Privacy Policy

FORTIS CONSULTING respects the privacy of its clients, business partners, website users and all persons whose personal data it processes.

This Privacy Policy explains which personal data we may collect, for what purposes we process it, on what legal bases, how long we keep it, to whom we may disclose it and what rights you have in relation to the processing of your personal data.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation and other applicable regulations of the Republic of Croatia and the European Union.

1. Data controller

The controller of personal data is:

FORTIS CONSULTING
business consultancy (sole trader)
owner: Petra Božić Papa
Odra Sisačka, Odra-cesta 189
Republic of Croatia

E-mail: info@fortisusluge.hr
Telefon: +385 91 4590 589
OIB: 44550395987

For any questions regarding the processing of personal data or the exercise of data protection rights, you can contact us at the email address above.

2. Personal data we may process

Depending on how you contact us and which services you use, we may process the following categories of personal data:

• first and last name
• name of the sole trader’s business, company or other organisation
• address and contact details
• phone number
• email address
• OIB and other identification data where required for the performance of a contract or legal obligations
• data you voluntarily provide via the contact form, email, phone or other means of communication
• data needed to enter into and perform a business relationship
• accounting, financial, tax and other data needed to provide the agreed services
• data relating to projects, business plans, financing and EU funds where needed to provide the service
• data contained in documentation you provide to us for accounting, advisory or other agreed services
• technical data relating to the use of the website, such as IP address, browser type, device, time of access and similar data, where such data is recorded automatically for the security and technical operation of the website.

We only process personal data that is necessary for a specific, explicit and lawful purpose.

3. Purposes and legal bases of processing

3.1. Responding to enquiries and communication

If you contact us via the contact form, email, phone or otherwise, we may process the data you provide in order to respond to your enquiry, provide the requested information, prepare an offer, arrange a meeting or consultation and take steps prior to entering into a contract.

The legal basis for such processing may be taking steps at your request prior to entering into a contract within the meaning of Article 6(1)(b) GDPR, or our legitimate interest in responding to business enquiries and communicating with potential clients within the meaning of Article 6(1)(f) GDPR.

3.2. Providing agreed services

If you become our client, we may process personal data in order to provide the agreed services, including, depending on the agreed relationship:

• accounting and bookkeeping services
• calculations and keeping statutory records
• financial and business advisory
• financial analysis and projections
• preparing business plans
• preparing and managing projects
• advisory related to EU funds and other sources of financing
• communication related to the performance of the agreed services.

The legal basis for processing is the performance of a contract or taking steps prior to entering into a contract, in accordance with Article 6(1)(b) GDPR.

4. Compliance with legal obligations

We are required to process and retain certain personal data in order to comply with legal obligations arising from tax, accounting, commercial and other applicable regulations.

In such cases, the legal basis for processing is Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject.

In these cases, data is kept for the periods prescribed by the relevant laws and other regulations.

5. Accounting and bookkeeping services

When providing accounting and bookkeeping services, FORTIS CONSULTING may process personal data provided by the client in order to perform the agreed work.

Depending on the specific processing, FORTIS CONSULTING may act as an independent controller or as a processor of personal data on behalf of the client.

When we act as a processor, we process personal data exclusively in accordance with the client’s documented instructions, an appropriate data processing agreement and applicable regulations.

The specific rights, obligations and responsibilities of the controller and processor are governed by an appropriate agreement where required under the GDPR.

6. Contact form on the website

If you send us an enquiry through the website, we may collect the data you enter in the contact form, for example:

• first and last name
• name of your company or business
• email address
• phone number, if you choose to provide it
• the type of service you are interested in
• the content of your message.

We use the data solely to handle your enquiry, communicate with you and possibly agree on business cooperation.

Please do not send data via the contact form that is not necessary for the initial enquiry, especially sensitive or confidential data and documentation.

7. Consent

Where specific processing is based on your consent, we process personal data only for the purpose for which you gave consent.

