Privacy Policy

Arbona d.o.o., Zagreb, Horvatova 82, OIB: 59297630057 (hereinafter: Arbona.hr) respects your privacy and the security of your personal data. The collection, use, and processing of your personal data are carried out in accordance with this Privacy Policy and the provisions of the Personal Data Protection Act (OG 103/03, 118/06, 41/08, 130/11, 106/12), or other applicable regulations in the Republic of Croatia governing personal data protection.

The privacy of our clients is extremely important to us, and we do everything to maintain the confidentiality of their data. Please periodically check this policy due to potential changes.

User Consent and Withdrawal

Arbona.hr collects personal data provided voluntarily by users. By accepting the Terms of Use of Arbona.hr, which include this Privacy and Data Protection Statement, users are deemed to have given their explicit consent to the processing of their personal data for the purpose of using the services offered by Arbona.hr. Users can withdraw their consent at any time in writing.

Data Controller

Arbona is the controller of your personal data.

This Privacy Policy applies to all personal data of users that we collect and process, directly or through our partners.
Personal data is any data relating to an identified or identifiable natural person, directly or indirectly.
Data processing includes any action performed on personal data, such as collection, storage, use, access, and transfer.
This Policy does not apply to anonymous data. Anonymous data is data that cannot be linked to a specific individual.

What type of data is collected?

Arbona.hr collects all personal data that accumulates when users use Arbona.hr's services (website) and communicate with Arbona.hr. Only data essential for achieving the intended purpose is collected, and its scope will not exceed what is necessary.

This includes:

Data entered by users via online forms or provided in other ways while using Arbona.hr services (e.g. phone or email), including personal data (name, address, phone number, date of birth, gender, payment method, etc.),
user data sent or automatically generated (e.g., date and time of service use, current and previously visited pages, IP address, browser information, device ID, current location if provided, etc.), and interaction data available without additional software installation (e.g., mouse movements and clicks, or keyboard inputs),
personal data generated by Arbona.hr or third parties (e.g., passwords),
correspondence and other communication with users (e.g., emails, phone calls, which may be recorded if necessary).

Purpose of Data Processing

Arbona.hr may use user data collected or received for the following purposes:

Providing the services offered by Arbona.hr,
Preparing various types of statistics (e.g., interest levels for products and service comparisons),
Internal training and quality control,
Maintaining and developing client relationships,
Ensuring system and data security and availability for Arbona.hr and its service providers,
Corporate transactions that may affect user data,
Prevention, detection, and suppression of misuse,
Responding to legitimate official requests or in relation to legal disputes involving Arbona.hr.

Additional purposes may arise from specific circumstances, legal obligations, or necessary data collection purposes.

Brochures, Commercial Communication

In connection with Arbona.hr’s services, we may periodically send brochures or other content (commercial in nature) to the address or number of any user who registered their email or mobile number with Arbona.hr. By registering, users give their consent to receive such communications. However, they can inform Arbona.hr at any time and free of charge that they no longer wish to receive or be notified of such content.

Are Data Shared with Third Parties?

With the exceptions below, Arbona.hr generally does not share personal data with third parties:

Arbona.hr may engage third parties to process personal data on its behalf and solely for business purposes (e.g., market research institutions). Appropriate measures will be applied to ensure such third parties process the data only as Arbona.hr is authorized;
Data may be shared with third parties at the user’s request (registration, quote requests, etc.), or if necessary to provide the requested service or if Arbona.hr explicitly informs users that data will be shared. In exceptional cases (e.g., abuse), data may be shared with third parties for other purposes outlined in this policy or as required by law. Arbona.hr cannot guarantee third parties will adhere to the same privacy standards as Arbona.hr;
Arbona.hr may disclose personal data to third parties if legally required.

Furthermore, Arbona.hr may provide anonymized user data to third parties. Such data cannot identify individuals.

All Arbona.hr employees and partners are bound by contractual obligations to respect data privacy principles.

Where and How Are Data Stored?

In storing or otherwise processing user data, Arbona.hr applies appropriate technical and organizational measures to prevent unauthorized or insecure processing. These measures are regularly reviewed and updated. The same applies to third parties managing our systems.

Personal data is stored in a form allowing user identification no longer than necessary for the intended purpose.
We use various security measures, including encryption and authentication, to protect the integrity, availability, and confidentiality of your data.

Among other things, we use:

Strictly limited personal access on a “need-to-know” basis, solely for informed purposes,
Secure data transmission,
Continuous IT system access monitoring to detect and prevent misuse.

How Long Do We Retain Your Data

We retain and process personal data only as long as necessary for specific legitimate purposes unless a longer retention period is required by law. For marketing consent, data is stored until the consent is withdrawn. For declined offers without marketing consent, data is retained for one year, or deleted immediately upon request.

Personal data no longer needed is either irreversibly anonymized or securely destroyed.

Questions and Suggestions, Requests for Information, Corrections or Deletions

Users may withdraw consent for personal data processing at any time, except for statistical data processing where individuals cannot be identified. Users may also request correction or modification of personal data submitted for processing. Consent withdrawal or correction requests must be submitted in writing via email to gdpr@arbona.hr or by post to Horvatova 82, 10 000 Zagreb. Users may explicitly object to the processing of their data for marketing purposes by contacting info@arbona.hr or by post to Horvatova 82, 10000 Zagreb. All questions, suggestions, and comments regarding data processing are welcome.

Anyone who believes their data protection rights have been violated may file a complaint with the Croatian Personal Data Protection Agency.
Contact details for the Data Protection Officer:

gdpr@arbona.hr
+385 99 7550 616
ARBONA
Horvatova 82, Zagreb 10 000
OIB: 59297630057