top of page
Modern Work Space

PRIVACY POLICY

​We take your privacy seriously and want to ensure that everyone who uses our services is confident that we will protect their information and their rights

The General Data Protection Regulation (GDPR) is replacing existing data protection acts in EU countries, including Croatia. This regulation affects all EU and UK citizens, strengthening their digital rights and creating a stricter framework within which firms collect, retain, and process your personal data. As an international company, Innovo Consulting has taken the decision to uphold GDPR compliant practices globally, ensuring a consistent experience and greater confidence for all our customers worldwide.

Comprehensive reporting about the collection, processing, and use of your data ("data processing”) is the cornerstone of an effective privacy policy. As a result, we would like to inform you:

• for what type of activities we process data and when

• what types of data we process and the purposes for processing

• who will receive the data

• what your rights are associated with our processing of your data.

This privacy policy only governs the use of personal data on our website innovoconsulting.eu and including subpages (hereinafter referred to as "website"). If you leave our website via a link or visit our website on a social media platform, you will cross the boundaries of this data policy.

The transmission of information to or from this website is secured with TLS encryption.

 

I. Contact Information

The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):

Innovo Consulting d.o.o.

Ivana Adamovića 4

31000 Osijek, Croatia

E-Mail: privacy@innovoconsulting.eu 

 

II. General information on data processing

1. Collecting and processing personal data

The service of providing this website requires the processing of various types of information. Furthermore, the scope of data processing depends on your use of the functionalities of the website, e.g. whether you register in the job portal, communicate with us via the contact form, or consent to the processing of data.

You are not required to provide us with personal data. However, if the provision of data is technically required when you access our site, refusal will result in your being unable to access and use our website.

As a visitor to our websites, you are not subject to any automated decision-making within the meaning of Art. 22 GDPR.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is explained in the following section.

Reason for processing | Legal basis as per GDPR

Contract fulfillment or pre-contractual activities Art. 6 para. 1 b) Processing will only take place to the extent necessary to carry out and exercise the rights and obligations arising from the contract. Unless expressly stated otherwise, data will only be processed by us to this extent. Justifiable interest Art. 6 para. 1 f) Processing is carried out to the extent of our legitimate interest unless prevented by conflicting overriding interests on the part of the data subject. Our specific interest is explained in this privacy policy within the context of the processing description.

Consent Art. 6 para. 1 a) The data will be processed if you have expressly consented to the type and scope of data processing in question. You may withdraw your consent at any time going forward. However, this will not affect what has already been processed up until that point in time.

Legal obligation Art. 6 para. 1 c) Processing will occur to the extent it is necessary to fulfill Croatian or European statutory requirements.

3. Data deletion and duration of storage

If there is no longer a legal basis for processing your data, it will be deleted. In some cases, however, a legal basis may exist in a separate arena, or, a rationale that is no longer applicable may be replaced by a new one, e.g. the obligation to retain certain data as a statutory record-keeping requirement.

III. Data processing for the provision of services associated with this website

In order to set up a fully functional website for you, it is necessary to process certain types of information. This happens each time you visit our website. In addition, we offer various functionalities on our website which require additional data processing.

1. Log Files

When you visit our website, information about your visit is stored on servers (so-called log files). The data stored include your IP address which we treat as personal data. In addition, the following data is collected:

              • Date and time of the server request

              • Browser type and version

              • Operating system/version

              • Retrieved data volume

              • Http Response Code

              • Referrer,

              • URL retrieved

              • Web server process ID

The data cannot be merged with any other data sources. The storage of log files including your IP address serves the legitimate interest of providing our website and preventing its misuse. Stored log files will be deleted after 30 days at the latest, unless longer storage is necessary, for example, to ward off or investigate an attack on our website.

2. Cookies required for technical reasons

We use these cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be required to establish a connection or to improve the use of the website.

You can prevent the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

The use of technically required cookies and the associated data processing springs from our legitimate interest in providing you with a website that has a solid architecture and is easy to use. Technically required cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). How long persistent cookies are stored is determined by the provider and can also be checked by you in your browser.

 

3. Registration with Innovo Consulting

Access to this website’s basic functionalities and the job portal always requires registration. The volume of data to be provided under this registration may vary. Mandatory fields are clearly marked. The following data must always be provided: Last name, first name, email address, gender, and a password to be selected: The data processing in question has its legal basis in the necessity to initiate and fulfill the services offered on this platform.