You can withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

If the processing can lawfully be carried out on another legal basis, for example to perform a contract or comply with a legal obligation, withdrawing consent does not affect such processing.

8. Marketing communications and newsletter

This section applies only if FORTIS CONSULTING introduces a newsletter or other direct marketing communications.

If you subscribe to our newsletter or explicitly request marketing communications, we may use your contact details to send professional articles, news about services, projects, funding opportunities and other business-relevant content.

Where consent is required for such communication, we will send messages only on the basis of consent given in advance.

You can opt out of marketing messages at any time via the unsubscribe link in the message or by sending a request to info@fortisusluge.hr.

Unsubscribing does not affect other processing of personal data that has a separate legal basis.

9. Cookies

Web stranica FORTIS CONSULTING koristi kolačiće i slične tehnologije kako bi stranica pravilno i sigurno funkcionirala te, uz vašu privolu, radi analize posjećenosti i načina korištenja web stranice.

Strictly necessary cookies

Nužni kolačići omogućuju osnovno i sigurno funkcioniranje web stranice. Oni su potrebni za korištenje pojedinih funkcionalnosti stranice i ne koriste se u marketinške svrhe.

Budući da su potrebni za funkcioniranje web stranice i pružanje usluge koju korisnik zatraži, za njihovo korištenje nije potrebna prethodna privola kada su zaista nužni.

Analitički kolačići – Google Analytics 4

Uz vašu prethodnu privolu koristimo Google Analytics 4 (GA4), analitičku uslugu društva Google koja nam pomaže razumjeti kako posjetitelji koriste web stranicu.

Google Analytics može obrađivati podatke povezane s korištenjem web stranice, kao što su podaci o posjećenim stranicama, vremenu i načinu korištenja stranice, vrsti uređaja i preglednika te približnoj lokaciji izvedenoj iz tehničkih podataka.

Te podatke koristimo u statističke i analitičke svrhe kako bismo bolje razumjeli korištenje web stranice te poboljšavali njezin sadržaj, funkcionalnost i korisničko iskustvo.

Google Analytics 4 ne učitava se prije nego što korisnik da privolu za analitičke kolačiće.

Pravna osnova za korištenje analitičkih kolačića i povezanu obradu osobnih podataka jest vaša privola, u skladu s člankom 6. stavkom 1. točkom (a) GDPR-a, kada je primjenjivo.

Odbijanje analitičkih kolačića ne utječe na osnovno korištenje web stranice.

Upravljanje privolom

Prilikom prvog posjeta web stranici možete prihvatiti sve kolačiće ili odbiti neobavezne kolačiće.

Danu privolu možete naknadno promijeniti ili povući putem postavki kolačića dostupnih na web stranici. Povlačenje privole ne utječe na zakonitost obrade provedene prije njezina povlačenja.

Google kao pružatelj analitičke usluge

Uslugu Google Analytics pruža Google. Korištenje ove usluge može uključivati obradu ili dostupnost određenih podataka izvan Europskog gospodarskog prostora.

Ako dolazi do međunarodnog prijenosa osobnih podataka, takav se prijenos provodi uz primjenu odgovarajućih pravnih mehanizama i mjera zaštite predviđenih primjenjivim propisima o zaštiti osobnih podataka.

Dodatne informacije o vrstama kolačića koje koristimo i mogućnostima upravljanja privolom dostupne su putem postavki kolačića na web stranici.

10. Logs and website security

The server hosting the website may automatically record certain technical data needed for the operation and protection of the website.

• IP address
• date and time of access
• the requested page
• information about the browser and operating system
• technical data relating to errors and security events.

Such data may be processed to ensure the functionality, stability and security of the website, detect attempts at unauthorised access and protect IT systems.

Where such technical data constitutes personal data, processing may be based on the legitimate interest of FORTIS CONSULTING in maintaining the security and reliability of its website and information systems, in accordance with Article 6(1)(f) GDPR.

11. To whom we may disclose personal data

Personal data is not sold or transferred to third parties for their own marketing purposes.

