Legal information

Privacy Policy

Last updated: May 27, 2026

Protection of your personal data is important to us. This Privacy Policy explains how Terra Lab Pharma processes personal data when you visit our website, use our contact form, or communicate with us by email.

01

Minimal cookies

We use only cookies and technologies necessary for operation and security.

02

No analytics tracking

No Google Analytics, marketing cookies, social plug-ins, YouTube embeds or ad pixels.

03

Contact form only

We process contact form data only to respond to your inquiry.

04

Security protection

Google reCAPTCHA protects the form from spam and automated misuse.

01

Controller

The controller responsible for the processing of personal data is:

Terra Lab Pharma d.o.o.
Laniste 22
10000 Zagreb
Croatia

Email: office@terra-lab.com
Telephone: +385 (01) 485 4112

We have not appointed a Data Protection Officer. For any privacy-related request, please contact us at office@terra-lab.com.

02

Personal data we process

We process personal data only where this is necessary for operating the website, responding to your inquiry, protecting the website from misuse, or complying with legal obligations.

Website access and server logs

When you visit our website, certain technical data may be automatically processed by our web server or hosting provider. This may include:

  • IP address
  • date and time of access
  • requested page or file
  • browser type and version
  • operating system and device information
  • referrer URL, where available
  • server response status and error logs

We process this data to display the website, maintain its security and stability, prevent abuse, diagnose technical issues, and ensure proper operation.

Server log data is retained only for a limited period necessary for security, maintenance, and troubleshooting, unless a longer retention period is required to investigate misuse or comply with legal obligations.

03

Necessary cookies

Our website uses only cookies and similar technologies that are necessary for the website to function properly, maintain security, enable contact form protection, or remember technical settings required for the service you request.

We do not use analytics cookies, marketing cookies, remarketing cookies, or social media tracking cookies.

Necessary cookies do not require consent where they are strictly required to provide the website or a service requested by the user. You can configure your browser to block or delete cookies, but some parts of the website may not function properly if necessary cookies are disabled.

04

Contact form and email communication

If you contact us through the contact form or by email, we process the personal data you provide to us. This may include:

  • name
  • email address
  • message content
  • company name, if provided
  • any other information you voluntarily include in your message

We use this data only to review and respond to your inquiry, communicate with you, and manage business-related correspondence.

Contact form and email data is retained for as long as necessary to handle the inquiry and related communication, and for up to 24 months after the last communication, unless a longer period is required by law or necessary for the establishment, exercise, or defense of legal claims.

05

Google reCAPTCHA

We use Google reCAPTCHA to protect our contact form and website from spam, automated submissions, and other forms of misuse. reCAPTCHA helps us verify whether an interaction is made by a human user or by an automated system.

When reCAPTCHA is used, Google may process technical information such as IP address, browser and device information, interaction behavior, and other data required to provide the security check. reCAPTCHA may also use cookies or similar technologies that are necessary for this security function.

Provider

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Depending on the circumstances, data may also be processed by Google LLC and other Google affiliates. Transfers to countries outside the European Economic Area may take place in accordance with Google's applicable transfer safeguards, such as the EU-US Data Privacy Framework and/or Standard Contractual Clauses where applicable.

The use of reCAPTCHA is subject to Google's Privacy Policy and Google's Terms of Service.

06

Google Search Console

We use Google Search Console to monitor and maintain the website's presence in Google Search results. Google Search Console helps us understand technical indexing issues, search visibility, and how our website appears in Google Search.

Google Search Console does not place tracking cookies on our website and is not used by us to identify individual website visitors. The information made available to us is provided by Google and is generally aggregated or technical in nature.

When you use Google Search, Google may process personal data under its own privacy policy. Our use of Google Search Console does not add Google Analytics, marketing tracking, or advertising pixels to our website.

07

Recipients and service providers

We may share personal data with trusted service providers only where necessary for the purposes described in this Privacy Policy. These may include:

  • website hosting providers
  • email and IT service providers
  • website maintenance providers
  • Google, for reCAPTCHA and Google Search Console
  • professional advisers, where necessary
  • public authorities, courts, or regulators where legally required

Service providers process personal data only as necessary to provide their services and, where required, under appropriate data processing agreements.

International transfers

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place as required by GDPR. These safeguards may include adequacy decisions, the EU-US Data Privacy Framework, Standard Contractual Clauses, or other lawful transfer mechanisms.

08

Your rights

Under the GDPR, you may have the following rights in relation to your personal data:

  • the right to access your personal data
  • the right to request correction of inaccurate or incomplete data
  • the right to request deletion of your personal data
  • the right to request restriction of processing
  • the right to object to processing based on legitimate interests
  • the right to data portability, where applicable
  • the right to withdraw consent, where processing is based on consent

To exercise your rights, please contact us at office@terra-lab.com.

We may need to verify your identity before responding to a request. We will respond within the time limits required by applicable data protection law.

09

Right to lodge a complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

Supervisory authority in Croatia

Croatian Personal Data Protection Agency (AZOP)
Selska cesta 136
10000 Zagreb
Croatia

Website: https://azop.hr

10

No automated marketing profiling

We do not use your personal data for automated marketing profiling, remarketing, behavioral advertising, or personalized advertising campaigns.

Google reCAPTCHA may perform an automated security assessment to help determine whether a contact form interaction appears legitimate or automated. This assessment is used only for website security and spam prevention.

11

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, legal requirements, or data processing practices. The latest version will always be available on this website.