 

4. Application via Innovo Consulting

Once you have registered, you may add various other personal information to your profile and upload documents such as a CV and certificates to complete it. Any additional information is provided voluntarily. Your data will be processed accordingly based on your consent.

We use your required and voluntary additional information exclusively for the purposes of providing the job portal and its functionalities. This also applies to data that you enter in the uploaded documents. You may define the visibility of your data in the settings of your profile. If you share your information as part of an application or make it publicly visible in your profile, we will transmit it accordingly or present it in such a way that it can be viewed by these users. Publicly visible data may also be accessed by headhunters or other recruiters for recruitment purposes. Your data cannot be viewed by third parties outside the job portal.

If you apply for a job posting via the application function of the portal, we will send your application documents to the respective employer. In all other cases, the data is collected directly via a frame by the employer or the service provider used for the candidate search.

As a rule, the legal basis for the processing of your data is the necessity to fulfill our contractual obligations. If you submit an application independently, the legal basis consists of your consent to share your data.

 

5. Contact form

You may send us an inquiry at any time using the various contact forms on our website. To facilitate your inquiry, we request that you submit the following information: Name, Email address, subject, and content of your request. The information is marked as mandatory fields. The provision of any other data you transmit to us as part of the inquiry, also via free text field or in documents uploaded and attached to your inquiry, is voluntary.

We use this data exclusively to respond to your inquiry and to facilitate associated communications. The legal basis of this type of data processing depends on the content of your request. As a rule, our legitimate interest in providing contact functionality and responding to your inquiry by using the transmitted data applies here. If your request is aimed at entering into a contract with us, any processing is based on the extent of this pre-contractual obligation.

Your data will be deleted as soon as your request has been processed. In the event of a contract being entered into, we may conduct additional processing to fulfill our contractual obligation.

6. Email Notification / Newsletter

An essential component of our services offered on the job portal is to draw your attention to appealing job opportunities. If you register, we will also use your email address to inform you about suitable job opportunities and services offered by Innovo Consulting via email notifications and newsletters. You can unsubscribe from these notifications at any time by clicking on the unsubscribe link at the bottom of each newsletter. You will not incur any additional costs. The legal basis for the processing of your data is tied to the necessity of providing the services of the job portal and our ability to tell you about our own range of services and our legitimate interest in maintaining and expanding the existing user relationship.

7. Google Maps

On our website, we might use the map service Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to show our location.

When you enter the page on which the Google map is integrated, our website sends various pieces of information including your IP address to Google USA where they will be stored on its servers. If you have a Google Account and are logged in at the time you visit our site, the information will be associated directly with your account. But even without a user account, Google will create a user profile about you. This happens regardless of whether Google provides a user account that you are logged in to or no such user account exists.

Our transfer of data to Google supports our legitimate interest in offering you the map function of Google Maps on our website.

You can prevent the linking of the data we transmit to your user account by logging out of Google before you visit our website. To completely stop the data transfer to Google, you have to switch off the JavaScript application in your browser. The map display can then no longer be used.

More information about Google and the use of Google Maps can be found here:

              • Google Terms of Use: https://policies.google.com/terms

              • Terms of use for Google Maps: https://www.google.com/intl/en_US/help/terms_maps.html

              • Google's privacy policy (Google Privacy Policy): https://policies.google.com/privacy

IV. Usage analysis and tracking

We would like to further improve the usability of this website and the appeal of our services. For this reason, we also collect data on user behavior that we evaluate for this purpose when you visit our website. For this reason, the following tracking and analysis cookies are used on our website in addition to the technically required cookies described below.

1. Google (Universal) Analytics

This website uses Google Analytics, a web analysis service by Google. Using a cookie, Google collects information about your use of this website (including your IP address) in the USA and stores this information. We use Google Analytics exclusively using an anonymization feature. This means that, before transmitting it, Google will shorten the IP address of users within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. Analyzing the information collected, Google sends us reports on user activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.

In addition to blocking all cookies, you can prevent Google from processing your data by downloading and installing the browser plugin available under this link: http://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

2. Google AdWords

Our website uses Google's AdWords advertising tool including its conversion and remarketing function.

