Privacy policy

1. Controller

IT Consulting Services d.o.o. za savjetovanje i usluge

Mekušanska cesta 5, 47000 Karlovac

Croatia

Email: info@itcs.hr · Phone: +385 91 110 1507

This privacy policy covers the website www.itcs.hr. Our applications (e.g. Office Assistant) have their own privacy policies.

2. Legal bases

We process personal data only where one of the following legal bases under the General Data Protection Regulation (GDPR) applies:

• Art. 6(1)(a) GDPR – your consent (e.g. Google Analytics, Google Maps),
• Art. 6(1)(b) GDPR – a contract or steps prior to entering into one (e.g. enquiries about our products),
• Art. 6(1)(f) GDPR – our legitimate interest in operating the website securely and reliably.

3. Hosting and server log files

The website is served from a server we operate ourselves in Croatia (EU). On every visit, the server automatically records: IP address, date and time, requested address, HTTP status code, amount of data transferred, previously visited page (referrer) and browser identifier (user agent).

We need this data to deliver the website and to detect attacks and errors (Art. 6(1)(f) GDPR). The log files are deleted automatically after 14 days.

4. Articles

The articles on this website are loaded from another server that we also operate in Croatia (inp-b-prod.itcs.hr). The same technical data as described in section 3 is processed.

5. Storage in your browser

We store your decision about Google Analytics in your browser's local storage (localStorage, entry "itcs_consent") so that we do not ask you on every visit. This storage is strictly necessary for the function you requested. You can delete the entry at any time in your browser settings.

6. Google Analytics

Only if you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Without your consent, Google Analytics is not loaded and no analytics cookies are set.

Google Analytics collects pseudonymous usage data, such as pages viewed, time spent, approximate location and device and browser information, and sets cookies for this purpose (_ga, _ga_*) with a lifetime of up to two years. Event data is retained for no more than 14 months.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, using the "Cookie settings" link at the bottom of every page.

7. Google Maps

On the contact page you can display a map from Google Maps (Google Ireland Limited). The map is only loaded when you click "Show map"; only then are your IP address and possibly other technical data transmitted to Google, possibly also to the USA (see section 6). The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR).

8. Fonts

The fonts used on this website are loaded from our own server. No connection is made to servers of Google or other providers.

9. Contact by email or phone

If you contact us by email or phone, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR). We delete the data once it is no longer needed for this purpose, unless we are legally required to retain it.

10. Links to other websites

This website contains links to other services, e.g. the App Store, Google Play or our product websites. Once you click such a link, the privacy policy of that provider applies; no data is transmitted to them before that.

11. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

12. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the Member State where you live or work. The authority responsible for us is the Croatian Personal Data Protection Agency: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

13. Automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.