Effective Date: June 17, 2026.

This Privacy Policy for Tobis Inženjering d.o.o. (“We”, “Us”, or “Our”) explains how we collect, use, and share your information when you visit our website https://tobis.hr.

Thank you for choosing to use our website https://tobis.hr and for entrusting us with your valuable personal data. In this document, we aim to explain our privacy practices in the clearest possible manner. We strongly encourage you to read this document (and any related documents) carefully before using the website. If you do not agree with any of the terms stated in this document, please do not use the website, and if you are already using it, please discontinue its use immediately. By using the website, you acknowledge and agree to the practices described in this Privacy Policy.

What information do we collect about you?

We collect information to provide you with a seamless user experience of our services. For this purpose, we collect the following information. Some of it constitutes your personal data, and some may be considered sensitive personal data.

The personal data we collect about you includes:

• Name
• Email Address

How do we collect this information?

We may collect information about you in one of the following three ways:

• Information you provide to us
• Information we automatically collect from you
• Information we collect from third parties

Before explaining why we collect this information, we would like you to understand what these three terms mean.

a. Information you provide to us

When you register for a user account to use our service/product, we may ask you certain questions, such as your name or email address. This is information that you provide to us. This is not limited to the examples listed above and may vary depending on the nature of the service/product we provide.

b. Information we automatically collect from you

When you access our services through a device, we may automatically collect information from your device, for example through cookies. You can learn more about the automatic collection of personal data in the following section.

c. Information we collect from third parties

These third parties may include data aggregators, online directories, marketplaces, data exchanges, and similar sources from which we may collect information about you.

Cookies and Similar Technologies

Cookies are small data files stored on your device that allow us to retrieve information about you, such as login details, your preferences on our website, and other information.

Why do we collect information about you?

We collect information about you for various reasons. Among other things, it helps us provide you with better service. Below are the ways in which we use the information we collect about you.

• To perform a contract with you
• To contact users

How long do we retain your information?

We retain your personal data only for as long as necessary, unless a longer retention period is required or permitted by law (for example, for tax, accounting, or other legal purposes). No purpose stated in this notice requires us to retain your personal data for longer than the period during which users maintain an active account with us.

When we no longer have a legitimate business need to process your personal data, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store and isolate your personal data from any further processing until deletion becomes possible.

Do we share your information?

We may share your information with third parties in the following ways:

• Sharing with your consent: When you provide your consent, we may share your information with third parties for the purposes specified in the consent notice.
• Legal obligations: We may disclose information where we are legally required to do so in order to comply with applicable laws, governmental requests, judicial proceedings, court orders, or legal processes, such as in response to a court order or subpoena (including responding to public authorities to meet national security or law enforcement requirements).
• Business transfers: We may share your personal data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Sale/Sharing of Data

We do not sell or share the information we collect from our users.

GDPR Notices

Automated Processing

We do not use any automated processing of the personal data we collect.

Legal Basis for Collection

The General Data Protection Regulation (GDPR) requires us to identify and disclose the legal basis, or legal justification, for processing your personal data. Below are the legal bases under which we process your personal data.

Consent: We may process your personal data for the purposes described in this Privacy Policy with your consent.

Your Rights

In accordance with Articles 12 through 23 of the General Data Protection Regulation, you, as the data subject, have the following rights:

• The right to object to the processing of personal data in certain circumstances. Please refer to the relevant GDPR provisions for details.
• The right to access the information we have collected about you and receive a copy of it in an accessible format.
• The right to restrict the processing of your personal data for a limited period under certain circumstances. Please refer to the relevant GDPR provisions for details.
• The right to rectify or amend personal data that you believe is outdated, incomplete, or inaccurate.
• The right to object to automated processing of your personal data.
• The right to have your personal data erased, also known as the “right to be forgotten.”

To exercise any of the above rights, you may use the contact information provided in this Privacy Policy.

Consequences of Withholding Consent

Your consent is necessary for us to collect information in order to provide our services smoothly. However, you may choose not to provide consent. Please note that withholding consent may have consequences, including limited access to our services and reduced website functionality.

Children’s Privacy

We do not knowingly provide our services to children. If you are a parent or legal guardian and believe that your child has provided us with information without your consent, please contact us. Once we verify that such information has been collected without parental consent, we will remove it from our database.

Security of Your Personal Data

We take reasonable measures to ensure that the information we collect from you is securely stored and protected to the greatest extent possible. However, no method of internet transmission or electronic storage is completely secure, and therefore we cannot guarantee absolute security. While we use commercially reasonable and appropriate safeguards to protect your information, we cannot promise that it will be 100% secure.

Links to Other Websites or Applications

Our website may contain links to external websites, applications, or services. These are not operated by us and are not governed by this Privacy Policy or our practices. We strongly encourage you to review the privacy policies of any such websites or services before using them to ensure that you do not share personal information you do not wish to disclose.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or our privacy practices. We encourage you to review this Privacy Policy periodically to ensure that it continues to meet your expectations.

This Privacy Policy becomes effective upon publication on this page.

Contact Us

If you have any questions or concerns regarding your privacy, or if you wish to exercise any of your rights, you may contact us using the following information:

Address: Tobis Inženjering d.o.o.
Široka ulica 2 (Kalelarga)
23000 Zadar
Croatia

Email Address: info@tobis.hr

Link to our contact page: https://tobis.hr/en/contact/