Privacy policy

The company IBS-EXPERTS INTERNATIONAL d.o.o. Donja Bistra, Vladimira Nazora 14, Personal Identification No. (OIB): 01630253797 (hereinafter: IBS), in accordance with Regulation (EU) 2016/679 Of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the General Data Protection Regulation) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018), as the controller wishes to inform you with this privacy policy of the manner in which your personal data are being processed.

1. Overview of notions

Personal data - are the data concerning an identified or identifiable natural person (data subject).

Data subject - is an identifiable natural person who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, etc. (hereinafter referred to as: data subject).

Processing of personal data - means any operation or set of operations which is performed on personal data or on sets of personal data.

Controller - the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. 

Consent - means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which her or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. 

2. Processing of personal data

IBS processes personal data lawfully, fairly and in a transparent manner in relation to the data subject, taking account of that the data are processed exclusively in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

3. Categories of personal data and legal basis of personal data processing

1. 3.1. IBS collects and processes the following types of personal data:

• personal data of employees and former employees in accordance with their Employment Contracts and the regulations in force;
• personal data of clients, business partners and associates in accordance with the concluded contracts and other documentation;
• personal data of potential clients as well as potential employees who contact us through the contact form or by email. We process the personal data collected through the contact form or email exclusively for the purpose of getting back to you.

1. 3.2. IBS processes personal data only if, and to the extent that, one of the following conditions has been met:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes; or
• processing is necessary for the performance of a contract to which the data subject is party; or
• processing is necessary for compliance with legal obligations of IBS; or
• processing is necessary in order to protect the vital interests of the data subject or of another natural person.

1. 3.3. In order to ensure the correct operation of the website, cookies (small data files) may be used and stored on the computer, tablet or mobile device when visiting the website, for the purpose of storing setting preferences in respect of the display of the website.
2.  
3. 4. Recipients of data
4.  
5. 4.1. Your personal data can be accessed by employees of IBS in charge of e.g. accounting, administration, IT or dispatch of post.
6. 4.2. External recipients like external services providers can also have access to your personal data if it is necessary in order to provide services that IBS performs pursuant to contract documentation, or it follows from mandatory legislation.
7.  
8. 5. Data retention periods
9.  
10. 5.1. The processing and retention periods for certain personal data are prescribed by the legislation in force in the Republic of Croatia. Different regulations prescribe different retention periods for particular documents. In that case, we keep the data within the longest prescribed retention period.
11. 5.2. In reference to data that we retain on the basis of consent, these data are retained while the purpose for which they were provided exists, that is, for which they are processed, that is, until consent for the processing of such data is revoked by the data subject.
12. 5.3. After the purpose ceases to exist i.e. the retention period expires, we permanently erase the data or anonymise them so that they can no longer be linked to a particular data subject.
13.  
14. 6. Rights of data subjects
15.  
16. 6.1. Rights the data subjects have in accordance with the General Data Protection Regulation:

• Right of access - right to receive information on the purpose of processing of the personal data of the data subject, the categories of personal data being processed, on the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, and where the personal data are not collected from the data subject, any available information as to their source. It also includes the right of the data subject to receive a print-out of the personal data contained in the storage system referring to him or her.

• Right of rectification - the data subject has the right to obtain without undue delay the rectification of inaccurate personal data or to have incomplete personal data concerning him or her completed.

• Right to erasure (Right to be forgotten) - the right to obtain the erasure of personal data concerning him or her without undue delay provided that the personal data are no longer necessary in relation to the purposes for which they were collected or for legal purposes, and if the data subject revokes the consent on which the processing was based.

• Right to restriction of processing - the right to obtain the restriction of processing if the conditions defined in the General Data Protection Regulation have been met.

• Right to withdraw consent - the right to withdraw consent at any time if processing takes place on the basis of consent.

• Right to Data Portability - the right to receive the personal data concerning him or her, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller if it concerns data which are processed based on a consent or contract, and if the processing is carried out by automated means.

• Right to object - the right of the data subject to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her. The objection is submitted to IBS to the contact addresses (by email, post).IBS will, at the latest within one month as of the receipt of your request, provide you with the requested information and a notice on taken actions. If the processing of the request is complex or it concerns a larger number of requests, the one-month period can be extended by two more months, and in that event we will inform you of the reasons for the potential extension of the period.

• Right to lodge a complaint with a supervisory authority - the right of data subject to contact the Personal Data Protection Agency of the Republic of Croatia if he or she suspects a violation in the processing of personal data.

1. 6.2. If the request of the data subject is rejected, IBS will without delay, and at the latest within one month of receipt of the request, inform the data subject of the reasons for the rejection of the request.

1. 6.3. Likewise, in the event of receiving requests that are obviously unfounded or excessive, in particular because of their repetitive character, in accordance with the provisions of the Regulation, IBS can charge a reasonable fee on account of administrative costs or refuse to act upon the request.
2.  
3. 7. Additional information and comments
4.  
5. If you have any additional questions or comments concerning the IBS Privacy Policy or wish to exercise some of your abovementioned rights, you can contact us through our online form, by e-mail info@ibs-experts.hr or by phone + 385 (0)99 5472 372.