Privacy Policy
Last updated: January 1, 2025
1. Introduction
Semicolon d.o.o. ("we", "us", "our", "Company") operates the Operitivo platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We are committed to protecting your personal data and respecting your privacy. This policy is compliant with the General Data Protection Regulation (EU) 2016/679 ("GDPR").
2. Data Controller
The data controller responsible for your personal data is:
Semicolon d.o.o.
Rakovceva 60
52100 Pula
Croatia
Email: info@operitivo.com
VAT ID: HR03411437372
3. Information We Collect
Information You Provide
- Account Information: Name, email address, password, phone number
- Business Information: Business name, address, VAT number (OIB), IBAN
- Client Data: Information about your clients that you enter into the system
- Financial Data: Invoice and payment information
- Communication Data: Messages you send through the platform
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on pages
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
- Cookies: See our Cookie Policy for details
4. How We Use Your Information
We use your personal data for the following purposes:
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Provide and maintain the Service | Contract performance (Art. 6(1)(b)) |
| Process your transactions | Contract performance (Art. 6(1)(b)) |
| Send service-related communications | Contract performance (Art. 6(1)(b)) |
| Croatian fiscalization compliance | Legal obligation (Art. 6(1)(c)) |
| Improve our Service | Legitimate interest (Art. 6(1)(f)) |
| Respond to your inquiries | Legitimate interest (Art. 6(1)(f)) |
| Marketing (with consent) | Consent (Art. 6(1)(a)) |
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 30 days |
| Business data | Duration of account + legal requirements |
| Invoice data | 11 years (Croatian tax law) |
| Fiscalization records | 11 years (Croatian tax law) |
| Usage logs | 90 days |
| Backup data | 30 days after deletion |
6. Data Sharing
We may share your data with:
Service Providers
- Cloud hosting providers (EU-based)
- Email service providers
- Payment processors
Legal Requirements
- Croatian Tax Administration (for fiscalization)
- FINA (for eRacun processing)
- Law enforcement when required by law
Business Transfers
In the event of a merger, acquisition, or sale, your data may be transferred.
We do NOT sell your personal data to third parties.
7. International Data Transfers
Your data is primarily stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
8. Your Rights (GDPR Articles 15-22)
You have the following rights regarding your personal data:
- Right of Access (Art. 15): Request a copy of your personal data
- Right to Rectification (Art. 16): Request correction of inaccurate data
- Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
- Right to Restriction (Art. 18): Request limitation of processing
- Right to Data Portability (Art. 20): Receive your data in a structured format
- Right to Object (Art. 21): Object to processing based on legitimate interests
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time
To exercise these rights, contact us at: info@operitivo.com
We will respond within 30 days of receiving your request.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
11. Children's Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
14. Contact Us
For questions about this Privacy Policy or to exercise your rights:
Semicolon d.o.o.
Rakovceva 60
52100 Pula, Croatia
Email: info@operitivo.com