Privacy Policy

The controller of personal data is Advanced Business Systems Ltd. (Napredni poslovni sustavi d.o.o.), Vitasovićeva poljana 2, 10000 Zagreb, Croatia, OIB: 87642110559.

For questions about personal-data processing and to exercise your rights, contact ir@naps.hr.

When you submit a general enquiry, we process your full name, organisation, business e-mail address, enquiry content and selected area of interest. Telephone number and indicative deadline are processed only if you voluntarily provide them.

When you submit a partnership enquiry, we process the company name, contact person’s name, business email, country, partnership category, areas of expertise and cooperation proposal. Company website and target markets are processed only if you voluntarily provide them.

We record consent time, form language, receipt time and enquiry-processing status. Attachments are not collected through the website. To prevent abuse, submission frequency is limited; the temporary technical record contains a cryptographic hash used for rate limiting rather than a direct IP address.

Form data is processed solely to receive, understand and respond to your enquiry, assess proposed partnership cooperation and prepare further business communication you request. The legal basis is your consent, which you may withdraw at any time without affecting processing carried out lawfully before withdrawal.

Technical and security records necessary to protect the form and systems may be processed on the basis of legitimate interest in preventing abuse and maintaining the website. Enquiry data is not used for marketing messages without a separate legal basis.

Enquiries are stored in a protected database within Lovable Cloud infrastructure. Public visitors cannot read, modify or delete received enquiries. Access is restricted to authorised server-side processing.

Website operation uses hosting, database-infrastructure and technical service providers. Google Fonts is used for typography and may receive technical data such as an IP address when fonts load. External links, including partner websites, receive data only when you visit them and are governed by their own policies.

Where a provider processes data outside the European Economic Area, the transfer must rely on an applicable lawful mechanism and appropriate safeguards. The exact providers, locations and contractual measures must be confirmed by NAPS before final publication.

Proposed for owner approval: enquiries are retained for no longer than 12 months after communication ends, unless longer retention is required by law or to establish, exercise or defend legal claims. Consent and security records are retained only as long as needed to demonstrate and protect processing.

After the approved period, data is deleted or anonymised. Backups may retain data for a limited period under infrastructure-provider rules. Final periods and the deletion procedure must be confirmed in NAPS internal procedures.

Subject to legal conditions, you may request access, rectification, erasure, restriction, objection and portability, and withdraw consent. Send requests to ir@naps.hr.

You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP). NAPS should include identity verification and tracking of statutory response deadlines in its internal procedure.