Mikro HR
HR

Mikro HR, obrt za poslovno savjetovanje (business consultancy), owner Petra Kralj

Privacy policy

By using the website mikrohr.hr you accept the terms of use. Your personal data is processed on the basis of legitimate interest, legal obligations or active consent where required. If you do not want your data to be processed, contact us or stop using the website.

1. General

This is the Privacy policy of Mikro HR, obrt za poslovno savjetovanje (business consultancy), owner Petra Kralj, Lužnička ulica 35B, 10290 Zaprešić, Croatia, OIB: 37611433409, e-mail: zastita.podataka@mikrohr.hr.

The business acts as the controller of your personal data in accordance with the GDPR and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette NN 42/2018).

This Privacy policy applies to the personal data of clients, website visitors and business contacts who use our HR consulting services.

2. Terms and definitions

The definitions in this Privacy policy are based on the terms used by EU legislation in drafting and adopting the General Data Protection Regulation.

General Data Protection Regulation (GDPR)

Regulation (EU) 2016/679 — a regulation by which the European Parliament, the Council of the EU and the European Commission intend to strengthen and unify the protection of personal data of all individuals within the EU. The Regulation also applies to the transfer of personal data outside the EU.

Personal data

Any data relating to an identified natural person — directly or indirectly, by name and surname, identification number, location data or online identifiers.

Data subject

Any natural person whose identity has been or can be established, and whose personal data is processed by the controller.

Processing

Any operation applicable to personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure or destruction.

Controller

Any natural or legal person who determines the purpose and means of processing personal data.

Processor

A natural or legal person who processes personal data on behalf of the controller.

Consent

Any specific, informed and unambiguous indication of the data subject’s wishes by which they agree to the processing of personal data.

User

Any natural person who accesses our website and is involved in any operation related to the processing of personal data.

Client

A contracting party of Mikro HR.

3. Changes to the privacy policy

Mikro HR reserves the right to amend this Privacy policy at any time by publishing its updated text on the website mikrohr.hr. The amended Policy applies from the moment of publication.

Any further use of the website by the User after the changes are published will be considered acceptance of the amended Privacy policy.

For all questions or requests regarding the processing and protection of personal data: zastita.podataka@mikrohr.hr

4. What personal data do we process?

We process the following personal data:

  • first name and surname
  • contact information (phone number, e-mail address)
  • company name and job title
  • data you have provided yourself via the contact form, the Mini Questionnaire or in communication with us
  • data from your LinkedIn profile if you contacted us via that platform
  • analytics data on website use (via Google Analytics, with your consent)

5. For what purposes and on what legal basis do we process your personal data?

Providing consulting services — on the basis of a contract or pre-contractual steps taken at your request, in accordance with Art. 6(1)(b) GDPR.

Communication and responding to enquiries — on the basis of legitimate interest in accordance with Art. 6(1)(f) GDPR, or your consent in accordance with Art. 6(1)(a) GDPR when you contacted us via the contact form or e-mail.

Sending informational materials and newsletters — exclusively on the basis of your explicit consent in accordance with Art. 6(1)(a) GDPR.

Conducting statistical and analytical research — on the basis of your consent in accordance with Art. 6(1)(a) GDPR or legitimate interest in accordance with Art. 6(1)(f) GDPR.

Fulfilling legal obligations (e.g. retaining accounting records) — on the basis of a legal obligation in accordance with Art. 6(1)(c) GDPR.

6. Who has access to your personal data?

We consider your personal data a business secret and protect it in accordance with applicable regulations. Data is available to third parties only in the following cases:

  • Third-party service providers who help us in our day-to-day business (e.g. accounting services, IT support) — they process data exclusively according to our instructions and are contractually bound to confidentiality.
  • Third-party processors (e.g. e-mail platform, analytics tools) — contractually bound to apply data protection measures.
  • Competent authorities — within the scope of supervising the lawfulness of business operations, in accordance with their legal powers.

7. How do we protect your personal data?

We make every reasonable effort to ensure the security of personal data. Your data is continuously protected against loss, falsification, manipulation, unauthorised access or unauthorised disclosure.

The protective measures we apply include: regular software updates, backups, the use of encryption where possible, the use of secure methods of data exchange, and monitoring and taking action in the event of security incidents.

8. How long do we keep your personal data?

We keep your personal data in accordance with applicable laws:

  • only for as long as necessary for the purpose of processing
  • for the period prescribed by law (e.g. 10 years for keeping issued invoices)
  • for the period necessary to perform the contract, including warranty periods (e.g. 5 years from the fulfilment of contractual obligations)

After the period expires, we delete the data within an additional period of one (1) year.

Personal data processed on the basis of consent is kept until you withdraw your consent. Data collected via the contact form and the Mini Questionnaire is processed and kept for 24 months on the basis of consent.

Personal data processed on the basis of legitimate interest is kept for as long as that interest exists and is deleted within one (1) year of the legitimate interest ceasing.

9. Your rights

You have the following rights in relation to the processing of your personal data:

Access to personal data — you can request confirmation of whether we process your data and obtain access to it.

Rectification of inaccurate personal data — you can request the correction of inaccurate data or the completion of incomplete data.

Erasure of personal data — you can request the erasure of data when it is no longer necessary for the purpose for which it was collected.

Restriction of processing — you can request the restriction of processing in certain cases prescribed by the GDPR.

Data portability — you can obtain and request the transfer of data we process on the basis of your consent.

Right to object — you can object to the processing of data on the basis of legitimate interest.

Withdrawal of consent — you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint — you can lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr) at any time.

You can exercise your rights by:

  • sending a request to the e-mail: zastita.podataka@mikrohr.hr
  • writing “Request” in the subject line
  • stating which right you wish to exercise
  • attaching identification details (first name, surname and date of birth, or OIB)

We will respond to every valid request within one month at the latest.

10. Contact

For all questions regarding the privacy policy, you can contact us:

Mikro HR, obrt za poslovno savjetovanje, owner Petra Kralj
Lužnička ulica 35B, 10290 Zaprešić, Republic of Croatia
E-mail: zastita.podataka@mikrohr.hr

Effective date: 8 June 2026.