Privacy policy

Data controller

Automatika i procesi d.o.o., Bubnjaračka 28, 10090 Zagreb, OIB 53772112509. For any questions about personal data protection and to exercise your rights: aip (at) aip.com.hr, tel. +385 1 381 7760.

What data we process and why

Data	Purpose	Legal basis	Retention period
Contact form: full name, email, phone, company, content of the enquiry	Replying to the enquiry, quotation and communication relating to the enquiry	Steps taken at your request prior to entering into a contract (Art. 6(1)(b)); for general enquiries, the legitimate interest in replying to the enquiry (Art. 6(1)(f))	24 months from the last contact, then automatically deleted; if the enquiry leads to a contract, the data becomes part of the business records subject to statutory retention periods
Job applications: CV, contact details, information in the application	Candidate selection	Steps prior to entering into an employment contract (Art. 6(1)(b))	until the selection process is completed and for no longer than 6 months thereafter (possible claims); longer only with your explicit consent for future vacancies
IP address of the enquiry sender	Protecting the form against misuse and spam	Legitimate interest (Art. 6(1)(f))	30 days, then automatically deleted
Server access logs: IP address, time, requested URL	Security and troubleshooting	Legitimate interest (Art. 6(1)(f))	no longer than 30 days
Staff accounts in the admin area: name, email, change log with IP address	Security and traceability of content changes	Legitimate interest (Art. 6(1)(f))	Change log 24 months, IP address 90 days

Providing data is neither a statutory nor a contractual requirement, but without it we cannot reply to your enquiry. The checkbox in the form confirms that you have read this policy. It is not consent. We ask for consent only for processing that is not permitted without it (e.g. keeping your CV for future vacancies), and you can withdraw it at any time, without affecting the lawfulness of processing before its withdrawal.

We are not required to appoint a data protection officer (Art. 37 GDPR); for any questions, please contact us using the details above.

What we do not do

• we do not use cookies for tracking, advertising or analytics (see Cookies);
• we do not load third-party content: fonts, images and scripts are served from our domain, so visiting the website does not reveal your IP address to other companies;
• we do not sell data, create profiles or make automated decisions;
• links to manufacturers' websites (e.g. danfoss.com) open third-party pages only when you click them, and those pages are subject to their own policies.

Recipients and processors

Only authorised staff have access to the data. The data is also processed by processors with whom we have a data processing agreement (Art. 28): the server hosting provider and, if email notification of enquiries is enabled, the email service provider. The data is stored in the European Union and is not transferred to third countries.

Security

Traffic is encrypted (HTTPS). Staff passwords are stored only as cryptographic hashes, signing in to the admin area requires a second factor (a one-time code from an app), sessions are protected against theft and forged requests, and access to the admin area is restricted by role.

Your rights

You have the right of access to your data and the right to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Send your request to aip (at) aip.com.hr; we reply without delay and within one month at the latest.

You can lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Last updated: 4 October 2026

This page is an English translation of the Croatian original and is provided for information only. If the two versions differ, the Croatian version prevails.