data we collect

Depending on what you do on the site:

• Demo form: your full name, work email, company name, fleet size and, if you enter them, your phone, whether you use a booking system and your message.
• How you arrived: UTM tags and the referring site. They are kept in your browser's session storage and sent with your request so we know where you came from. They disappear from the browser when you close the tab.
• Technical data: your IP address is processed briefly to protect the form from abuse (a security check and a limit on attempts). We do not store it with your request.
• Analytics: only with your consent, anonymous measurements of how the site is used (the pages you visit and button clicks), with a random identifier stored in your browser. Without consent nothing is measured.

Why and on what basis

• Answering your request and arranging a demo: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Protecting the form from spam and abuse: our legitimate interest (Art. 6(1)(f) GDPR).
• Site analytics: your consent (Art. 6(1)(a) GDPR), which you can refuse or withdraw at any time.

Who processes data for us

Service providers that run the site process data on our behalf. We do not sell your data.

• Cloudflare: serving the site, protecting the form (Turnstile), the database that stores requests and sending the email that tells our team about a new request.
• Slack: an internal notification about a new request, if enabled.
• PostHog (servers in the EU): analytics, only with your consent.

Transfers outside the EEA

Some of these providers may process data outside the European Economic Area. Such transfers rely on the safeguards provided for by the GDPR.

How long we keep data

We keep requests for up to 24 months after our last contact with you, then delete them. If you become a customer, data is processed further on the basis of the contract. You can ask us to delete it at any time.

Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability and to object, and to withdraw consent at any time. Send your request to the controller's email shown on this page.

If you believe we process your data in breach of the rules, you can complain to the Croatian Personal Data Protection Agency (AZOP, azop.hr).

Cookies and browser storage

The site sets no cookies. Session storage holds the UTM tags described above, and local storage remembers your analytics choice. If you accept analytics, local storage also holds a random anonymous identifier that tells visits apart. Refusing or withdrawing consent deletes it.

Changes to this policy

We may change this policy. The date of the last change is shown at the top of the page.