Privacy Policy

PrimaBiro d.o.o.
Zrinsko-Frankopanska ulica 23, 40000 Čakovec, Hrvatska
VAT/OIB: [OIB]
Email: info@primabiro.hr
Website: www.primabiro.hr

For any questions regarding the processing of your personal data, please contact us at the email address above.

We collect the following categories of personal data:

• Contact data — name, surname, email address, phone number and the message you send via the contact form.
• Technical data — IP address, browser type, operating system, referring URL, pages visited and session duration (collected by Google Analytics, only with your prior consent).
• Cookie data — your preference (accept or reject analytics cookies), stored in a cookie on your device.

We do not collect special categories of personal data (health data, biometric data, racial or ethnic origin, etc.).

• Responding to contact form enquiries — legal basis: performance of a contract or steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR), or where applicable, our legitimate interest in communicating with potential business partners (Art. 6(1)(f) GDPR).
• Web analytics (Google Analytics) — legal basis: your explicit consent (Art. 6(1)(a) GDPR). Analytics cookies are loaded only after you give consent via the cookie banner. You may withdraw consent at any time by clearing cookies in your browser settings.
• Legal obligations — retention of business records in accordance with statutory retention periods (Art. 6(1)(c) GDPR).

A cookie is a small text file stored on your device when you visit a website. We use the following types:

You may reject or withdraw consent for analytics cookies at any time by clearing cookies via your browser settings. The essential cookie (cookie_consent) is required for the website to function correctly and cannot be disabled.

With your prior consent, we use Google Analytics — a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics collects anonymous statistical data about website usage (e.g. number of visitors, pages visited, session duration).

We have enabled IP anonymisation (anonymize_ip), meaning your IP address is truncated within the European Union before being sent to Google. In exceptional cases the full IP address may be transferred to Google's servers in the USA and truncated there.

Google may disclose this data to third parties where required by law or where third parties process data on Google's behalf. Google does not associate your IP address with any other data it holds. Google's privacy policy: policies.google.com/privacy.

We do not sell or rent your personal data. Data may be shared only with:

• Google LLC — provider of Google Analytics (only with your analytics cookie consent).
• Email service providers — to deliver messages sent via the contact form.
• Competent authorities — where required by law or by order of a competent authority.

All our data processors are bound by appropriate data processing agreements and may not use your data for their own purposes.

• Contact enquiries — retained for 2 years from receipt, or longer if a business relationship arises requiring extended retention.
• Analytics data (Google Analytics) — retained according to Google's settings (up to 26 months), only if you have given consent.
• Consent cookie — stored for 1 year on your device.

Under the General Data Protection Regulation (GDPR — EU Regulation 2016/679) you have the following rights:

• Right of access — you may request confirmation of whether we process your data and obtain a copy.
• Right to rectification — you may request correction of inaccurate or completion of incomplete data.
• Right to erasure ("right to be forgotten") — you may request deletion of your data, unless a legal retention obligation applies.
• Right to restriction of processing — you may request a temporary suspension of processing.
• Right to data portability — you may request delivery of your data in a machine-readable format.
• Right to object — you may object to processing based on legitimate interest.
• Right to withdraw consent — you may withdraw consent for analytics cookies at any time without negative consequences.

Submit a request to: info@primabiro.hr. We will respond within 30 days.

You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

We implement appropriate technical and organisational security measures to protect your personal data — including SSL/TLS encryption of data in transit, access controls and regular security updates.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies.

We may update this Privacy Policy from time to time. All changes will be published on this page with an updated date. We recommend reviewing it periodically.