Kreativa 5
Legal information

Privacy Notice

This is an English translation provided for convenience. In case of any discrepancy, the Croatian version prevails. Hrvatska verzija

PRIVACY NOTICE

This Privacy Notice (hereinafter: the “Notice”) describes how we handle the personal data we collect, use or otherwise process. This Notice does not apply to the processing of our employees’ personal data, which is subject to separate rules.

Personal data means any information relating to an identified or identifiable individual (the “data subject”).

We will process your personal data in the manner and for the purposes set out in this Notice. Your personal data is collected and processed in accordance with the applicable data protection legislation, in particular Regulation (EU) 2016/679 (hereinafter: the “General Data Protection Regulation”) and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018), as amended, and other applicable privacy and data protection regulations.

1. Who is the data controller?

The controller of your personal data for the purposes set out in this Notice is Kreativa pet d.o.o., Oreškovićeva ulica 6R, 10000 Zagreb, Croatia, OIB (personal identification no.): 29754654440 (hereinafter: “Kreativa 5”).

For any requests relating to the processing of your personal data or to exercise your rights set out in section 4 of this Notice, please contact us by phone at +385 95 2000 800 or by e-mail at info@kreativa5.hr.

2. What personal data do we collect, for what purpose and for how long?

We process your personal data only to the extent necessary for the services we provide to you or for other purposes of processing, namely:

  • To comply with our obligations under applicable regulations, in particular the Accounting Act, the Electronic Communications Act and the General Tax Act, we process your personal data, which may include your name, surname, personal identification number (OIB), date and place of birth, gender, place of residence, e-mail address and telephone number. The legal basis for this processing is compliance with the legal obligations to which we are subject. Personal data is processed for the period prescribed by the relevant regulations.
  • For recruitment, we collect the personal data of prospective employees and other candidates (e.g. interns). This data includes CVs and/or other information usually found in a CV and/or related to the recruitment process, such as name, surname, personal identification number, date and place of birth, gender, place of residence, e-mail address, telephone number, information about education and work experience, and photographs. This information may also include special categories of personal data (e.g. health data). If you do not provide such data, we may not be able to enter into a contract with you or fulfil all the obligations arising from it. If a candidate is not offered a particular position but we believe they may be suitable for another position in the future, we may, with the candidate’s consent, retain their personal data for future consideration. Data collected on the basis of such consent will be deleted once the consent is withdrawn, the purpose for which it was given has been fulfilled, or the competent data protection supervisory authority so decides.
  • To provide information about our services, we may process the personal data of our customers, prospective customers and their employees, including name and surname, e-mail address, telephone number and job title. This data has been collected in the course of our business contacts on the basis of consent, or we process it on the basis of our legitimate interest. You may at any time refuse to receive information about our offers and services or ask to be removed from our database. Consent given for this purpose remains valid until it is withdrawn, the purpose for which it was given has been fulfilled, or the competent data protection supervisory authority so decides.
  • To ensure the security of our IT systems and networks, we may process your personal data to the extent necessary to secure access to physical premises and information systems and to establish mutual confidentiality obligations. The legal basis for this processing is our legitimate interest or the legitimate interest of a third party. Your personal data is processed for as long as necessary to fulfil this purpose.
  • To respond to inquiries sent through the contact form on our website https://kreativa5.hr, we process your name and surname, e-mail address, telephone number if you provide it, the content of your message and your IP address. The legal basis for this processing is our legitimate interest or taking steps at the request of the data subject prior to entering into a contract. Your personal data is processed for as long as necessary to fulfil this purpose.
  • To enable the use of our website https://kreativa5.hr, we may process network identifiers, technical cookies and related technical data. The legal basis for this processing is our legitimate interest. This data is processed and stored for as long as necessary to ensure the functionality and security of the website. Visitors do not need to provide any personal data to use the content of our website. Visitors who wish to send an inquiry through the contact form must provide their name and surname and e-mail address, and may optionally provide a telephone number. We do not use analytics tools or third-party cookies on our website. We use only a technical session cookie that protects the contact form against abuse. You can read more about this in our Cookie Policy.
  • In addition, in order to pursue any future legal claims, we may process and store your personal data, including name, surname, telephone number, e-mail address and contract identification number. The legal basis for this processing is our legitimate interest or the legitimate interest of a third party. Personal data is processed for as long as necessary to fulfil this purpose, but no longer than ten years from the start of the limitation period in each individual case.

3. With whom do we share your personal data?

In certain cases, your personal data may be shared with trusted third parties that provide us with administrative and technical support, i.e. with data processors that apply appropriate technical and security measures to protect personal data. We may also share your personal data with public authorities where required by applicable law and in accordance with their legal powers, as well as with external advisers and other persons bound by confidentiality obligations. We select such service providers carefully and supervise their work.

Only a limited number of our employees have access to your personal data. They are required to keep your personal data and the measures taken to protect it strictly confidential, and may handle personal data only in accordance with our explicit instructions.

4. What are your rights regarding the processing?

At your request, we will inform you whether your personal data is being processed and which data is concerned. Where the legal conditions are met, you have the right to rectification, erasure or restriction of processing of your personal data. You may withdraw any consent you have given and object to the processing. For this purpose, you can contact us through the channels listed in section 1. You also have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and to request that it be transmitted to you or to third parties. We must respond to your request within one month of receiving it. Where necessary, this period may be extended by a further two months.

If you believe that the processing of your personal data has infringed your rights, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, www.azop.hr.

If you give us your consent to process your personal data, you do so entirely voluntarily and may withdraw or limit it at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. If your personal data is processed for direct marketing purposes or on the basis of legitimate interest, you also have the right to object to such processing at any time.

5. How long do we keep your personal data?

We keep your personal data only for as long as necessary to fulfil the purpose of the processing, usually for the duration of the contractual relationship or for the period expressly required by applicable law. If we process your personal data on the basis of your consent, we will process it only for as long as the consent remains valid, and you may withdraw or limit it at any time. In that case, we will stop processing the personal data concerned for the purposes for which you gave your consent.

The data is then deleted or anonymised, unless it must be kept for a certain period under company law, tax law or other regulations. In that case, the data is no longer processed for any other purpose.

6. Links to third-party websites

Our website may contain links to third-party websites. If you click on such a link, the third party may collect certain information about you, such as your IP address or browsing history, and may place cookies in your browser. The processing of data collected in this way is governed by the rules adopted by the operators of those websites, and not by this Notice.

7. What if the processing changes?

Any changes to this Notice will be published on our website https://kreativa5.hr and made available through our usual communication channels.

This Notice was last updated in October 2026.