Data may be made available to third parties only where there is an appropriate legal basis and where necessary. This may include:

• IT service providers
• the web hosting provider
• providers of business and accounting software solutions
• email and data storage service providers
• external professional associates where necessary to provide the agreed service
• banks and payment service providers
• competent authorities of the Republic of Croatia
• the Croatian Tax Administration
• courts and other public authorities where there is a legal obligation
• other recipients where the transfer is necessary to perform a contract or protect legal interests.

Where third parties process personal data on our behalf as processors, we require them to provide appropriate data protection and comply with applicable data protection rules.

12. Transfers of data outside the European Economic Area

We strive to process personal data within the European Economic Area.

However, the use of certain technology providers may involve the transfer of, or access to, data from countries outside the European Economic Area.

Where such a transfer takes place, personal data is transferred only where an appropriate legal mechanism exists in accordance with the GDPR, for example a European Commission adequacy decision, standard contractual clauses or another appropriate safeguard.

Information about specific international transfers should be provided where applicable to the tools and services the website actually uses.

13. Data retention period

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as we are required to keep it under applicable regulations.

Data relating to the business relationship and accounting documentation is kept for the periods prescribed by tax, accounting and other relevant regulations.

Data from enquiries by potential clients is kept for as long as reasonably necessary to handle the enquiry and any further business communication, unless there is another legal basis for keeping it longer.

Data processed on the basis of consent is processed until consent is withdrawn or the purpose for which consent was given ceases, unless there is another valid legal basis for keeping it.

After the relevant period expires, data is deleted, anonymised or otherwise securely removed, unless the law requires it to be kept further.

14. Security of personal data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental or unlawful loss, destruction, alteration and unauthorised disclosure.

Protection measures are adapted to the nature of the data, the purpose of processing, technical possibilities and the assessed risk.

Access to personal data is limited to persons who need such access to perform their work.

15. Your rights

Right to information

You have the right to receive clear information about how we process your personal data.

Right of access

You have the right to request confirmation of whether we process your personal data and, where applicable, access to that data and information about its processing.

Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request its correction or completion.

Right to erasure

Under prescribed conditions, you have the right to request the erasure of your personal data. The right to erasure is not absolute and does not apply where we must keep the data to comply with a legal obligation or to establish, exercise or defend legal claims.

Right to restriction of processing

In cases provided for by the GDPR, you may request that the processing of your personal data be restricted.

Right to data portability

Where the legal conditions are met, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

Right to object

Where processing is based on legitimate interest, you have the right, on grounds relating to your particular situation, to object to such processing. Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

Right to withdraw consent

Where we base processing on consent, you can withdraw your consent at any time.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data does not comply with the regulations, you have the right to lodge a complaint with the competent supervisory authority. In the Republic of Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).

16. How to exercise your rights

To exercise your rights or obtain further information about the processing of personal data, you can contact us at: info@fortisusluge.hr.

Please include enough information in your request for us to understand which processing it relates to.

To protect your personal data, we may, where justified, request additional information needed to confirm the identity of the person making the request.

We respond to requests within the time limits set by the GDPR.

17. Automated decision-making and profiling

Through this website, FORTIS CONSULTING does not make decisions that produce legal effects or similarly significantly affect users based solely on automated processing of personal data, unless explicitly stated otherwise in the future together with appropriate information and a legal basis.

18. Links to other websites

Our website may contain links to third-party websites.

FORTIS CONSULTING is not responsible for the way in which the independent owners of those websites process personal data.

We recommend that users check the privacy rules of the relevant external website before providing any personal data.

19. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our business, technical solutions or applicable regulations.

The current version will always be available on this website.

In the case of significant changes, we will, where appropriate, also inform users of the changes.

20. Contact

FORTIS CONSULTING
business consultancy (sole trader)
owner: Petra Božić Papa
Odra Sisačka, Odra-cesta 189
Republic of Croatia

Email: info@fortisusluge.hr
Phone: +385 91 4590 589