Privacy Policy
Personal Data Protection Policy STELLAR CONNECT d.o.o. implements the obligation to protect data subjects' personal data based on the Law on the Implementation of the General Data Protection Regulation (Official Gazette NN 42/2018), other laws related to the execution of the official authority of the data controller, and the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
STELLAR CONNECT d.o.o. recognizes the importance of privacy, security, and data protection for data subjects. Our goal is to protect their personal data comprehensively and to implement a system that ensures this.
These rules apply to all personal data collected and processed directly by users. Personal data is any information relating to an identified or identifiable natural person, directly or indirectly. Data processing refers to any operation performed on personal data, such as collection, storage, use, access, and transfer.
These rules do not apply to anonymous data. Anonymous data is information that cannot be linked to a specific individual.
The protection of data subjects' privacy is a continuous obligation of the data controller, data processor, and any individuals in contact with personal data.
Collected data is securely stored in compliance with the law, ensuring organizational, technical, and software security measures in line with the data's confidentiality. All data must be protected from loss, destruction, alteration, forgery, manipulation, unauthorized access, and disclosure. Data will not be transferred to third parties without legal grounds or the explicit consent of the data subject.
Data collection and processing from minors under the age of 16 is permitted only with legal authorization or parental/guardian consent.
This Privacy Policy will be publicly disclosed and is binding for all employees and clients/users to follow and implement in practice.
Introduction At STELLAR CONNECT d.o.o., all data collected, processed, stored, or transferred relating to individuals (data subjects) must be protected against unauthorized access or malicious alteration. While collecting, storing, processing, or transferring such information, we must respect individuals' rights and privacy at all times.
All employees at STELLAR CONNECT d.o.o. who in any way come into contact with data subjects' personal data are informed of all privacy protection rules and are required to sign a Confidentiality Statement in which they accept responsibility in case of data breach.
This website is owned by STELLAR CONNECT d.o.o., Radnička cesta 27, 10000 Zagreb, Croatia (EU).
It is important to read this Privacy Policy, and we hope you will take the time to review it carefully.
Data Controller: NAME: STELLAR CONNECT d.o.o. ADDRESS: Radnička cesta 27, 10000 Zagreb, Croatia (EU) PHONE NUMBER: +385 99 271 3220 AUTHORIZED PERSON: Antonio Andreić, Director EMAIL: info@jobuny.com OIB: 17681881380 Company Registration Number (MBS): 081369639
Legal Basis for Data Collection The legal basis for processing personal data stems from the law. Article 6 of the EU General Data Protection Regulation "Lawfulness of processing" paragraphs (a) to (f).
Processing is lawful only if and to the extent that at least one of the following applies: a) The data subject has given consent to the processing of their personal data for one or more specific purposes b) Processing is necessary for the performance of a contract to which the data subject is party c) Processing is necessary for compliance with a legal obligation to which the controller is subject d) Processing is necessary to protect vital interests of the data subject or another natural person e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject
Categories and Types of Personal Data We Process:
-
Full name
-
Email address
-
Date of birth
-
Age
-
Gender
-
Marital status
-
Photos (of individuals)
-
Country of residence or nationality
-
Contact: phone/mobile number, email
-
Education, work experience, CV, cover letter, skills, courses, certificates, language proficiency
-
Driver's license, preferred job and salary expectations
Purposes and Legal Grounds for Processing and Retention Periods: We process data to fulfill contractual obligations (e.g., employment contracts, client records). These include:
-
Name, address, contact info, education and experience, sex, birthdate, nationality, optional photo
-
Stored up to 11 years depending on legal, tax, labor, and immigration requirements across EU member states
-
Accounts are kept until user deletion request or no longer needed
Employee Data: We process employee data (name, OIB, birthdate, gender, address, nationality, education, work experience) and store it permanently as required by labor laws and regulations (e.g., payroll records, tax compliance).
Data Collection and Storage Principles: a) Lawful, fair, and transparent processing b) Collected for explicit and legitimate purposes c) Limited to what is necessary d) Accurate and up to date e) Stored only as long as necessary, with exceptions for public interest, research, statistics f) Secure processing with adequate protections g) Data controller is accountable for compliance
Sharing Personal Data: Data may be disclosed if legally required or for contract execution:
-
Tax authority (via JOPPD form), Ministry of Interior, HZMO, HZZO, banks, judiciary
-
Processors: Interaktiva d.o.o. (payroll/accounting), ELATUS d.o.o. (web support)
-
All processors are under contract ensuring data protection compliance
International Transfers: Data is not transferred to non-EU countries unless legally required or in specific justified cases.
Cookies: Cookies store small text files to personalize user experience. No sensitive data is collected without consent. Cookie use is governed by electronic communications laws and GDPR. More info is provided via the Cookie Settings link on the website.
Your Rights:
These rights may be limited when necessary for:
Consent can be withdrawn anytime. Contact: info@jobuny.com, +385 99 2713 220, Radnička cesta 27, 10000 Zagreb
Right to File Complaint: You may lodge a complaint with a supervisory authority:
CROATIAN PERSONAL DATA PROTECTION AGENCY (AZOP) Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia Tel: +385 (0)1 4609-000 Fax: +385 (0)1 4609-099 Email: azop@azop.hr Web: www.azop.hr
Data Security Measures:
-
Restricted physical access to equipment/premises
-
Firewalls, strong passwords, antivirus
-
OS updates, backups, external/cloud storage
-
Auto screen lock on inactive computers
-
Shredding physical documents no longer needed
-
Confidentiality agreements with all staff
-
System logging and monitoring
-
Encryption, pseudonymization, and staff training
Liability Disclaimer: STELLAR CONNECT d.o.o. disclaims liability for any damages resulting from use or inability to use this website.
Governing Law: This policy is governed by Croatian law. All disputes fall under Croatian court jurisdiction.
Transparency Guidelines: For further info, refer to the Transparency Guidelines of Article 29 Working Party, adopted by the European Data Protection Board: https://azop.hr/wp-content/uploads/2020/12/smjernice-o-transparentnosti.pdf
Policy Updates: We reserve the right to amend this Privacy Policy to reflect legal changes or business needs. Changes will be published on our website. Your rights will not be restricted without notification.
This Privacy Policy was last updated on June 5, 2025.