How we collect, use, and share your personal data

About data protection

We are committed to keeping your personal data confidential. We do not sell, rent, or lease your data to third parties, and we will not disclose your personal data to third parties, individuals, government agencies, or companies without a legal basis.

In this Privacy Policy, we inform you about how we handle personal data and what your rights are under the GDPR, the General Data Protection Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

We will handle your personal data in accordance with the fundamental principles of the GDPR. We do not collect more personal data than is necessary, and we process it lawfully, fairly, and transparently. We keep data in a form that permits identification for no longer than is necessary for the given purpose, and that specific purpose is expressly described and justified.

Collection, use, storage, and sharing of your personal data

Most of the personal data we process is provided to us directly by you when you use our services, visit our website, submit an application form, or otherwise communicate with us.

We also receive personal data from other sources, as in the following situations:

When you visit our website or use our services, we automatically collect certain information, such as your IP address (Internet Protocol address), user preferences, cookie identifiers and other unique identifiers, browser or device information, and location information (including approximate location derived from your IP address).

If you apply for a job, we may receive information from the service provider TalentLyft or collect information from LinkedIn or other publicly available sources.

If one of our employees names you as a referral, we may receive certain information so that we can get in touch with you as part of our recruitment process.

Customer relationship management

When you contact us by email or web form about new business, sponsorships, media inquiries, events, or anything else, any personal data contained in your message will be processed as set out in this Privacy Policy for the relevant type of personal data, or as required by law. We process your data on the basis of our legitimate interest, contractual obligation, or our legal obligations.

We will retain your data for the period necessary to resolve your inquiry, for the duration of our (pre-)contractual relationship, and for the period during which we are legally required to retain data on our business partners or other business contacts. Based on our legitimate interest, we may also retain your contact details in order to contact you about possible future projects and offers or to request your feedback.

Promotion and marketing

We offer downloadable content on our website. Before downloading such content, you may be asked to provide your personal data. We will use your email address to send you the requested resources and to collect feedback. Based on our legitimate interest, we may use your email address to contact you about similar content and for direct marketing purposes.

We may use your data to promote and market our services for the period in which we have your consent, as well as for direct marketing and other purposes based on our legitimate interest.

Improving our services through surveys and insights

We may contact you to ask for feedback on your experience with our website, products, and/or services in the form of online surveys, in order to improve and monitor the quality of our services, all based on our legitimate interest. We may also analyze your activity and interactions on our website to improve your user experience or our services.

We use a third-party service, Google Analytics, provided by Google Ireland Limited (“Google”), to collect standard information and details about visitor behavior patterns (e.g. the number of visitors to different parts of our website), in accordance with its privacy policy and terms of use. Google Analytics uses cookies that are stored on your computer, and the data generated by the cookie about your visit is typically transmitted to and stored on a Google server in the US.

To analyze behavior and improve our service, we use the service provider Hotjar. You can find out more about the data processing carried out by Hotjar as a controller here.

International data transfers

When we transfer data to partners based outside the EU, i.e. to third countries, data protection is ensured in accordance with applicable regulations and the guidelines of the European Data Protection Board, together with appropriate supplementary agreements for transfers to third countries. If, according to the European Commission’s assessment, the country to which data is transferred cannot ensure adequate data protection, for example because the service provider is obliged to disclose your data to its public authorities for the purposes of oversight and monitoring, we also take additional measures: we carry out a transfer risk assessment and inform you through this Policy.

If you use social networks to interact with our pages, the social network transfers data to third countries. As controllers, they determine which data they use, for what purpose, and on what legal basis, as well as which cookies they set and what they use them for. You can find out more in their privacy policies:

Your rights

Where permitted by applicable privacy law, you have the right to:

If you have any questions about how we use your personal data, or if you wish to exercise a particular right or resolve a complaint regarding the processing of your personal data, you can contact our Data Protection Officer by email at office@notus.hr.

Supervisory authority and dispute resolution

We do everything in our power to make your experience a pleasant one and to handle your data with the utmost integrity. We will endeavor to resolve reasonable complaints and disputes regarding our use and disclosure of personal data in accordance with this Privacy Policy. If a dispute cannot be resolved through our internal dispute resolution mechanism, individuals may contact or lodge a complaint with an independent dispute resolution body designated to handle complaints and provide appropriate legal redress free of charge. The supervisory authority in the Republic of Croatia is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka), Selska cesta 136.