Privacy Policy

This Personal Data Processing Notice (hereinafter: the “Notice”) describes how Brodometalurgija d.o.o. (hereinafter: “Brodometalurgija”) collects, processes and discloses personal data in connection with the services we provide on this website: https://www.brodometalurgija.hr/.

The term “personal data” refers to any information relating to an identified or identifiable individual (“data subject”). An identifiable individual is a person who can be identified directly or indirectly, particularly by reference to identifiers such as a name, identification number, location data, online identifier, or similar data. Identification may occur directly from the information itself or in combination with other information in our possession or that is likely to come into our possession.

Unless otherwise stated in this Notice, the terms defined in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (https://eur-lex.europa.eu/legal-content/HR/TXT/?uri=celex%3A32016R0679) (General Data Protection Regulation – hereinafter: “GDPR”) such as “processing”, “controller”, “supervisory authority”, “consent”, “legitimate interest”, “anonymisation”, and “special categories of personal data” are used in this Notice with the same meaning.


Data controller

Brodometalurgija d.o.o.
Solinska 58, 21 000 Split, Hrvatska
OIB: 31353718090

Contact:
[email protected]
+385 21 536 029

Brodometalurgija acts as the data controller in relation to the processing of personal data described in this Notice. This means that Brodometalurgija determines how personal data are processed and for what purposes they are used.


Data we collect, when we collect it and for what purposes

The data we collect through this website include the following:


Processing personal data for contact purposes

We collect the following data when you submit an enquiry via the contact form on our website, send us an email, contact us by telephone, or otherwise submit an enquiry using the contact details available on our website. These data are used solely for the purpose of responding to your enquiry or fulfilling your request and are not used for any other purpose. If you do not provide the personal data required for us to respond to your enquiry, we may not be able to respond to your request or comment.

Contact details collected: First and last name, email address, telephone or fax number


Legal basis for data processing

Processing is carried out pursuant to:

Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, as responding to enquiries represents a legitimate interest for conducting our business.

Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract, particularly where your enquiry relates to potential cooperation or an existing contractual relationship.


Processing personal data in job applications

Your name and surname, contact details (email address and telephone number) and place of residence, as well as information about your education, previous work experience and any other information you choose to share with us in your CV or application when expressing interest in joining our team. If you pass through our selection process and we arrange an interview, we process additional information collected from you during the interview, such as the results of tests that we asked you to complete on that occasion, as well as notes and reviews from our colleagues who conducted the interview with you. We also collect information about your professional experience from your references, if you have provided them.

We collect the above data when you apply for open job vacancies on our website, as well as when you contact us regarding employment independently of any published vacancy. We collect and use the above personal data for the purpose of identifying potential employees, that is, to assess whether you are a suitable candidate for a position at Brodometalurgija.


Legal basis for processing job application data

Article 6(1)(b) GDPR – processing necessary for the performance of a contract or for taking steps prior to entering into a contract.

Article 6(1)(a) GDPR – where a candidate is not selected but we wish to retain their application for future vacancies, we will request the candidate’s consent to retain their personal data.


Processing personal data for legal claims and legal obligations

We may also process personal data:

  • for the establishment, exercise or defence of legal claims
  • where necessary to comply with legal obligations applicable to the data controller


Legal basis

Processing is carried out pursuant to:

Article 6(1)(f) GDPR – legitimate interest in establishing, exercising or defending legal claims.

Article 6(1)(c) GDPR – processing necessary to comply with a legal obligation.


Cookies

Website usage data: e.g. IP address, the internet browser you use, the operating system you use, the type of device you use, time spent on the website, number of visits to the website and features used, pages you have opened, etc.

In order to automatically collect these data, we use so-called cookies. Please refer to our Cookie Policy for additional information about cookies and how you can change your settings to delete or refuse cookies.

We collect website usage data when you visit our website and use them to manage our website and our technical solutions, understand how visitors navigate through our website, and ensure the security of our website. We also use them to improve your experience when using our website and services, for example by providing you with the most relevant experience by remembering your preferences during repeated visits.


Legal basis for cookie processing

Article 6(1)(f) GDPR – necessary cookies are processed on the basis of legitimate interest, as they are strictly required for the functioning of the website. You may disable them in your browser, but doing so may cause the website not to function properly.

Article 6(1)(a) GDPR – other cookies are processed only on the basis of your consent.


Further processing for new purposes

If we intend to process your personal data for a new purpose not covered by this Notice, we will provide you with a new notice explaining the intended use before such processing begins and, where necessary, request your consent.


Categories of data recipients

We may share personal data with the following recipients:

  • external service providers who assist us in operating our business or processing personal data on our behalf (e.g. IT providers, technical support, accountants). These service providers may access personal data only to perform the tasks assigned to them and must implement appropriate technical and organisational measures to protect personal data.
  • public authorities or other data controllers, such as courts, administrative bodies, supervisory authorities for personal data protection, or our legal advisors, where disclosure is necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.


