Last updated: 14 April 2026
Data controller
The controller of your personal data is CODE. društvo s ograničenom odgovornošću za računalno programiranje (CODE. d.o.o.),
Kralja Zvonimira 24, 32281 Ivankovo, Croatia, OIB 97978674887, MBS 030312738.
Contact for privacy matters: info@code.hr.
The company is represented by Robert Matijević, director. Under applicable transparency rules, the beneficial owner is
Robert Matijević (100% direct ownership).
Scope
This policy describes processing related to this public website (browsing, contact channels published on the site, and similar interactions).
If we enter into a separate services agreement with you, additional or more specific privacy information may be provided in that context.
Categories of data we may process
- Technical and usage data — such as IP address, browser type, device information, pages visited, and timestamps, collected through hosting and security logs where applicable.
- Communication data — such as your name, email address, phone number, and message content when you email us or use contact forms on the site.
- Newsletter data — if you subscribe to updates, your email address and subscription preferences.
- Recruitment data — if you apply for a role through our careers flow, information you submit in your application.
Purposes and legal bases (GDPR)
We process personal data for the following purposes, based on the legal bases indicated:
- Operating and securing the website (legitimate interests in providing a stable and secure online presence; where required, consent for non-essential cookies).
- Responding to enquiries (legitimate interests and, where applicable, steps prior to entering into a contract at your request).
- Newsletters (consent, where we rely on consent; you may withdraw consent at any time).
- Recruitment (legitimate interests and/or steps prior to a contract, depending on the stage of the process).
- Compliance with law (legal obligation, where applicable).
Retention
We keep personal data only for as long as necessary for the purposes above, including statutory limitation periods, accounting, or litigation needs where relevant.
Technical logs are typically retained for a limited period defined by our hosting and security configuration.
Processors and transfers
We may use trusted service providers (for example hosting, email, analytics, or applicant tracking tools) who process data on our instructions and under appropriate agreements.
If personal data is transferred outside the European Economic Area, we implement safeguards recognised under EU law (such as Standard Contractual Clauses) where required.
Your rights
Subject to applicable law, you may have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data in certain circumstances;
- restrict processing;
- data portability, where applicable;
- object to processing based on legitimate interests;
- withdraw consent where processing is consent-based;
- lodge a complaint with a supervisory authority.
In Croatia, the supervisory authority is the Croatian Personal Data Protection Agency (AZOP).
More information: azop.hr.
Cookies
We may use cookies and similar technologies that are strictly necessary for the website to function, and—where you consent—analytics or marketing cookies.
You can control non-essential cookies through your browser settings and any cookie banner we provide. We will update this section if our use of cookies changes materially.
Security
We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, or misuse.
No method of transmission over the Internet is completely secure; we encourage you to use secure channels when sending sensitive information.
Children
This website is not directed at children under 16, and we do not knowingly collect their personal data. If you believe we have collected such data, please contact us so we can delete it.
Changes
We may update this Privacy Policy from time to time. The “Last updated” date will change accordingly. Material changes may be highlighted on the website where appropriate.