Privacy notice

Data controller

Prospera Mundi d.o.o.; registered office: Lužec 7, 10412 Lukavec, Croatia; office: Stjepana Bencekovića 56, 10020 Zagreb, Croatia; OIB 33028493132; [email protected]; +385 1 555 6450.

Business enquiries

When you contact us, we process the information you submit, which may include your name, organisation, business activity, legal form, number of employees, contact details and free-text notes. We use it to answer the enquiry, prepare the initial conversation and, where relevant, prepare an offer. The legal bases are steps taken at your request before entering into a contract and our legitimate interest in answering genuine business enquiries. See the official text of the General Data Protection Regulation.

If no business relationship follows, enquiry data is retained for no longer than 12 months after the last communication. Website form data is transferred to our email workflow through an automation service and is not used for marketing, except for the ad click identifier, which we use to measure the effectiveness of our advertising on the basis of our legitimate interest (see “Google ads” below).

Client data

Client and employee information is processed to deliver contracted accounting services and meet applicable legal obligations. The role of Prospera Mundi, access rules, retention and the systems used are defined by the engagement and the applicable rules for the relevant processing.

Website visit

This website does not set analytics or advertising cookies. The network infrastructure that serves the site (Cloudflare) may set a strictly necessary security cookie (such as __cf_bm) to protect the site from automated abuse; it is used solely for security, not tracking, and is short-lived. The server records ordinary technical access logs, such as IP address, time and requested page, for security and troubleshooting. These logs are retained for a limited period and are not used to build visitor profiles.

Google ads

If you reach this website by clicking one of our ads on Google, the page address contains a click identifier added by Google (gclid). We do not store it on your device and we do not use cookies. If you submit the enquiry form, the click identifier is sent together with your enquiry so that we know the enquiry came from an ad. If the enquiry turns into a business relationship, we pass only the click identifier and the date to Google (Google Ads), no later than 90 days after the click — without your name, email address or any other information from the form. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in measuring the effectiveness of our advertising. The click identifier is retained together with the enquiry, under the same conditions as the other form data.

Recipients

We do not sell enquiry data or share it with third parties for their own purposes, except for the ad click identifier described above. Access is limited to our team according to the work required, contracted technology providers used for the workflow and public authorities where disclosure is legally required. For enquiries that turn into a business relationship, Google Ireland Limited (Google Ads) receives only the click identifier and the date; Google processes this data as an independent controller under its Google Ads terms, which also govern any transfer to third countries.

Your rights

Depending on the processing and applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing. Send a request to [email protected]. You may also lodge a complaint with the Croatian Personal Data Protection Agency, AZOP.

Changes

The current version and effective date are published on this page. Material changes affecting existing clients are communicated through the appropriate business channel.