The remarketing tool allows us to display targeted advertising on other websites you visit. For this purpose, Google analyses your use of our website and stores a corresponding ID in your browser. This ID allows us to assign you to a specific user group and to recognize you when you visit websites that are part of Google's advertising network. These websites can then display advertisements related to your use of our website. During this process, Google does not collect any personal data; you are assigned to a specific user group exclusively through your browser. The collected data is stored and processed in the USA.

We use conversion tracking to determine how successful advertising for our services is on other websites. To do this, a conversion cookie is set when you click on one of our ads. We use this cookie to recognize that you came to our site through this ad. With such usage statistics, we create statistics to evaluate the conversion of our ads. We do not obtain any personal information. The conversion cookie that is set in your browser is unique and cannot be used by other Google AdWords customers for their statistics.

You can prevent this remarketing by deactivating the function under https://www.google.com/settings/ads/plugin

You can find more information about remarketing and Google's privacy policy at the following Internet addresses:

https://policies.google.com/privacy

https://support.google.com/google-ads/answer/7664943

3. Doubleclick

Innovo Consulting also uses Google's Doubleclick service. As part of this service, a cookie is set and a pseudonymous identification number (ID) is assigned to your browser. The cookie determines whether and which advertisements were displayed and clicked in your browser. This enables us to tailor your advertising even closer to your interests. Since we have activated Google's IP anonymization on this website, your IP address is also shortened within the scope of Doubleclick before being transmitted by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Analyzing the information it collects, Google sends us reports on user activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.

In addition to the above-mentioned general options for preventing cookies, you can also prevent Google from saving the Doubleclick cookie by downloading a browser plugin. This can be found here.

V. Opt-out and deletion option

If any data processing is linked to your consent or legitimate interest, you have the right to object to the processing or to revoke your consent at any time. Your objection or revocation has a forward-looking effect only. If the analytics cookies used to carry their own technical options for deactivation, this is shown in the explanation above. You may at any time exercise your right of objection or revocation by contacting privacy@innovoconsulting.eu. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons for protecting processing which outweighs your interests, rights, and freedoms.

VI. Rights of the data subject

If personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As the data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.

Right of access according to Art. 15 GDPR

You have a right of access to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

Right to rectification according to Art. 16 GDPR

You have the right to correct incorrect personal data without delay and to amend incorrect personal data.

Right to erasure according to Art. 17 GDPR

You have the right to request the deletion of your personal data if one of the reasons mentioned in Art. 17 GDPR takes precedence, in particular, if there is no longer a legal basis for the processing.

Right to restriction of processing according to Art. 18 GDPR

Instead of having your data deleted, you also have the right to demand that the processing of your personal data be restricted, if one of the reasons mentioned in Art. 18 GDPR prevails, especially if any restrictive action is triggered by your request.

Right to data portability according to Art. 20 GDPR

You have the right to access all personal data stored by us about you in a structured, current, and machine-readable format and to share this data with another person authorized to handle it without obstruction by the person responsible to whom the personal data was originally provided.

Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR

According to Art. 77 GDPR, you have the right to file a complaint with the appropriate authority in your jurisdiction.

VII. Recipients of data

Processing of your personal data within the context of providing this website and the job portal is in part carried out by contracted processors. In particular, this applies to payment processing, hosting of the website, maintenance, and servicing of the IT systems, sending emails, answering user inquiries, and the use of analytical tools. Such activities are included exclusively on the basis of a supplemental agreement to an order agreement in accordance with Art. 28 para. 3 GDPR.

VIII. Data transfer to third countries

The personal data we collect from you through the website will not generally be transferred to third countries outside the European Economic Area.

In exceptional cases described above, your full IP address may be transmitted to Google and only shortened there when using Google Analytics. When using Google Maps, your IP address will also be transmitted.

The use of Facebook Custom Audience and the LinkedIn Insight tag also result in the transmission of data to Facebook in the USA.

Google, Facebook, and LinkedIn are domiciled in the USA and thus in a so-called "third country" according to Art. 44 GDPR. All companies are certified under the "EU-US Privacy Shield" data protection agreement, which guarantees compliance with a European data protection level.

Updated: October 2020

bottom of page