Legal

Cookie Policy

Cookie Policy

Last updated: 1.3.2026.

1. General Information

This Cookie Policy explains how AYMO Ventures Ltd. with its registered seat in Republic of Croatia, Zagreb, Ulica Alexandera von Humboldta 4B, PIN (OIB): 31486520098 ("AYMO Ventures", "we ", "us", "our") uses cookies and similar technologies on https://www.aymoventures.com/, in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data and privacy regulations.

E-mail: gdpr@aymoventures.com

2. What are cookies?

Generally, cookies are small text files that your browser stores on your computer or mobile device when you visit a website. They help websites function properly, improve user experience, and provide information to the website owner.

Cookies enable a website to recognise whether a user has previously visited the website and support its secure and proper functioning. They may be used for various purposes, for example to help prevent misuse, fraud, and spam, to remember user preferences, or to analyse how the website is used. They can provide information on which sections of the website are most frequently accessed, including details of pages visited and the time spent on them. The analysis of such data may be used to improve the functionality of the website and adapt its content in order to enhance the user experience.

For details on how your personal data is handled, refer to our Privacy Policy.

3. Types of cookies

a) Cookies by Duration

Permanent Cookies

Permanent or stored cookies remain on a user's device after the internet browser is closed. They are used by websites to store information such as login credentials, language preferences, or cookie settings, so that users do not have to re-enter them on each subsequent visit. Permanent cookies may remain on a computer or mobile device for several days, months, or even years, until they are deleted or disabled by the user.

Session Cookies

Session cookies, also known as temporary cookies, are deleted from the user's device once the internet browser is closed. They are used by websites to store temporary information, such as the last pages visited on the website or items placed in a shopping cart when visiting an e-commerce website.

b) Cookies by Function

Technical Cookies — Strictly Necessary Cookies (always active)

These cookies are essential for the proper functioning of the website and cannot be disabled in our systems. They are usually set in response to actions made by users which constitute a request for services, such as setting cookie preferences or completing forms. Users may configure their browser to block or alert them about these cookies; however, some parts of the website may not function properly as a result. These cookies do not store any personally identifiable information. Consent is not needed for function of these cookies.

Functional Cookies (may be disabled)

These cookies enable the website to provide enhanced functionality and personalization.

Statistical Cookies (may be disabled)

These cookies enable the recording of visits and traffic sources for the purpose of measuring and improving the performance of the website.

Marketing Cookies (may be disabled)

These cookies are used to track users across websites in order to display targeted advertising.

c) Cookies by Source

First-Party Cookies

First-party cookies are set by the website that the user is currently visiting and may be either permanent or session cookies. These cookies enable the website to store information that will be reused during the user's next visit to the same website.

Third-Party Cookies

Third-party cookies are set by external websites whose content appears on the website being viewed. These cookies enable third parties to track users' activity on the website for marketing purposes.

You can find details and characteristics of all cookies AYMO Ventures uses in the table below.

4. Transfers of Personal Data to Third Countries

In the case of certain cookies, personal data may be transferred outside the European Union (EU) and European Economic Area (EEA). The following data transfers to third countries may occur as follows:

Cookies set by Mapbox, Inc.

Mapbox, Inc. is a company headquartered in the United States of America, 1133 15th St NW, Suite 825, Washington DC 2000 ("Mapbox").

Personal data may be processed by one or more Mapbox affiliates, processors, or service providers in order to operate Mapbox's business — for example, in the United States for account administration and billing. Therefore, personal data may be processed outside of the location from which it was received. Mapbox ensures that the transfer of personal data offers an adequate level of protection and security, for instance by entering into the appropriate agreements that continuously ensure the same level of protective measures as set forth in applicable data protection laws and regulations and certification certification under the EU-US, UK-US, Swiss-US Data Privacy Framework ("DPF"), and, if required, standard contractual clauses or alternative mechanism for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other applicable regulators or legislators. 

