This policy explains which personal data is collected through the website papam2.hr, why it is collected, how long it is kept and what your rights are. The General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR apply.
1. Data controller
- Name
- FORTIS CONSULTING, obrt za poslovno savjetovanje
- Owner
- Petra Božić Papa
- Registered office
- Odra-cesta 189, Odra Sisačka, 44000 Sisak, Hrvatska
- OIB (tax ID)
- 44550395987
- Registration number
- 99359898
- Website
- fortisusluge.hr
- info@fortisusluge.hr
- Phone
- +385 91 4590 589
For any questions about personal data, please write to info@papam2.hr.
2. What data is collected
- Contact form: full name, email address, message content and the date and time it was sent.
- Email: if you write directly, your email address and the content of your message.
- Server logs: for security and proper operation, the hosting provider automatically records the IP address, browser type and time of visit.
No data is collected for advertising and no visitor profiles are created.
3. Purpose and legal basis
- Replying to your enquiry and preparing a quote – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Security and proper operation of the website – legitimate interest (Art. 6(1)(f) GDPR).
- If you become a client: performance of the contract and legal obligations, e.g. issuing and keeping invoices (Art. 6(1)(b) and (c) GDPR).
4. How long data is kept
Messages sent through the contact form are kept for 12 months from receipt and are then deleted automatically. If an enquiry leads to cooperation, data needed for the contract and invoices is kept for as long as accounting and tax regulations require.
5. Who else has access to the data
The data is stored on the servers of the website and email hosting provider in the European Union, which processes it solely on behalf of the data controller. Data is not sold, not shared with third parties for marketing and not transferred outside the European Union. Fonts and other files are served from the website's own server, so no data is sent to external services such as Google when you visit.
6. Cookies
This website does not set any tracking, analytics or advertising cookies for visitors, so no consent is required for them. Strictly necessary cookies are set only for administrators who log in to edit the website.
7. Your rights
You may at any time request access to your data, its correction or deletion, restriction of processing and data portability, and you may object to processing. Please send your request to the email address above; you will receive a reply within one month at the latest.
If you believe your rights have been violated, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr.
8. Changes
This policy may be updated from time to time; the current version is always published on this page. Effective from 26.9.2026.