Protection of your personal data

01Data controller

The controller of your personal data is:

This Privacy Policy explains which personal data we collect through this website (ti-ki-intelektualne-usluge.hr) and in the course of our accounting services, why we process it, how long we keep it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter: GDPR) and the Croatian Act on the Implementation of the GDPR.

02What data we collect and why

a) Contact form and email

When you send us an enquiry through the form on the Contact page or directly by email, we process your name and surname, email address, telephone number (optional) and the content of your message.

The purpose is to answer your enquiry, arrange a conversation and prepare an offer. The legal basis is our legitimate interest in responding to an enquiry you sent us yourself (Article 6(1)(f) GDPR) and taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

An enquiry submitted through the form is sent from our website directly to info@ti-ki-intelektualne-usluge.hr. Providing the data is voluntary, but without your name, email address and message we cannot reply.

b) Technical server logs

On every visit, the server hosting the website automatically records technical data: IP address, date and time of access, the page requested, the amount of data transferred and the type of browser and operating system. These logs are used solely for the secure and proper operation of the website and for detecting and resolving faults and misuse (legitimate interest, Article 6(1)(f) GDPR). We do not link them to your name.

c) Cookies and browser storage

This website sets no tracking cookies and uses no third-party analytics or advertising tools. All details are set out in our Cookie Policy.

For basic visit statistics we run our own visit counter that uses no cookies or browser storage, does not store IP addresses and does not pass data to external services. Only the page visited, the language, the device type, the source of the visit (e.g. a search engine or an ad) and a daily, non-reversible value from which the visitor cannot be identified are recorded.

d) Client data in the course of accounting services

As an accounting firm, within the scope of the contracted services we process our clients' business, financial and bookkeeping data, including personal data of their employees, management and business partners (for example for payroll, keeping the business books and preparing reports). We process this confidential data exclusively for the purpose of providing the contracted services, with full discretion and in keeping with business secrecy, on the basis of the contract with the client and the statutory obligations arising from it (the Croatian Accounting Act, tax regulations and anti-money-laundering regulations). Where we process data on behalf of and under the instructions of a client, we conclude a data processing agreement with the client in accordance with Article 28 GDPR.

03Who has access to the data

We do not sell, rent or pass your personal data to third parties for marketing purposes.

Access to the data is limited to persons in the company who need it for their work and to service providers who process it on our behalf as processors, on the basis of a contract and our instructions: the website hosting provider (Namecheap, server in the United States) and the email service provider. We disclose data to public authorities (for example the Tax Administration or courts) only where the law requires it.

The Google map on the Contact page is loaded only after you click. Until then no data is sent to Google; by clicking the button to show the map you agree that Google may process your IP address and any cookies in accordance with the Google Privacy Policy.

Links to other websites (TIL-Grad, TIL-Digital, Google Maps) lead to websites of other controllers, whose privacy policies we are not responsible for.

04Transfer of data outside the EU

This website, ti-ki-intelektualne-usluge.hr, is hosted by Namecheap on a server in the United States. The technical server logs described in section 2 b) are therefore processed outside the European Union. This transfer is based on the European Commission's standard contractual clauses, which form part of the contract with the hosting provider.

Form data is not stored on the server; only an irreversible daily hash of the address is kept to limit submissions. The form sends the message from our website directly to info@ti-ki-intelektualne-usluge.hr, and client data is not processed through this website. If you choose to load the Google map or open an external link, that provider processes your data under its own rules, possibly outside the EU as well.

05How long we keep the data

• Enquiries via the form and email: 12 months from receipt of the enquiry, after which we delete them. If a business relationship arises from the enquiry, the data is kept further in line with the contract and statutory periods.
• Technical server logs: for a short time, as long as necessary for security and troubleshooting, at the hosting provider (Namecheap, USA).
• Client data and bookkeeping documentation: for the periods prescribed by the Croatian Accounting Act, tax regulations and anti-money-laundering regulations; once these periods expire, the data is deleted or permanently anonymised.

06Your rights

In relation to the processing of your personal data you have the right:

• of access – to learn whether we process your data and to receive a copy of it;
• to rectification of inaccurate or incomplete data;
• to erasure ("right to be forgotten") where there is no longer a reason for processing;
• to restriction of processing in the cases provided for by the GDPR;
• to object to processing based on legitimate interest;
• to data portability of the data you provided to us, in a structured, machine-readable format;
• to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.

Send your request to info@ti-ki-intelektualne-usluge.hr. We will reply without undue delay and at the latest within one month of receiving the request. To protect your data we may ask you to confirm your identity.

07Supervisory authority

If you believe that our processing of your personal data infringes the regulations, you have the right to lodge a complaint with the supervisory authority:

We would appreciate it if you contacted us first so that we can resolve any issue directly.

08Data security

We apply appropriate technical and organisational protective measures: access to data is limited to authorised persons, client documentation is kept as a business secret, and processors are contractually bound to confidentiality and security.

09Changes to this Policy

We may update this Privacy Policy from time to time, for example because of changes in the regulations or in our services. The version published on this page, with the date of the last update, always applies.