Privacy policy

1. Privacy at a glance

This overview explains what happens to your personal data when you visit our website or use our services. Personal data is any data that can identify you.

Controller: VIMA solutions d.o.o., Trg žrtava fašizma 1, 10000 Zagreb, email: privacy@zbroj.ai.

2. What we use your data for

Providing the website: some data is collected to display the site correctly (strictly necessary cookies).

Communication: to answer your enquiries via form, email or phone.

Contract performance: to deliver the agreed accounting and tax services.

Recruiting: to run application processes.

Analytics: to measure site usage, only with your consent.

3. Legal basis

Processing is based on Article 6(1) GDPR: consent (a), contract performance (b), legal obligation (c) and legitimate interest (f).

As an accounting service we are subject to statutory retention periods under the Croatian Accounting Act and General Tax Act.

4. Cookies and analytics

We use strictly necessary cookies required to operate the site.

Analytics events are recorded only after you consent via the cookie banner. You can withdraw consent at any time via “Cookie settings” in the footer.

Analytics data is stored in our database inside the European Union and is never sold to third parties.

5. Forms and the calculator

When you send an enquiry we store the data you entered (name, email, message, company details) to process it.

When you save a price calculation we store the calculation parameters and, if provided, your contact details. Saved links are deleted on request.

6. Recipients and processors

We use hosting, database and email delivery providers who process data on our behalf under data processing agreements.

Data is generally processed within the European Economic Area. Where transfers outside the EEA are unavoidable we use the European Commission's standard contractual clauses.

7. Retention

Enquiries are kept for up to 24 months after the last communication.

Accounting records are kept for statutory periods (generally 11 years for accounting documents, 6 years for supporting records).

Analytics events are kept for a maximum of 24 months.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection.

You may withdraw consent at any time without affecting the lawfulness of prior processing.

You can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.

9. Security and confidentiality

We use TLS encryption, access controls and regular backups.

As an accounting service we are bound to business confidentiality for all client data.