Privacy policy

In short

This site sets no tracking cookies and stores nothing in your browser, which is why there is no cookie pop-up.

We collect personal data only if you contact us through the enquiry form, and only in order to answer your enquiry and prepare a quote. We do not sell it, we do not pass it to advertisers and we do not use it to send marketing.

This policy informs you about our processing of personal data in accordance with Article 13 of the General Data Protection Regulation.

Who is the data controller?

The controller of your personal data is:

BOBOTAKI, obrt za građevinske i druge usluge Koparska 31, 52100 Pula, Croatia Craft register number (MBO): 98136950

Email: info@bobotaki.hr Telephone: +385 97 684 0003

Given the scale of the business, we are not required to appoint a data protection officer. Enquiries about the processing of personal data are answered by the owner, at the email address above.

Where do we get your data from?

We collect personal data only directly from you, through the enquiry form on this site.

We do not obtain it from public or commercial databases, from social media or from third parties.

What do we collect, and for what purpose?

Data entered in the enquiry form

We collect your name, email address, telephone number if you provide one, the type of work and the content of your message.

We process this solely in order to answer your enquiry and, if you request one, to prepare a quote. The legal basis is Article 6(1)(b) of the Regulation, steps taken at the request of the data subject prior to entering into a contract.

Providing the data is voluntary and is not a statutory obligation. Your name, email address and message are necessary for us to reply, and without them the form cannot be submitted. Telephone number and type of work are optional and serve only to help us assess the job more quickly.

Please do not enter data that is not needed for our reply, in particular data concerning health, or the personal data of other people without their knowledge.

Server logs

When you visit the site, the server records the IP address, browser type and version, the time of access and the address requested.

These logs are processed for the security of the site and the detection of automated abuse. The legal basis is Article 6(1)(f), our legitimate interest in keeping the site available and in the form not being used to send spam.

Visitor measurement

We use Cloudflare Web Analytics to measure visits. The service sets no cookies and stores no data on your device. It records which page was opened, which link you arrived from, which country you are accessing from, and your browser and device type.

No profile is built from this data, you are not recognised on a subsequent visit, and you are not tracked across other sites. The legal basis is Article 6(1)(f), our legitimate interest in having basic figures on how the site is used.

You have the right to object to processing based on legitimate interest.

Processing we do not carry out

We do not carry out profiling or automated decision-making. We do not process special categories of personal data. None of the processing described in this policy relies on consent, so there is no consent for you to withdraw.

Who do we share your data with?

We do not sell, trade or use personal data for advertising.

It is accessible to the owner of the business and to the following processors, each only to the extent necessary to provide their service:

These processors handle the data solely on our instructions and under a data processing agreement. We may also disclose data to a public authority where a regulation requires it.

Is data transferred outside the European Economic Area?

Cloudflare, Inc. may process personal data outside the European Economic Area. Such transfers rely on the standard contractual clauses adopted by the European Commission.

Brevo SAS is established in France, inside the European Economic Area, so delivering your enquiry involves no transfer out of it.

Proton AG is established in Switzerland, for which the European Commission has issued an adequacy decision, so no additional safeguards are required for that transfer.

How long do we keep data?

Do we use cookies?

We do not use cookies for tracking, advertising or analytics.

Cloudflare may set a cookie whose sole purpose is security and distinguishing users from automated requests. Consent is not required for such cookies because they are necessary to provide the service you requested, in accordance with Article 43 of the Croatian Electronic Communications Act.

For that reason there is no cookie pop-up on this site. Should we introduce a cookie that is not strictly necessary, we will obtain your consent before setting it and amend this policy accordingly.

What are your rights?

In relation to your personal data, you have:

• the right of access, to a copy of the data we process about you,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability, to receive the data in a structured, commonly used and machine-readable format,
• the right to object to processing based on legitimate interest, which here means the server logs and visitor measurement.

Requests may be sent to info@bobotaki.hr. No particular form is required. We respond without undue delay and within one month of receipt at the latest. Exercising these rights is free of charge.

How do you make a complaint?

If you believe we are not processing your data in accordance with the law, please contact us first at info@bobotaki.hr so that we can try to resolve the matter directly.

Regardless of that, you have the right to lodge a complaint with the supervisory authority:

Agencija za zaštitu osobnih podataka Ulica Metela Ožegovića 16, HR-10000 Zagreb azop@azop.hr, +385 1 4609-000

Changes to this policy

We amend this policy when the way we process personal data changes. The date of the last change is shown at the top of the page.