Privacy Policy

Last updated: 14.02.2026.

Dream Target Systems places great importance on protecting your privacy and personal data. This notice explains how we collect, use, store, and protect your data in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller for personal data is the platform provider:

Dream Target, obrt za usluge

Tax ID (OIB): 72330556203

Jurja ves 101, 10000 Zagreb

Email: [email protected]

For any questions regarding personal data protection, you may contact us at the email address listed above.

2. What data we collect

When using our platforms and websites, we may collect the following personal data:

Full name
Email address
Phone number
Company information (name, tax ID, address)
Login and platform usage data (IP address, access time)

3. Purpose of data processing

We use your data exclusively for the purposes of:

Providing and maintaining the platform service
Creating and managing user accounts
Service-related communication (notifications, support)
Fulfilling legal obligations
Improving service quality and user experience

4. Data isolation and security

Our platforms use Row Level Security (RLS) policies for complete data isolation between users. Your data is encrypted in transit (TLS) and at rest. We apply appropriate technical and organizational measures to protect against unauthorized access, loss, or misuse.

Data from one user is never accessible to another user. Isolation is enforced at the database level through security policies.

5. Your rights

In accordance with GDPR, you have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of your data (right to be forgotten)
Restrict the processing of your data
Transfer data to another service provider (data portability)
File a complaint with the Personal Data Protection Agency (AZOP)

6. Data retention period

Your data is retained for as long as necessary to fulfill the purpose for which it was collected, or as required by law. After you stop using the platform, data is deleted within 30 days, unless legal obligations require longer retention.

7. Sharing data with third parties

We do not sell or share your data with third parties, except when necessary for providing the service (e.g., hosting infrastructure provider — Supabase) or when legally required. All our partners are obligated to protect data in accordance with GDPR.

8. Contact

For any questions, requests, or exercising your rights regarding your personal data, contact us at: [email protected]

Dream Target Systems reserves the right to modify this privacy notice. All changes will be published on the platform website in a timely manner.