Legal
Privacy Notice
Version 2.1 · Effective 24 September 2026
This notice explains how we process personal data when you visit digitalapex.ai or book a call through its form. Our product Digital Worker has its own website, with its own privacy notice. If you use the Digital Worker platform itself, the Digital Worker Privacy Policy applies to that: it comes with your contract and is published in every Digital Worker instance.
1.Who we are
Apex Academy d.o.o., trading as Digital Apex, publishes this website and is the controller for the personal data processed through it.
- Company
- Apex Academy d.o.o., trading as Digital Apex
- Registered seat
- Stepinčeva 79, 21000 Split, Croatia
- OIB · VAT ID
- 77296720425 · HR77296720425
- Court register
- Trgovački sud u Splitu, MBS 060446318
- Data protection
- legal@apexacademy.hr, or by post to the registered seat, attn. "Data Protection"
- Everything else
- info@apexacademy.hr
We have not appointed a statutory Data Protection Officer, because our processing does not meet the thresholds of GDPR Article 37. The data-protection contact above is the single point of contact for data-protection questions and rights requests.
2.What we process, why, and for how long
| What | Examples | Why | Legal basis (GDPR) | How long |
|---|---|---|---|---|
| Server logs | IP address, browser type, page requested, time | Keeping the site running and secure, and detecting abuse | Art. 6(1)(f), legitimate interest in a secure website | 14 days, then deleted automatically |
| Call booking form | Name and email, and if you give them your phone number and company; the best time to call, your message | Calling you back or answering your inquiry and, if you ask, preparing an offer | Art. 6(1)(b), steps before a contract; Art. 6(1)(f), legitimate interest in answering | 2 years after our last contact |
| Your answer to the cookie notice | Accepted or declined | Not asking you again | Kept only in your own browser and never sent to us | Until you clear it, see the cookie policy |
When you press Book my call, your request is emailed to our company mailbox, and you receive an automatic confirmation by email.
3.What we do not do
- We run no analytics on this website, and no advertising or cross-site tracking.
- We do not sell or rent personal data.
- We do not build profiles of visitors, and we make no automated decisions about you with legal or similarly significant effects.
- We do not use your messages to train AI models.
4.Recipients and transfers
| Recipient | What and why | Where | Safeguard |
|---|---|---|---|
| Our hosting provider | Runs the server this website and its form are on | Frankfurt, Germany (EU) | Within the EU; no transfer |
| Google (Google Ireland Limited, with Google LLC) | Our company email (Google Workspace), which delivers and stores your request and sends you the confirmation | May be outside the European Economic Area | EU-US Data Privacy Framework and the EU standard contractual clauses in Google's data-processing terms |
Beyond these, personal data reaches only IT service providers bound by confidentiality when they help us run our systems, and authorities where the law requires it. This website links to other sites (yourdigitalworker.com, H-API, LinkedIn); they process data under their own policies.
5.Your rights
Under GDPR Articles 15 to 22 you have the right to:
- Access: receive a copy of the personal data we hold about you.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted, where no legal obligation requires us to keep it.
- Restriction: ask us to pause processing in defined circumstances.
- Data portability: receive the data you gave us in a structured, machine-readable format.
- Objection: object to processing based on our legitimate interest.
- Complaint: lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr) or the supervisory authority in your EU country of residence.
Write to legal@apexacademy.hr. We answer verified requests within one month (Article 12(3)), which can be extended by two further months for complex requests.
6.Security
The site and its form use TLS encryption, and access to your messages is limited to the people who need it. No system is completely secure. If a personal-data breach is likely to put you at risk, we notify the supervisory authority within 72 hours of becoming aware of it (Article 33), and you where Article 34 requires.
7.Children
This website is meant for businesses and is not directed at children under 16.
8.Changes to this notice
When our practices change, we update this notice and the version and date at the top. Earlier versions are available on request. Version 2.1 adds the call booking form, and the website no longer stores a light or dark theme choice.
9.Related documents
- Cookie policy of this website
- Privacy notice and imprint of yourdigitalworker.com
- The Digital Worker Privacy Policy, Terms, Data Processing Agreement and the rest of the platform's legal documents: part of your Digital Worker contract, and published in every instance