Privacy policy

Who is responsible for your personal information

ALTPRO d.o.o., Zagreb, Orahovac 4 (hereinafter referred to as “Altpro”, “data controller”, “we”, “our”, “us”) as the personal data, data controller is responsible for the processing and determines the purpose and means of processing your personal data.

Your privacy and the security of your personal information are important to us. Altpro takes the protection of your personal data seriously and takes all necessary technical and security measures in accordance with the best practices and obligations prescribed by the General Data Protection Regulation (EU 2016/679) – GDPR, and other positive regulations. This notice explains the types of personal data we collect and process in relation to certain categories of respondents below.

Therefore, please read this privacy policy carefully and if you have any questions, feel free to contact us at

What data we collect and what is the purpose and legal basis of our processing

Altpro uses TalentLyft, an application owned by AdoptoTech d.o.o. (Hereinafter referred to as “TalentLyft”) as part of the recruitment process.

TalentLyft, as the Processor, processes personal data on our request and on the basis of our instructions.

Altpro and TalentLyft have signed a Personal Data Processing Agreement to secure and protect your data privacy rights.

Regarding the employment process, we process personal data such as:

  • names and surnames, photograph (if submitted with CV), profession, data on previous employment and work experience, address of residence, e-mail address, skype name, contact phone, and other information that you provide to us at your discretion as part of your resume.
  • IP address
  • Internet browser data
  • Cookies that allow you to track the use of the TalentLyft website

We will process your personal data in terms of Article 6 (b) of the General Regulation on Personal Data Protection (processing is necessary in order to take action at the request of the respondent before concluding employment contract) or for the purpose of data processing to assess and select potential candidates for employment with the data controller. If you submit open job applications to us independently of the competition, we will be able to process your personal data only on the basis of your explicit consent (Article 6 (b) of the General Regulation on Personal Data Protection).

After logging in, you will be given access to the Web page, where you can gain insight into personal data, request export or delete them. The hyperlink to the Web page will be in the confirmation e-mail after applying to the competition.

We process personal data of our business partners – natural persons or craftsmen, namely: name and surname, PIN, address of residence (headquarters), contact email and telephone numbers, data of official bank accounts.

We will process your personal data in terms of Article 6 (b) of the General Data Protection Regulation (processing is necessary for the execution of the contract to which you are a party), and for the purpose of execution or fulfillment of the contract itself.

In case of legal entity, we also process the personal data of the persons with whom we contact: name and surname, position in the legal entity and contact information (telephone and email address) We also process in terms of Article 6 (f) based on our legitimate interest for the purpose of establishing and maintaining business contact and fulfilling contracts.

Based on the legitimate interest, we can process personal data of employees of the business partner – craftsman if they are also contacts in a specific business relationship, with the purpose of maintaining the business relationship: name, position and contact information (phone and email address).

Respondents have the right to object to the processing of personal data based on the legitimate interests of the data controller, and can send their objection to the email address

We also inform you that in order to protect property and persons, our business premises in certain places are under video surveillance, about which there is a detailed notice and warning in our business premises.

We also inform you that in order to protect property and persons, our business premises in certain places are under video surveillance, about which there is a detailed notice and warning in our business premises.

Direct marketing

Based on a legitimate interest, we process your personal data (name, surname, address, email address) for the purposes of direct marketing, by notifying by sending newsletters (information about projects, products, etc.) and invitations to conferences, congresses or social gatherings. If you do not want us to process your personal data for the purposes of direct marketing, please let us know on email address

We process your personal information provided in the inquiry form on our website. We process them only for the purpose of answering your inquiry. Based on your special and explicit special consent, we may also process your data for direct marketing. If you do not want us to process your personal data for the purposes of direct marketing, you can withdraw your consent at any time by sending a notification to the email address

Use of cookies

All information and notices regarding the use of our cookies and the processing of personal data, find here:

What if you choose not to provide personal information

There is no legal obligation to provide your personal data in any of the above cases and data provision is on a voluntary basis only. However, denying them may lead to the inability of the data controller to process the personal data of the candidate in terms of selection for a job position, while in the case of business partners it may mean the inability to establish and maintain a contractual relationship.

Storage period


The personal data of the candidate will be kept until the application closing date following which it will be erased unless you sign a consent by which you allow us to keep your personal data or CV for the next 24 months for potential future employment with the processing manager.

If there are no job vacancies open or advertised and still wish to submit your CV and job application, with your consent we will store them for 24 months. You may revoke your consent at any time.

Business partners

In relation to business partners or contacts, they are kept for the duration of the contractual relationship, ie for the duration of contacts with a certain person, or even longer if required by law or there is a certain dispute with the party. Contracts with business partners are stored after the termination of the contractual relationship if required by law, but their processing is limited so that they can not be used or processed in any way, but they are kept only for archiving purposes.

