Privacy policy
Last updated: 27 October 2026
1. Controller
The controller responsible for processing your personal data is Remss d.o.o., Braće Radića 112, 42000 Varaždin, Croatia, VAT ID (OIB) 06717411883. You can reach us at [email protected] or +385 97 6131 041.
2. Visiting this website
This website does not use cookies, analytics, tracking tools, social media plug-ins or content loaded from third-party servers (fonts are hosted on our own server).
When you visit the website, our hosting provider and our network service provider Cloudflare automatically process technical data (IP address, date and time of access, page requested, browser type) in server logs. This is necessary to deliver the website and protect it against attacks. Legal basis: our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). Log files are deleted after a short period, as a rule within 30 days.
3. Contacting us by e-mail or phone
If you contact us, we process the data you send us (e.g. name, e-mail address, phone number, company and the content of your message) in order to answer your enquiry and, where applicable, to prepare or perform a contract. Legal basis: steps prior to entering into a contract and contract performance (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
We keep this data for as long as necessary to handle your enquiry and for possible business cooperation. Where business correspondence must be retained under tax or commercial law, we keep it for the statutory period.
4. Job applications
If you send us an application, we process the data contained in it (e.g. CV, contact details, qualifications) solely for the selection process. Legal basis: steps prior to entering into an employment contract (Art. 6(1)(b) GDPR).
If you are not hired, we delete your application no later than 6 months after the end of the selection process, unless you have agreed that we may keep it longer for future vacancies (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.
5. Recipients and transfers
We do not sell your data or pass it on to third parties for advertising. Data may be processed by service providers who work for us under a data processing agreement (e.g. hosting and e-mail providers, Cloudflare). Cloudflare may process data in the USA; the transfer is based on the EU–US Data Privacy Framework and the EU standard contractual clauses. Beyond that, we only disclose data where we are legally obliged to do so (e.g. to competent authorities).
6. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17) and restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal
7. Right to lodge a complaint
To exercise your rights, simply write to [email protected]. You also have the right to lodge a complaint with a supervisory authority – in Croatia: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr – or with the supervisory authority in your country of residence.
8. Obligation to provide data
You are not obliged to provide us with personal data. Without your contact details, however, we cannot answer your enquiry or consider your application. We do not use automated decision-making or profiling.