1. General Information
obART GRAF d.o.o. za usluge, Ilije Gregorića 47, 10290 Zaprešić, Croatia, VAT ID (OIB): 77042041213 (hereinafter referred to as the Contractor), respects the privacy of its clients, business partners, and users, and processes personal data in accordance with applicable regulations of the Republic of Croatia and Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
This Privacy Policy defines the types of personal data we collect, the purposes and legal bases of processing, the rights of data subjects, and the measures applied to protect personal data.
2. Types of Personal Data We Process
In the course of business cooperation, we may collect and process the following personal and business-related data:
- first and last name
- company or business name
- VAT ID / tax identification number
- registered office address
- email address
- telephone number
- data required for invoicing and accounting
- data required for access to services (hosting, administrative access, etc.)
- project-related communication (emails, ticketing systems, documents)
The Contractor does not process special categories of personal data (sensitive data), unless explicitly required by law.
3. Purpose and Legal Basis of Processing
Personal data is processed exclusively for the purposes of:
- concluding and performing contractual obligations
- delivering contracted services
- communication related to project execution
- compliance with legal and accounting obligations
- protection of the Contractor’s legal and business interests
- technical support and system maintenance
The legal basis for processing may include:
- performance of a contract
- compliance with a legal obligation
- legitimate interest of the Contractor
- consent of the data subject, where applicable
4. Disclosure of Data to Third Parties
For the purpose of delivering contracted services, personal data may be shared with third parties involved in the execution of the project, strictly to the extent necessary.
Such third parties may include, but are not limited to:
- hosting and cloud service providers
- domain and IT service providers
- payment processors
- accounting and administrative service providers
- other technical or business partners involved in service delivery
If personal data is transferred outside the Republic of Croatia or the European Union, the Contractor ensures that such transfers are carried out in compliance with GDPR requirements.
5. Data Retention Period
Personal data is retained:
- for the duration of the contractual relationship
- thereafter, for as long as necessary to comply with legal obligations
- or for the purpose of establishing, exercising, or defending legal claims
Upon expiration of applicable retention periods, data is deleted or anonymized, unless retention is required by applicable law.
6. Rights of the Data Subject
The data subject has the right to:
- request access to their personal data
- request correction of inaccurate or incomplete data
- request erasure of data, where legally applicable
- request restriction of processing
- object to data processing
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing
Requests related to the exercise of data subject rights may be submitted via email to:
[email protected]
7. Data Security
The Contractor applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or destruction.
Access to personal data is granted only to authorized persons, strictly on a need-to-know basis for the performance of contractual obligations.
8. Cookies
The Contractor’s website may use cookies to ensure website functionality, perform analytics, and improve user experience. Detailed information about the use of cookies is available in a separate Cookie Policy.
9. Amendments to the Privacy Policy
The Contractor reserves the right to amend this Privacy Policy in accordance with changes in applicable laws or business processes. Any updates will be published on the Contractor’s website in a timely manner.
10. Contact Information
For any questions regarding the processing and protection of personal data, data subjects may contact:
Email: [email protected]
Company name: obART GRAF d.o.o. za usluge
Address: Ilije Gregorića 47, 10290 Zaprešić, Croatia
ALL RIGHTS RESERVED
These conditions are applied since 24.2.2021.
obART GRAF j.d.o.o. | Court jurisdiction: Commercial court in Zagreb | MBS: 081067579 OIB: 77042041213 | Headquarters: Zaprešić (Grad Zaprešić), Ulica Ilije Gregorića 47 | Share capital: 10,00 HRK | Legal form: Simple LLC (simple limited liability company) / jednostavno društvo s ograničenom odgovornošću | Founders: Andrea Graf