Transfers of personal data to third countries

All personal data that we collect and process are stored in the Republic of Croatia and are not transferred or stored in other third countries and/or international organisations outside the European Economic Area (hereinafter: “EEA”).

If in the future it becomes necessary to transfer your personal data to organisations in third countries or international organisations, and these organisations may have different standards of personal data protection from those established within the EEA and are not subject to an adequacy decision of the European Commission, we will ensure, as required by applicable laws and regulations, that personal data and the rights of data subjects are adequately protected through appropriate safeguards. Such safeguards may include, for example, standard contractual clauses on data protection adopted by the European Commission and/or the competent supervisory authority. Where permitted by law, we may also rely on derogations for specific situations provided under Article 49 of the GDPR, such as your explicit consent. We will inform you in a timely manner about such transfers to third countries or international organisations, as well as about the safeguards we have implemented to protect your personal data in this regard.


Data retention period

We retain your personal data in a form that allows identification of the data subject only for as long as necessary for the purposes for which the personal data were collected, as stated earlier in this Notice. The criteria for determining the storage period are as follows:

Your personal data collected on the basis of your consent will be retained for the period specified in the consent, which you may withdraw or restrict at any time. If you do so, we will cease processing the personal data in question for the purposes for which you provided your consent.

With regard to the retention of data collected through cookies, please refer to our Cookie Policy.

With respect to personal data that we process in order to comply with our legal obligations, such personal data will be retained for the storage periods prescribed by law. For the purpose of establishing, exercising or defending the rights of the data controller in legal claims, personal data will be retained for five years after the expiry of the prescribed data retention period (the general limitation period prescribed by law). In the event of a dispute or the initiation of judicial, administrative or similar proceedings, personal data will be additionally retained for the duration of the dispute or such proceedings and for ten years following the issuance of a final decision (the limitation period for exercising rights arising from a final court decision or decision of another public authority as prescribed by law). In such cases, we will restrict the retention or processing of your personal data exclusively to the data necessary for the establishment, exercise or defence of legal claims.

After the retention or other processing of personal data is no longer necessary for the purposes stated in this Notice, we will delete or anonymise them in such a way that they can no longer be associated with a specific individual, at which point they will cease to constitute personal data.


Links to third-party websites

Where we provide links to websites of other organisations (e.g. Facebook, Instagram), this Notice does not apply to the processing of personal data on those websites. We encourage you to read the privacy notices of those websites.


Your rights under data protection law

  • Right of access

You may request confirmation as to whether your personal data are being processed and obtain access to those data.


  • Right to rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.


  • Right to erasure

You have the right to request the erasure of your personal data if they are no longer necessary for the purposes for which we process them, if you have withdrawn the consent on which the processing was based and there is no other legal basis for the processing, if you have objected to the processing of your personal data and there are no overriding legitimate grounds for the processing, if the personal data have been unlawfully processed, if the personal data must be erased in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is subject, or if the personal data were collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.


  • Right to withdraw consent

The right to withdraw your consent at any time, if the processing is based on consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.


  • Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if you contest the accuracy of those data (for a period enabling us to verify the accuracy of the personal data), if the processing is unlawful and you oppose the erasure of the data, if you have objected to the processing of your data, or if the data are no longer necessary for our processing purposes but you require them for the establishment, exercise or defence of legal claims.


  • Right to data portability

The right to request that we provide you with your personal data and, where possible, transfer those data directly to another data controller, where applicable.


  • Right to object

The right to object to the processing of personal data in cases where the processing is carried out on the basis of legitimate interest.


  • Right to lodge a complaint with a supervisory authority


Exercising your rights

You have the right at any time to exercise any of the above rights by contacting us at [email protected]. When submitting a request, please provide the necessary information required for us to process your request and to verify your identity. We will act upon your request without undue delay or contact you for additional information if necessary. We will also provide you with information on the actions taken without undue delay and in any case within one month of receiving the request. This period may be extended by an additional two months if necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receiving the request, together with the reasons for the delay.

Your rights are exercised free of charge, except in exceptional cases where requests are manifestly unfounded or excessive, in particular due to their frequent repetition. In such cases, we reserve the right to charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the requested action, or to refuse to act upon the request.

If you believe that our processing of your personal data violates your rights, you have the right to lodge a complaint with the competent supervisory authority for data protection. The contact details of the Croatian supervisory authority for data protection are:

Croatian Personal Data Protection Agency

Ulica Metela Ožegovića 16

10000 Zagreb

Email: [email protected]

Tel: +385 (0)1 4609-000

Fax: +385 (0)1 4609-099

Website: www.azop.hr


Changes to this Privacy Notice

As a rule, we conduct regular reviews of our personal data processing procedures. For this reason, as well as due to possible changes in legislation and the evolving nature of technology, this Notice may be amended from time to time. In the event of changes to this Notice, we will inform you accordingly in a timely manner.


The last review and update of this Privacy Notice was carried out in September 2025.