Inquiries on the website

After answering your inquiry, we will store your personal data in the archive and keep it for a further six months in case of further need for communication.

Who can receive your personal data, data transfer

Other affiliated companies or third parties  in connection with your use of the Online Offerings or our business relationship with you; third parties which provide IT services to us and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims (e.g., for court and arbitration proceedings, to law enforcement authorities and regulators, to attorneys and consultants).

In relation to recruitment of candidates, the data controller may have a contractual relationship with a specific service provider who will act on behalf of the data controller and maintain a platform and communication with potential candidates. In the event that the transfer of data to third countries or international organizations is performed by service provider through subcontractors, with whom the Company as a data controller has a contractual relationship, candidates will be notified and may request further information about the safeguards implemented in relation to specific transfers.

Storage security

We collect your personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of the principles of personal data protection, reduction of the amount of personal data, the scope of their processing, storage period and availability. We take all technical and organizational measures to adequately protect your personal information from unauthorized disclosure and to ensure its durability, completeness, integrity and confidentiality. All of our employees have committed to maintaining personal information confidential by signing a privacy statement. We will answer all inquiries about security and technical measures as soon as possible, and you can send them to us via the email address

Realization of your rights regarding data processing

Our Data Privacy Organization provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights. The Data Privacy Organization may be contacted at: email address or at Altpro d.o.o., Velika cesta 41, 10020 Zagreb to submit a request:

The respondent has the right to obtain confirmation from the data controller as to whether personal data relating to him are being processed and, if such data are being processed, to have access to personal data and to obtain the following information:

  • the purpose of processing your personal data,
  • categories of personal data being processed,
  • the recipients or categories of recipients to whom personal data have been or will be disclosed, the safeguards if the data are transferred to a third country or an international organization,
  • the envisaged period in which the personal data will be stored, or the criteria for the storage of personal data,
  • the right to lodge a complaint with the supervisory authority,
  • whether there is automated decision-making and, in the case where personal data are not collected from respondents, about their source;
  • provide the respondent with a printout or copy of personal data contained in the storage system relating to him;
  • information on personal data breach,
  • the existence of the right to request the data controller to correct or delete personal data or to restrict the processing of personal data relating to the respondent or the right to object to such processing.

You may request correction and, without undue delay, obtain correction of inaccurate personal data and to have the personal data updated.

You have the right to request and without undue delay obtain the erasure of your personal data, in situations where:

  • personal data is no longer required for the purposes for which it was collected or otherwise processed,
  • if you withdraw your consent and there is no other legal basis for processing,
  • if you lodge an objection to the processing of your personal data in accordance with Article 21 of the General Regulation on Data Protection, and there are no stronger legitimate interests for processing,
  • personal data has been illegally processed,
  • personal data must be erased in compliance with the legal requirements of the data controller.

The above does not apply to the extent that processing is necessary:

  • to effectuate the right to freedom of expression and information,
  • to comply with a legal obligation requiring processing under EU law or the law of a Member State to which the data controller is subject or to perform a task in the public interest,
  • to make, exercise or defend legal claims, and

in other cases prescribed by Art. 17 of the General Data Protection Regulation.

You have the right to obtain a processing restriction if:

  • you dispute data accuracy,
  • if processing is illegal but you object to erasure,
  • if the data controller no longer needs personal data but has requested it in order to set, realize or defend legal claims,
  • you object to the processing of personal data,

all in accordance with Art. 18 and 19 of the General Data Protection Regulation

You have the right to request the transfer of your personal data to another data controller, in accordance with the provisions of Art. 20 of the General Data Protection Regulation.

If the data controller bases the legality of processing of your personal data the respondent’s personal data on his legitimate interest, ie if the processing is necessary for the performance of a task of public interest, the respondent has the right to object. The data controller will no longer process the personal data of the respondent unless the data controller proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the respondent or to set, realize or defend legal claims.

You have the right not to be agree with the decision based solely on automated processing, including profiling, which produces legal effects for you and may have a significant impact on you. For the avoidance of doubt, the data controller does not apply automated individual decision making. All decisions that produce legal effects that relate to personal data or in a similar way significantly affect you are made with significant human intervention.

Should the fulfillment of your request to Altpro constitute a breach of obligations under laws, regulations or rules of conduct, Altpro may not be able to comply with your request, but you may still be able to request a ban on further processing of your personal data.

The right to lodge a complaint with the supervisory authority

Regarding the processing of your personal data, you have the right to address your objection to the supervisory authority (especially in the Member State where you have your permanent residence, place of work or where the place of alleged infringement is located, in Croatia: Personal Data Protection Agency, Zagreb (address on the official website for the protection of personal data).

ALTPRO in the International Exhibition for Track Technology (IAF)