Skip to content
Datasoft
HR

DATASOFT / PRIVACY

Privacy policy

Effective from 1 November 2026.

1. Who processes your data

DATASOFT, obrt za informatiku i usluge, vl. Goran Šoltić, Kralja Zvonimira 6, 33520 Slatina, Croatia, OIB 28426575325. For any privacy question, write to datasoft@datasoft.hr.

2. Contact form

When you send an inquiry we receive your name, email address and project description, and, if you fill them in, your company, the service you are interested in, an approximate budget and a preferred date. We use this only to reply to you and prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). To prevent abuse of the form, the time of submission is also recorded in your session. We send an automatic confirmation of receipt to the email address you entered.

Inquiries are kept for up to 12 months after our last communication. If the inquiry leads to cooperation, the data becomes part of our business records (section 3).

3. Clients and the client portal

For clients we process the data needed for the contract, proposals, invoices and support: company name, OIB, address, contact persons and email addresses. The legal basis is performance of the contract and our legal obligations (Article 6(1)(b) and (c) GDPR). Invoices and related documents are kept for the periods required by Croatian tax and accounting regulations.

4. Visitor statistics

We use Umami, an analytics tool we run on our own server. It does not use cookies, does not store your IP address and does not follow you across other websites. It records the page you visited, the referring website, the type of browser, device and operating system, and the country, which is derived from the IP address that is then discarded. Clicks on some buttons (for example “Request a proposal”) and a successfully sent inquiry are recorded as anonymous events.

The statistics are not shared with anyone. The legal basis is our legitimate interest in understanding how the website is used (Article 6(1)(f) GDPR). If “Do Not Track” is enabled in your browser, no statistics are recorded. The office, administration and client portal are never included.

5. Cookies and local storage

  • csrftoken: protects forms from abuse. Strictly necessary.
  • sessionid: keeps you signed in to the client portal and limits the number of inquiries. Strictly necessary.
  • theme (local storage): remembers whether you chose the light or dark theme. It stays in your browser only.

Strictly necessary cookies do not require consent. We do not use cookies for advertising or tracking.

6. Who else has access

The provider of the server (VPS) the website runs on, and the email provider we use to receive inquiry notifications and reply to you. They process data only on our behalf and according to our instructions. We do not sell personal data or pass it on for marketing. Fonts and scripts are served from our own server, without external services.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to object to processing and to data portability. Write to datasoft@datasoft.hr; we will reply within one month.

You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

8. Changes

If we change how we process data, we will update this page and the date at the top.