Privacy policy

Last updated: November 9, 2026

This Privacy policy describes our policies and procedures for collecting, using and disclosing your information when you use the Service, and tells you about your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service and to answer your enquiries. How we use cookies and similar technologies is described in detail in our Cookie policy.

Interpretation and definitions

Interpretation

Words with a capitalised first letter have the meanings defined below. These definitions have the same meaning whether they appear in the singular or in the plural.

Definitions

For the purposes of this Privacy policy:

Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of at least 50 % of the shares, equity interest or other securities entitled to vote.
Company (referred to as “the Company”, “We”, “Us” or “Our” in this Policy) means Protalent d.o.o., Vlaška ulica 84, 10000 Zagreb, Croatia, OIB (Croatian personal identification number): 99779228652. The Company is the controller of your personal data.
Cookies are small files placed on your computer, mobile device or any other device by a website, containing information about your browsing history on that website, among other uses.
Country refers to: Croatia.
Device means any device that can access the Service, such as a computer, a mobile phone or a digital tablet.
Personal data is any information that relates to an identified or identifiable natural person.
Service refers to the Website.
Service provider means any natural or legal person who processes data on behalf of the Company (a processor). It refers to third-party companies or individuals engaged by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to help analyse how the Service is used. The service providers we use are listed in the section “Service providers”.
Usage data means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website means Protalent, available at https://www.protalent.hr.
You means the individual accessing or using the Service, or the company or other legal entity on whose behalf such individual is accessing or using the Service, as applicable.

Collecting and using your personal data

Types of data collected

Personal data

When you send us an enquiry through the contact form on the Website, we collect the data you enter yourself:

the type of enquiry (“I need workers” or “I am looking for a job”),
your full name,
your email address,
your phone number (if you enter it),
your company name (employers) or occupation (candidates), if you enter it,
your message,
for employers: the services you are interested in and the number of workers you need, if you select them,
for candidates: your CV as a PDF or Word file, if you attach it.

Together with the enquiry we also record your confirmation that you agreed to the processing of your data, the language and the page from which the enquiry was sent. If you reached the page through an ad or a link with campaign tags (e.g. utm_source, utm_campaign or Google’s gclid), we send those tags from the page address with the enquiry so we know which ad led to it. They contain neither your name nor your contact details.

If you contact us directly by phone or email, we process the data you give us in that conversation.

Usage data

Usage data is collected automatically when you use the Service.

Usage data may include information such as your device’s IP address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Service with a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you use, your device’s IP address, your mobile operating system, the type of mobile web browser you use and other diagnostic data.

We may also collect information that your browser sends whenever you visit our Service or access it through a mobile device.

We collect visit data (the pages you visit, your device, browser and approximate location) for statistics through Google Analytics, and only if you consent – see the section “Google Analytics”.

Tracking technologies and cookies

The Website itself stores only one entry in your browser: when you choose “Accept” or “Decline” in the cookie banner, your choice is saved in your browser’s local storage (pt-consent) for 12 months, so that we do not ask you on every visit. This entry contains no personal data – only your choice and the time you made it.

Your browser receives Google Analytics cookies (_ga, _ga_*) only if you consent. Third-party services that are switched on only by your own action (the Google Maps map and the Cloudflare Turnstile form protection) may use their own cookies and technologies under those providers’ rules.

We do not use cookies for advertising or for tracking you on other websites. Fonts and icons are loaded from our own Website, not from third-party servers.

The list of cookies and stored entries, with their purpose and duration, is set out in our Cookie policy.

Cookies can be persistent or session cookies. Persistent cookies stay on your device when you go offline, while session cookies are deleted as soon as you close your browser. You can set your browser to refuse all cookies or to warn you when cookies are being sent.

Use of your personal data

The Company may use personal data for the following purposes:

To provide and maintain our Service, including to monitor how our Service is used (statistics only with your consent).
To manage your requests: to answer the enquiry you sent through the form, by phone or by email. After you send the form, we also send an automatic confirmation of receipt to the email address you entered.
To contact you: by email, phone call or other equivalent electronic channels in connection with your enquiry or the services agreed.
For candidates: to consider your application and CV in connection with the jobs for which we act as intermediary.
For business transfers: to use your information to evaluate or carry out a merger, divestiture, restructuring, reorganisation, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, where personal data is among the assets transferred.
For other purposes: such as data analysis, identifying usage trends and improving our Service and your experience – based on statistics we collect only with your consent.

Legal basis for processing

We process the data from the contact form on the basis of your consent, which you give by ticking the box “I agree to my personal data being processed to answer this enquiry.” before sending your enquiry. Without this consent the enquiry cannot be sent.

We collect visit statistics (Google Analytics) only on the basis of the consent you give in the cookie banner.

You can withdraw your consent at any time (see “Your rights”). Withdrawal does not affect the lawfulness of processing carried out before it.

Contact form

An enquiry sent through the form on the Website is not stored in a database on the Website. It is processed as follows:

Spam protection. The form has a hidden field that only automated programs fill in. When it is switched on, Cloudflare Turnstile protection loads only once you start filling in the form; when you send the form, a security token and your device’s IP address are passed to Cloudflare to check that the enquiry is not being sent by an automated program.
Sending the email. The enquiry is sent through the email delivery service Resend as an email to our office address, ured@protalent.hr. If you attached a CV, it is an attachment to that email. Resend sends an automatic confirmation of receipt to your email address.
Retention. Enquiries and CVs are kept in the Company’s office mailbox. We keep employers’ enquiries for two years from our last contact and candidates’ CVs and data for one year from receipt, unless the law requires longer retention or you have asked us to delete them sooner.
Error logging. Technical logs of how the form works contain only the sending status and error codes – without the content of your enquiry and without your contact details.

