Privacy Policy

Who is responsible for your personal information

ALTPRO d.o.o., Zagreb, Orahovac 4 (hereinafter referred to as “Altpro”, “processing manager”, “we”, “our”, “us”) as the personal data processing manager is responsible for the processing and determines the purpose and means of processing your personal data.

Your privacy and the security of your personal information are important to us. Altpro takes the protection of your personal data seriously and takes all necessary technical and security measures in accordance with the best practices and obligations prescribed by the General Data Protection Regulation (EU 2016/679) – GDPR, and other positive regulations. This notice explains the types of personal data we collect and process in relation to certain categories of respondents below.

Therefore, please read this privacy policy carefully and if you have any questions, feel free to contact us at szop@altpro.hr.

What data we collect and what is the purpose and legal basis of our processing

Recruitment candidates

Altpro uses TalentLyft, an application owned by AdoptoTech d.o.o. (Hereinafter referred to as “TalentLyft”) as part of the recruitment process.

TalentLyft, as the Processor, processes personal data on our request and on the basis of our instructions.

Altpro and TalentLyft have signed a Personal Data Processing Agreement to secure and protect your data privacy rights.

Regarding the employment process, we process personal data such as:

  • names and surnames, photograph (if submitted with CV), profession, data on previous employment and work experience, address of residence, e-mail address, skype name, contact phone, and other information that you provide to us at your discretion as part of your resume.
  • IP address
  • Internet browser data
  • Cookies that allow you to track the use of the TalentLyft website

We will process your personal data in terms of Article 6 (b) of the General Regulation on Personal Data Protection (processing is necessary in order to take action at the request of the respondent before concluding employment contract) or for the purpose of data processing to assess and select potential candidates for employment with the data controller. If you submit open job applications to us independently of the competition, we will be able to process your personal data only on the basis of your explicit consent (Article 6 (b) of the General Regulation on Personal Data Protection).

After logging in, you will be given access to the Web page, where you can gain insight into personal data, request export or delete them. The hyperlink to the Web page will be in the confirmation e-mail after applying to the competition.

We process personal data of our business partners – natural persons or craftsmen, namely: name and surname, PIN, address of residence (headquarters), contact email and telephone numbers, data of official bank accounts.

We will process your personal data in terms of Article 6 (b) of the General Data Protection Regulation (processing is necessary for the execution of the contract to which you are a party), and for the purpose of execution or fulfillment of the contract itself.

In case that the business partner is a legal entity, we process the personal data of the persons with whom we contact: name and surname, position in the legal entity and contact information (telephone and email address) We also process in terms of Article 6 (f) based on our legitimate interest for the purpose of establishing and maintaining business contact and fulfilling contracts.

Based on the legitimate interest, we can process personal data of employees with a business partner – craftsman if the same contact points are in a specific business relationship, with the purpose of maintaining the business relationship: name, position and contact information (phone and email address).

Respondents have the right to object to the processing of personal data based on the legitimate interests of the controller, and can send their objection to the email address szop@altpro.hr.

We also inform you that in order to protect property and persons, our business premises in certain places are under video surveillance, about which there is a detailed notice and warning in our business premises.

Direct marketing (business partners)

Based on a legitimate interest, we process your personal data (name, surname, address, email address) for the purposes of direct marketing, by notifying by sending newsletters (information about projects, products, etc.) and invitations to conferences, congresses or social gatherings. If you do not want us to process your personal data for the purposes of direct marketing, please let us know at the email address szop@altpro.hr.

We process your personal information provided in the inquiry form on our website. We process them only for the purpose of answering your inquiry. Based on your special and explicit special consent, we may also process your data for direct marketing. If you do not want us to process your personal data for the purposes of direct marketing, you can withdraw your consent at any time by sending a notification to the email address szop@altpro.hr.

Use of cookies

All information and notices regarding the use of our cookies and the processing of personal data, find here:

Cookie management

What if you choose not to provide personal information

There is no legal obligation to provide your personal data in any of the above cases and data provision is on a voluntary basis only. However, denying them may lead to the inability of the data controller to process the personal data of the candidate in terms of selection for a job position, while in the case of business partners it may mean the inability to establish and maintain a contractual relationship.

Storage period

Candidates

The personal data of the candidate will be kept for the duration of the competition, and it will be deleted after the end of the competition unless you sign a consent with which you allow us to keep your personal data or CV for the next 24 months for potential future employment with the processing manager.
If you have submitted your CV and job application independently of the competition, we will store and keep them for a further 24 months if your consent for such storage has arrived with your application, which does not diminish your ability to request deletion earlier, before the deadline.

Business partners

In relation to business partners or contacts, they are kept for the duration of the contractual relationship, ie for the duration of contacts with a certain person, or even longer if required by law or there is a certain dispute with the party. Contracts with business partners are stored after the termination of the contractual relationship if required by law, but their processing is limited so that they can not be used or processed in any way, but they are kept only for archiving purposes.

