top of page

Privacy Policy

Effective from 27 October 2026.

 

1. Who processes your data

The controller is the sole proprietorship Istra-Tim, owner Vedran Urbančić, Borut, Sandalji 31, 52402 Cerovlje, Croatia, OIB 06781091643 (hereinafter: Istra-Tim). For any questions about personal data, contact us at info@istra-tim.com or +385 52 562 121. Istra-Tim is not required to appoint a data protection officer, so please send enquiries to the e-mail address above.

 

2. What data we collect and where from

  • Data you send us via the website form, e-mail or phone: name, company, e-mail, phone, the content of your enquiry, photos and drawings, and technical details of your equipment (e.g. belt width and type, plant location).

  • Data from business cooperation: contact persons of customers and suppliers and data needed for quotations, contracts, delivery and invoicing.

  • Job applications: CVs and any data the candidate sends us.

  • Website usage data: IP address, browser and device type, pages visited – only with your consent, except for strictly necessary cookies.

  • Video surveillance recordings in the workshop and warehouse.

We do not knowingly collect data from children and we do not make decisions based solely on automated processing.

 

3. Purposes and legal bases

  • Answering enquiries and preparing quotations – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

  • Performing contracts, delivery, service and complaints – contract (b).

  • Invoices, accounting and taxes – legal obligation (c).

  • Business communication with existing customers and suppliers – legitimate interest (f).

  • News and promotional e-mails – consent (a); you can unsubscribe at any time.

  • Recruitment – steps before entering into a contract (b); keeping applications for future openings only with consent (a).

  • Video surveillance to protect people and property – legitimate interest (f).

  • Analytics and ad measurement via cookies – consent (a).

 

4. Who we share data with

We do not sell your data. We share it only where necessary:

  • with processors providing services to us under a data processing agreement: Wix.com and apps on its platform (website and forms), Google (Google Analytics, e-mail), Meta (Facebook Pixel), our accounting service and IT support;

  • with couriers and subcontractors where needed to carry out the work;

  • with public authorities where required by law.

Wix, Google and Meta may process data outside the European Union (USA). Such transfers are based on the European Commission adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses.

 

5. How long we keep data

  • Enquiries and quotations that did not lead to an order: 2 years from the last contact.

  • Contracts, invoices and accounting documents: 11 years, as required by Croatian accounting and tax regulations.

  • Job applications: until the selection is completed; with your consent, up to 1 year for future openings.

  • Newsletter recipients: until they unsubscribe.

  • Video surveillance recordings: up to 6 months, unless needed as evidence in proceedings.

  • Cookies: according to your choice in the cookie settings (see section 7).

 

6. Your rights

You have the right to access your data and obtain a copy, to rectify inaccurate data, to erasure when the data is no longer needed or you withdraw consent, to restrict processing, to data portability and to object to processing based on legitimate interest. You may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Send your request to info@istra-tim.com. We reply without undue delay and within one month at the latest. If you believe your rights have been infringed, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.

 

7. Cookies

  • Strictly necessary cookies (site operation, security, remembering your cookie choice) – no consent needed.

  • Analytics cookies (Google Analytics) – only with consent.

  • Marketing cookies (Facebook Pixel) – only with consent.

You can change your choice at any time via the “Cookie settings” link at the bottom of the page or in your browser settings.

 

8. Security

Only people who need the data for their work have access to it. The website uses an encrypted connection (HTTPS), and processors are obliged to apply appropriate security measures.

 

9. Changes

We update this policy when necessary. The current version and its date are always published on this page.

 

 

Website terms of use

  • The content of this website (texts, photos, logo) is the property of Istra-Tim and may not be used for commercial purposes without written permission.

  • Information on this website is provided for general information and we strive to keep it accurate; it does not constitute a legally binding offer – please request a quotation for exact terms.

  • We are not responsible for the content of external websites linked from this site.

bottom of page