Google Analytics

We use Google Analytics 4 (Google) for visit statistics. Google acts as our processor in doing so.

Before you respond and if you decline: Google’s script loads, but analytics storage is switched off by default (Google Consent Mode), so no Google Analytics cookies are set.
If you consent (“Accept” in the cookie banner): the cookies _ga and _ga_* are set in your browser, and Google collects data about your visit – which pages you visit, which page you came from, your device and browser type and your approximate location. We also record a few events of our own: opening an article (the article category only), a successful or failed form submission (only the type of enquiry, the form label and the type of error) and a click on our phone number or email address. We never send the content of the form, your name or your contact details to Google Analytics.
We do not use Google Analytics for advertising – storage and data for ads (ad_storage, ad_user_data, ad_personalization) stay switched off even after you consent.
Withdrawing consent: in the footer of any page, choose “Cookie settings” and then “Decline”. Existing _ga cookies are then deleted from your browser and statistics are no longer collected. Your choice is remembered for 12 months, after which we ask you again.

More on how Google processes data: Google Privacy Policy and Google Analytics – data protection.

Google Maps

On the Contact page the map does not load automatically. Until you click “Show map”, the Website sends no request to Google. Only after you click is the Google Maps map embedded, and your browser connects to Google’s servers, sending them your IP address and technical data about your browser; Google may also set its own cookies. This processing is governed by the Google Privacy Policy.

Service providers

The following service providers process your data on our behalf, and only to the extent needed for the stated purpose:

Vercel – hosting of the Website and processing of form submissions; on every visit it processes technical data about the request, such as your IP address (privacy policy).
Resend – sending the enquiry emails and the automatic confirmation (privacy policy).
Cloudflare – Turnstile protection of the form against automated programs (privacy policy).
Google – Google Analytics (only with consent) and Google Maps (only on click) (privacy policy).

We may share your data in the following situations:

With the service providers listed above: to run the Website, send your enquiry, protect the form, produce statistics (with consent) and contact you.
For business transfers: in connection with, or during negotiations of, a merger, sale of assets, financing or acquisition of all or part of our business.
With affiliates: in that case we will require them to honour this Privacy policy. Affiliates include a parent company, subsidiaries, joint venture partners or other entities that we control or that are under common control with us.
With your consent: we may disclose your personal data for any other purpose with your consent.

Retention of your personal data

The Company will keep your Personal data only for as long as is necessary for the purposes set out in this Privacy policy (for enquiries and CVs, see the section “Contact form”). We will keep and use the data to the extent necessary to comply with our legal obligations (for example, statutory obligations), resolve disputes and enforce our legal agreements and policies.

Usage data from Google Analytics is kept in line with the data retention settings in Google Analytics.

Transfer of your personal data

Your information, including personal data, is processed at the Company’s offices and in any other places where the parties involved in the processing are located. Some of the service providers listed above may also process data outside the European Economic Area, where data protection laws may differ.

The Company will take reasonable steps to ensure that your data is treated securely and in accordance with this Policy. No transfer of your personal data will take place without adequate safeguards in place, including the security of your data.

Your rights

With regard to your personal data, you have the right:

to know why your data is needed, what will happen to it and how long it will be kept,
to access the personal data we hold about you,
to have your data corrected, completed, deleted or its processing restricted,
to withdraw your consent at any time and ask for your data to be deleted,
to data portability: to ask us for all your personal data and transfer it to another controller,
to object to the processing of your data; we will act on your objection unless there are legitimate grounds for the processing.

To exercise these rights, contact us using the details at the end of this Policy. Please note that we may need to keep certain information when we are legally required to or have a legitimate legal reason to do so.

If you have a complaint about how we handle your data, we would like to hear about it, but you also have the right to lodge a complaint with the supervisory authority – the Croatian Personal Data Protection Agency (AZOP).

Disclosure of your personal data

Business transactions

If the Company is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will notify you before the transfer and before the privacy policy changes.

Law enforcement

Under certain circumstances, the Company may be required by law to disclose personal data in response to valid requests by public authorities (for example, a court or a government agency).

Other legal requirements

The Company may disclose your personal data in the good-faith belief that such action is necessary:

To comply with a legal obligation.
To protect and defend the rights or property of the Company.
To prevent or investigate possible wrongdoing in connection with the Service.
To protect the personal safety of users of the Service or the public.
To protect against legal liability.

Security of your personal data

The security of your personal data is important to us, but remember that no method of transmission over the internet or method of electronic storage is 100 % secure. While we strive to use commercially acceptable means of protection, we cannot guarantee absolute security.

Children’s privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you become aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we take steps to remove that data.

If we need to rely on consent as the legal basis for processing and your country requires consent from a parent, we may require your parent’s consent before we collect and use that information.

Links to other websites

Our Service may contain links to other websites that are not operated by us. If you click such a link, you will be taken to that third party’s website. We strongly recommend that you review the Privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of those websites.

Changes to this Privacy policy

We may update this Privacy policy from time to time. We will notify you of any changes by posting the new Policy on this page and updating the “Last updated” date at the top of this Policy.

We recommend that you review this Policy periodically for any changes. Changes take effect when they are posted on this page.

Contact us

If you have any questions about this Privacy policy or wish to exercise your rights, you can contact us:

Email: ured@protalent.hr
By post: Protalent d.o.o., Vlaška ulica 84, 10000 Zagreb, Croatia

This page is a translation of the Croatian original. In the event of any discrepancy, the Croatian version prevails.