Mapbox Privacy Policy is available at the following link.

Cookies set by CookieYes

CookieYes Limited is a company headquartered in the United Kingdom, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW ("CookieYes"). CookieYes will only transfer EU personal data outside of the EEA to: (i) countries deemed by the European Commission to provide an adequate level of protection for EU personal data; or (ii) entities located outside of the EEA with whom standard contractual terms approved for use in the EU which give the transferred personal data the same protection as it has in the EU have been entered into, for example the European Commission's standard contractual clauses for international data transfers, (EU SCCs) or binding corporate rules (BCRs); or (iii) entities located in the USA certified under the EU-U.S. DPF; or (iv) any entity located outside of the EEA that is subject to any other transfer mechanism, bespoke contract, approved code of conduct or certification scheme approved by the European Commission.

CookieYes privacy policy can be found at the following link.

5. Legal Basis for Setting Cookies

The processing activities related to the use of cookies and other storage mechanisms are grounded in the following legal bases:

A. Performance of a Service (Strictly Necessary Cookies)

The use of strictly necessary cookies is necessary for the technical functioning of the website. The use of strictly necessary cookies is justified by the requirement to provide an information society service explicitly requested by the subscriber or user, in accordance with:

  • Article 5(3) of the Directive 2002/58/EC (ePrivacy Directive),

  • Article 43(4) of the Electronic Communications Act (Official Gazette No. 76/22 and 14/24),

and when processing is necessary in order to take actions at the request of the user, in accordance with:

  • Article 6(1)b of The Regulation (Eu) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

These obligatory mechanisms are indispensable for the technical functioning of the website and cannot be disabled. Without them, the website will not function correctly. Therefore, they are placed without requiring prior consent.

B. User Consent (Functional, Statistical, and Marketing Cookies)

The deployment of all other categories of cookies, including Functional, Statistical, and Marketing cookies, is based on the explicit consent of the user, in compliance with:

  • Article 6(1)(a) of the General Data Protection Regulation (GDPR), and

  • Article 43(4) of the Electronic Communications Act (Official Gazette No. 76/22 and 14/24),

Cookies falling into these categories are set on the website only with the user's freely given, specific, informed, and unambiguous consent. The user has the right to grant or withdraw their consent at any time, if it has not already been provided.

6. Management of Cookie Settings

You may alter the cookie preferences that you established during your initial visit to the website at any time by accessing the settings for the most commonly used browsers:

Cookie settings in Internet Explorer

Cookie setting in Safari

Cookie setting in Chrome

Cookie settings in Firefox

Cookie setting in Edge

You can manage your cookie settings in your browser to restrict, block, or delete them, but that may mean that you won't have the best possible user experience.

7. Your Rights Regarding Data Processing

You have the following rights under the GDPR:

  • Right of access — to know what data we hold about you (Article 15 of GDPR).

  • Right to rectification — to correct inaccurate or incomplete data (Article 16 of GDPR).

  • Right to erasure ("right to be forgotten") — to request deletion of your data (Article 17 of GDPR).

  • Right to restrict processing — to limit how your data is used (Article 18 of GDPR).

  • Right to data portability — to receive your data in a structured format (Article 20 of GDPR).

  • Right to object — in certain circumstances, depending on the purposes and the legal basis for processing, you have the right to object to the processing of your personal data (Article 21 of GDPR).

  • Right to withdraw consent — the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) of GDPR).

  • Right not be subject to a decision based solely on automated processing - although we do not use automated decision-making in the processing of personal data, data subjects generally have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them (Article 22 of GDPR).

To exercise these rights, contact us at gdpr@aymoventures.com. We may need to verify your identity before processing your request.

You can read more about how to contact the competent supervisory authorities in the European Union here: https://edpb.europa.eu/about-edpb/board/members_hr.

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with:

Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, HR - 10 000 Zagreb

Telephone: +385 (0)1 4609-000, E-mail: azop@azop.hr, website: http://www.azop.hr