Last updated: 28 June 2026

1. Who we are

Atlas Development d.o.o., Ul. Na rivi BB, Croatia, operates the Atlas portal and the atlas-developers.com website. For privacy questions contact management@atlas-developers.com. This policy explains how we handle personal data and your rights under the EU General Data Protection Regulation (GDPR).

2. Our role: controller and processor

For our website, marketing and the accounts we issue, Atlas is the data controller. For the buyer personal data and selections processed inside a developer's project, the developer is the controller and Atlas acts as processor on the developer's behalf, under our Data Processing Agreement. If you are a buyer and wish to exercise your rights over your project data, you may contact us or the developer responsible for your project.

3. Personal data we process

• Account data — name, email address, optional phone number, username and role.
• Project & selection data — the unit you are assigned to, the finishes and options you choose, prices pinned at selection, and your electronic signature/confirmation when you lock your selections.
• Enquiry data — details you submit through our contact form (name, email, phone, company and your message).
• Documents — selection certificates and reports generated from the above.
• Technical & usage data — IP address, browser/device information, and security and activity logs.

4. Why we process it, and our legal bases

• To provide and operate the portal and your account — performance of a contract (Art. 6(1)(b) GDPR) or the legitimate interests of Atlas and the developer (Art. 6(1)(f)).
• To respond to enquiries you send us — our legitimate interests and steps taken at your request.
• To generate certificates and reports and keep an accurate record of selections — contract and legitimate interests.
• To secure the service, prevent abuse and keep audit logs — legitimate interests.
• To comply with legal obligations (e.g. accounting, lawful requests) — legal obligation (Art. 6(1)(c)).

5. Who we share data with

We share personal data only with: the developer responsible for your project (for buyer/project data); vetted service providers ("sub-processors") who host and run the platform on our instructions; and authorities or advisers where required by law. We never sell personal data. Our current sub-processors include:

• Supabase — database, authentication and backend hosting.
• Cloudflare — hosting, content delivery and security.
• Google (Google Workspace) — email and related communications.
• Web3Forms — delivery of contact-form / enquiry emails.

6. International transfers

We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How long we keep it

We keep personal data while your account or the relevant project is active, and afterwards only as long as needed for the purposes above or to meet legal, accounting and dispute-resolution obligations, after which it is deleted or anonymised.

8. How we protect it

We use encryption in transit, access controls, account isolation (each project and buyer sees only their own data) and activity logging. No system is perfectly secure, but we protect personal data appropriately to the risk (Art. 32 GDPR).

9. Your rights

Subject to the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent where processing relies on consent. To exercise these rights contact management@atlas-developers.com (for buyer/project data we may refer your request to the developer as controller). You may also complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, or your local EU supervisory authority.

10. Cookies and local storage

Our website and portal use your browser's local storage to remember preferences such as language and to keep you signed in. We use only the storage necessary to operate the service; we do not use advertising trackers.

11. Children

The service is intended for business and adult use and is not directed at children.

12. Changes

We may update this policy; the current version is always shown here with its "last updated" date, and we will take reasonable steps to notify you of material changes.

13. Contact

Atlas Development d.o.o., Ul. Na rivi BB, Croatia — management@atlas-developers.com.