The protection of your personal data is important to us. We process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR (Zakon o provedbi Opće uredbe o zaštiti podataka). Here you can find out which data we collect, what we use it for and how long we store it.

 

1. Controller

RI-DIVINUS d.o.o.
Antuna Mihića 38
51000 Rijeka, Croatia
Phone: +385 99 4552 005
Email: info@ri-divinus.hr

 

2. Hosting and server log files

This website is hosted by Wix.com Ltd., Nemal Tel Aviv St. 40, 6350671 Tel Aviv, Israel. Wix processes the data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). An adequacy decision of the EU Commission exists for Israel. Where data is transferred to the USA, this is done on the basis of the EU Standard Contractual Clauses.

When the website is accessed, technical data is collected automatically, for example IP address, browser type, operating system, page accessed and date and time. We need this data to provide the website securely and without errors. The legal basis is Art. 6(1)(f) GDPR. The log data is only stored for as long as is necessary for this purpose.

 

3. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and by the padlock symbol.

 

4. Cookies

Our website uses technically necessary cookies so that it works properly. The legal basis is Art. 6(1)(f) GDPR. We only set all other cookies, for example for statistics or marketing, with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings.

 

5. Contact form, email and telephone

If you contact us via the contact form, by email or by telephone, we store your details (for example name, email address, phone number and your message) in order to process your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR.

If no order is placed, we delete your enquiry no later than 6 months after the last communication. If an order is placed, we store the data for the duration of the statutory retention periods (see section 10).

 

6. Applications

We only use application documents for the application process (Art. 6(1)(b) GDPR). If no employment relationship is established, we delete the documents no later than 6 months after the end of the process, unless you have agreed to longer storage. With your consent (Art. 6(1)(a) GDPR), we add you to our applicant pool for up to 12 months. If you are hired, the documents become part of your personnel file.

 

7. Google Maps

We embed maps from Google Maps on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, your IP address is transmitted to Google, and a transfer to the USA is possible. Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR).

 

8. Links to social networks

On our website we link to our profiles on Instagram and Facebook. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These are simple links, not embedded plugins. Data is only transferred to Meta when you click on a link. Meta’s privacy policy applies to processing on these platforms.

 

9. Recipients of your data

We only pass on your data if this is necessary for the performance of a contract, if there is a legal obligation or if you have given your consent. Recipients may include, for example, our hosting provider, our tax advisor or public authorities. We do not sell personal data.

 

10. Storage period

We only store personal data for as long as is necessary for the respective purpose. After that, we delete it unless there are statutory retention obligations. We keep documents relating to orders and invoices for the duration of the statutory periods under Croatian law, in particular under the Accounting Act (Zakon o računovodstvu) and tax law.

 

11. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

 

12. Your rights

You have the right to access, rectification, erasure and restriction of processing of your data, to data portability and to object to processing (Art. 15 to 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. An informal message to info@ri-divinus.hr is sufficient.

 

13. Right to lodge a complaint

You can lodge a complaint with the Croatian data protection authority:
Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
www.azop.hr

 

14. Last updated

As of: October 2026. We will adapt this privacy policy if our website or the legal situation changes.