Privacy Policy

This Privacy Policy explains what personal data we collect, for what purposes we use it, and what your rights are regarding its processing.

1. Types of data we collect

We collect personal information voluntarily provided during account registration, use of the platform, form submissions, or communication via email and phone. This includes name, surname, email, phone number, address, and identification documents for KYC purposes.

2. Purpose and legal basis of processing

We process personal data to fulfill contractual and legal obligations, based on your consent for marketing and analytics, or for legitimate interests to improve security and functionality.

3. Use of hCaptcha protection

To prevent automated abuse (bots) and ensure platform security, we use the hCaptcha security service on certain forms. This service is provided by Intuition Machines, Inc. hCaptcha may process data such as IP address, browser and device information, and interaction data. Processing is based on our legitimate interest in maintaining system security (Art. 6(1)(f) GDPR). For more information, please refer to the hCaptcha Privacy Policy: https://www.hcaptcha.com/privacy and Terms of Service: https://www.hcaptcha.com/terms.

4. Data retention period

Data is retained for as long as necessary to fulfill processing purposes or comply with legal obligations, typically up to 5 years after termination of the contractual relationship.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and objection. You can withdraw consent at any time without affecting prior processing.

6. Controller and contact

Data Controller: Fine’sa Credos d.o.o., Ulica Ivana Kukuljevića Sakcinskog 25, 42000 Varaždin. Email: info@finesa-credos.hr. DPO contact: dpo@finesa-credos.hr.

Last updated: 28.02.2026.