Privacy Policy

2. Principles of personal data processing​

2.1. Trust

We want to be a reliable partner to Users in protecting their privacy and to justify the trust they place in us. We also want to be fully transparent and clear about the processing of Users’ personal data. This is one of the purposes of this Policy, particularly through the User’s active role in managing data. Users may always contact us to request changes to personal data concerning them or to state the purposes for which they do or do not wish their data to be processed.

2.2. Lawfulness and best practice

We process personal data in accordance with the law, while always striving to apply higher standards and best European practice.

2.3. Purpose limitation

We collect and process personal data only for a specific, lawful purpose and do not further process it in a manner incompatible with the purpose for which it was collected, unless otherwise provided by law or based on the user’s consent.

2.4. Data minimisation

We always use only User data that is appropriate and necessary to achieve a particular lawful purpose, and no more data than that.

2.5. Processing in a non-identifiable form

Whenever possible and justified, we use data in a non-identifiable form. Such data primarily means anonymous data. However, whenever possible and justified, particularly to protect Users’ personal data, we pseudonymise personal data: through specific pseudonymisation procedures (e.g. substitution, hashing, etc.), we “mask” it so that it cannot be linked to an individual User without additional information kept securely and separately (e.g. the use of a key).

2.6. Integrity and confidentiality

We process personal data securely, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage (for example, only authorised persons who need access to users’ personal data for their work have such access, not other employees).

2.7. Quality of personal data

We attach great importance to the quality of the data we process. Personal data must be accurate, complete and up to date to ensure maximum protection of Users’ data and prevent possible misuse. It is therefore important that Users notify us of any changes immediately or as soon as possible.

2.8. Storage limitation

We store and process Users’ data only for as long as needed to fulfil a particular legitimate purpose, unless applicable regulations provide for a longer or shorter retention period for a particular purpose, or in other cases expressly prescribed by law. After that, the data is permanently deleted or anonymised.

4. Types of personal data we collect​

Depending on the contracted service or product, the User’s consents and the purpose for which particular data is used, Računovodstvo.HR is authorised to collect the types of User data listed below. We always collect only data necessary to achieve a particular lawful purpose. Service request forms also indicate which data is mandatory for entering into a contract; providing other data is voluntary.

4.1. Contract data

Contract data, in a broader sense, includes master data, i.e. data the User has provided for the purpose of entering into and performing a contract.

4.2. Usage data

Usage data, in a narrower sense, arises automatically through the use of individual Računovodstvo.HR services and products because it is necessary to provide the service. It includes, for example: electronic communications traffic data (e.g. the date, time and duration of communication, the calling and called numbers, signalling, the device’s approximate location, information about the user’s device, the volume of data traffic used and IP address), data about how services are used, and Users’ habits when using Računovodstvo.HR products and services.

4.3. User communications with Računovodstvo.HR

For example, Users’ written or electronic communications with Računovodstvo.HR, communications with Računovodstvo.HR on social media, etc.

For example, data about views of the YouTube channel, posts on other social networks and similar information.

4.5. Data about Potential Users

This data includes master data, particularly contact details (e.g. first and last name, email address), as well as a Potential User’s interest in Računovodstvo.HR services. As a rule, Računovodstvo.HR records data about Potential Users who contact it wishing to receive information and/or an offer for particular products and/or services. Potential Users’ data is deleted or anonymised at their request.

6. Combining personal data​

Where necessary, we combine a User’s personal data relating to a particular Računovodstvo.HR service or product with the same User’s personal data relating to other Računovodstvo.HR services and products. We do so for the purposes stated above and in compliance with the stated legal bases, to obtain more accurate information about Users’ needs and habits and ultimately provide optimal support, services and/or products.

Where necessary, we process a User’s personal data together with other Users’ data. Such processing generally relies on fully anonymous data or the User’s explicit consent to processing a particular type of data. Only exceptionally does it rely on Računovodstvo.HR’s legitimate interest, and then only if the data is pseudonymised.

