Privacy Policy
Last updated: 13 October 2026
This policy explains how XL Turbine d.o.o. processes personal data when you visit this website or contact us, in line with the EU General Data Protection Regulation (GDPR).
1. Controller
XL Turbine d.o.o., Kninski trg 17, 10000 Zagreb, Croatia · OIB 31251783269
Email: sales@xlturbine.com · Phone: +385 98 417 828
2. Quote and contact requests
When you send a request through the contact form, we process the data you enter: name and company, email address, requested service, engine type, number of nozzles, part number, aircraft registration, your message and whether it is an AOG request. We use this data only to answer your request, prepare a quote and carry out the work (Art. 6(1)(b) GDPR – steps prior to and performance of a contract) and to keep business correspondence as required by law (Art. 6(1)(c) GDPR).
Form submissions are forwarded to our mailbox by the external service FormSubmit (formsubmit.co), which processes the data only to deliver the message to us. Emails you send us directly are processed in the same way.
3. Hosting and server logs
This website is hosted on GitHub Pages (GitHub, Inc., USA). When you open the site, the hosting provider automatically processes technical data such as your IP address, date and time of access and browser type, to deliver the website and protect it against misuse (Art. 6(1)(f) GDPR). Data transfers to the USA are based on the EU–US Data Privacy Framework and/or standard contractual clauses.
4. Video (YouTube)
Our video is embedded in privacy-enhanced mode (youtube-nocookie.com). No connection to YouTube is made until you click Play video. After you click, YouTube (Google Ireland Ltd.) receives data such as your IP address and may set cookies under its own privacy policy. The link Watch on YouTube opens the video on youtube.com.
5. Cookies, analytics and fonts
This website does not use cookies, tracking or analytics tools. Fonts and images are served from our own website; no data is sent to font or image providers.
6. How long we keep data
Requests that do not lead to an order are deleted after 24 months. Data related to orders and invoices is kept for the periods required by Croatian accounting and tax law and by aviation maintenance record-keeping requirements.
7. Your rights
- access to your data and a copy of it,
- rectification of inaccurate data,
- erasure, or restriction of processing,
- objection to processing based on legitimate interest,
- data portability.
To exercise these rights, email sales@xlturbine.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.