Inquiries on the website

After answering your inquiry, we will store your personal data in the archive and keep it for a further six months in case of further need for communication.

Who can receive your personal data, data transfer

Executors who are in a business relationship with the processing manager may also have insight and processing of certain personal data, for example IT experts who maintain the system, companies that manage the website and perform processing on behalf of the manager, bookkeeping services, or recipients who perform necessary tasks for the manager, auditors, protection of property and persons, lawyers and advisors.

In relation to recruitment candidates, the processing manager may have a contractual relationship with a specific executor who will act on behalf of the manager and maintain a platform and potential communication with the candidates. In the event that the transfer to third countries or international organizations will be performed by executors, through their subcontractors, with whom the Company as a processing manager has a contractual relationship, respondents will be notified and may be provided with a list of appropriate safeguards. which apply to that contractual relationship.

Storage security

We collect your personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of the principles of personal data protection, reduction of the amount of personal data, the scope of their processing, storage period and availability. We take all technical and organizational measures to adequately protect your personal information from unauthorized disclosure and to ensure its durability, completeness, integrity and confidentiality. All of our employees have committed to maintaining personal information by signing a privacy statement. We will answer all inquiries about security and technical measures as soon as possible, and you can send them to us via the email address szop@altpro.hr.

Realization of your rights regarding data processing

In regards to the personal data we process described in this Privacy Policy, you can contact us at: email address szop@altpro.hr or at Altpro d.o.o., Velika cesta 41, 10020 Zagreb to submit a request:

to access your personal data

The respondent has the right to obtain confirmation from the data controller as to whether personal data relating to him are being processed and, if such data are being processed, to have access to personal data and to obtain the following information:

  • the purpose of processing your personal data,
  • categories of personal data being processed,
  • the recipients or categories of recipients to whom personal data have been or will be disclosed, the safeguards if the data are transferred to a third country or an international organization,
  • the envisaged period in which the personal data will be stored, or the criteria for the storage of personal data,
  • the right to lodge a complaint with the supervisory authority,
  • whether there is automated decision-making and, in the case where personal data are not collected from respondents, about their source;
  • provide the respondent with a printout or copy of personal data contained in the storage system relating to him;
  • information on personal data breach,
  • the existence of the right to request the data controller to correct or delete personal data or to restrict the processing of personal data relating to the respondent or the right to object to such processing.
Respondents may request a correction and, without undue delay, obtain a correction of inaccurate personal data relating to them, and obtain a supplement to their personal data by giving an additional statement.

Respondents have the right to request and without undue delay obtain the deletion of their personal data, inter alia: 

  • if more personal data is not necessary in relation to the purposes for which they were collected or otherwise processed,
  • if the respondent withdraws consent and there is no other legal basis for processing,
  • the respondent objects to the processing in accordance with Article 21 of the General Regulation on Data Protection, and there are no stronger legitimate interests for processing,
  • personal data have been illegally processed,
  • personal data must be deleted in order to comply with the legal obligations to which the controller is subject.

The above does not apply to the extent that processing is necessary:

  • to realize the right to freedom of expression and information,
  • to comply with a legal obligation requiring processing under Union law or the law of a Member State to which the controller is subject or to perform a task in the public interest,
  • to make, exercise or defend legal claims, and in other cases prescribed by Art. 17 of the General Data Protection Regulation.

Respondents have the right to obtain a processing restriction if:

  • dispute their accuracy,
  • if the processing is illegal and you object to their deletion,
  • if the controller no longer needs personal data but has requested them in order to set, realize or defend legal claims,
  • if they have objected to the processing of personal data

all in accordance with Art. 18 and 19 of the General Data Protection Regulation

Respondents have the right to request the transfer of their personal data to another processing manager, in accordance with the provisions of Art. 20 of the General Data Protection Regulation.

If the processing manager bases the lawfulness of the processing of the respondent’s personal data on his legitimate interest, ie if the processing is necessary for the performance of a task of public interest, the respondent has the right to object. The processing manager will no longer process the personal data of the respondent unless the processing manager proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the respondent or to set, realize or defend legal claims.

The respondent has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that relate to him or in a similar way significantly affect him. For the avoidance of doubt, the processing manager does not apply automated individual decision making. All decisions that produce legal effects that relate to the respondent or in a similar way significantly affect him are made with significant human intervention.

Should the fulfillment of your request to Altpro constitute a breach of obligations under laws, regulations or rules of conduct, Altpro may not be able to comply with your request, but you may still be able to request a ban on further processing of your personal data.

The right to lodge a complaint with the supervisory authority

Regarding the processing of your personal data, you have the right to object to the supervisory authority (especially in the Member State where you have your permanent residence, place of work or where the place of alleged infringement is located, in Croatia: Personal Data Protection Agency, Zagreb (address on the official website for the protection of personal data).