When entering into a contract, Računovodstvo.HR processes User data to assess the User’s profile in terms of their ability to meet future obligations. Accordingly, it decides whether to enter into a contract or request additional payment security for that purpose, all in accordance with specific regulations.

8. Cookies​

To provide Users and visitors with better functionality and more interesting content when visiting our websites or our partners’ websites, and to create services and offers meeting Users’ needs and wishes, we use cookies and/or other common techniques (hereinafter: cookies) that collect certain User data (e.g. the IP address used to access the website, connection time, etc.). Users receive detailed information about the cookies used by each website on their first visit. Based on this information, the User gives or withholds consent to cookie use when visiting the website. Cookie settings can always be adjusted in the browser. Računovodstvo.HR is not responsible for cookies on other websites it does not own. We combine information about the User obtained through cookies with other User data to understand the User better and provide a better user experience only on the basis of consent.

Social media

Računovodstvo.HR publishes users’ personal data on social networks only with their consent. Personal data is published on social networks only when running prize games through those networks. A user wishing to participate will be informed of the conditions for using personal data for participation. Such data will not be used for other purposes. The type of personal data collected for prize games is the minimum set necessary to run each game. Personal data will be used for the purposes defined above only upon acceptance of the participation terms. The user may withdraw consent to participation at any time, and the data provided will be deleted.

10. Where personal data is processed​

We generally process Users’ personal data in the Republic of Croatia. Exceptionally, we also process it in other countries (e.g. when a subcontractor from another country is engaged to provide a service or part of a service involving personal data processing), normally European Union Member States. Exceptionally, we also process it in other countries, but always ensuring appropriate personal data protection at least equivalent to processing in the Republic of Croatia (e.g. through the EU Standard Contractual Clauses for Processors in Third Countries).

12. User rights (rectification, erasure, objection, access, restriction of processing, portability)​

In addition to their active role in managing consents, i.e. the right to give and withdraw consent at any time, Users also have the following active roles, all in accordance with applicable regulations:

1. a)
   right to object: the User may request at any time that promotional notices about Računovodstvo.HR services and products stop. The User may also object to any other processing of their data based on Računovodstvo.HR’s legitimate interest, including profiling based on those provisions (opt-out). In that case, Računovodstvo.HR will not process data for those purposes unless otherwise provided by law.
2. b)
   obligation to safeguard credentials: the User must keep all identifiers assigned by Računovodstvo.HR (e.g. username, password, etc.) confidential and exercise due care, because all actions taken using the User’s identifiers are considered the User’s own actions. The User must also change their password or other access credentials immediately upon suspecting unauthorised use and notify Računovodstvo.HR if they suspect misuse of their identifiers.
3. c)
   right of access: the User may obtain confirmation as to whether their personal data is being processed and, if so, access to that data and information about the purposes of processing, categories of personal data, recipients or categories of recipients, the envisaged storage period or criteria used to determine it, the existence of Users’ rights, the existence of automated decision-making including profiling, information about the logic of processing and its significance and envisaged consequences, and safeguards where data is transferred to third countries.
4. d)
   right to erasure: the User may obtain the erasure of personal data concerning them without undue delay and subject to the conditions set out in applicable data protection regulations.
5. e)
   right to rectification: the User may obtain the rectification of inaccurate personal data concerning them.
6. f)
   right to data portability: the User may receive the personal data concerning them that they have provided to Računovodstvo.HR in a structured, commonly used and machine-readable format and transmit that data to another controller where processing is based on consent or a contract and is carried out by automated means. Where technically feasible, the User may have the data transmitted directly from Računovodstvo.HR to another controller.

14. Amendments, additions and transitional provisions of the Policy​

The Privacy Policy enters into force and applies to users from 25 May 2018. It is available on Računovodstvo.HR’s website and at its business premises. Users will be notified of any amendments and additions in a timely manner, including through publication on Računovodstvo.HR’s website.