Privacy Policy

1. Roles in Personal Data Processing

• Company: AppSkill d.o.o.
• Address: Ivekovićeva 19, 10000 Zagreb, Croatia
• VAT / OIB: 92155446669
• Privacy contact: Show email

AppSkill d.o.o. acts as controller for account management, authentication, system security, technical support, user communications, and its own contractual and legal obligations.

When a customer organization processes data about residents, owners, employees, contractors, apartments, buildings, locations or assets through the application, that organization is the controller. AppSkill d.o.o. then acts as processor under the controller's documented instructions.

2. What Personal Data Do We Collect?

Depending on how you use the website and services, we may collect the following categories of data:

Data You Provide

• full name,
• email address,
• phone number,
• data submitted through contact forms,
• user account information and assigned permissions,
• personal identification number (OIB) and property ownership or occupancy data,
• building, location and asset data,
• financial data, obligations, payments and debts,
• photographs, documents and attachments,
• incident, maintenance, intervention, employee, contractor and occupational safety data.

The application is not intended for processing special categories of personal data, such as health data, or data relating to minors.

Technical Data

• IP address,
• browser and device information,
• operating system,
• date and time of access,
• website usage data,
• security logs.

Marketing Data

• newsletter subscriptions,
• marketing preferences,
• cookie consent preferences.

3. Purpose and Legal Basis of Processing

4. User Accounts

If you use a user account:

• you are responsible for protecting your login credentials,
• passwords are stored in hashed form,
• accounts may be deactivated at the request of the user or an authorized customer organization,
• identifying data of a deactivated account is anonymized after 30 days.

5. Data Recipients

Your personal data may be accessed by:

• our employees and authorized associates,
• hosting and IT service providers,
• public authorities when legally required.

All data processors are bound by confidentiality and data protection agreements.

6. Place of Processing

Personal data is stored and processed within the European Union. Data is not sent to Microsoft, OpenAI or other artificial intelligence service providers.

7. Data Retention

• active account data is retained while the account remains active,
• identifying data of a deactivated account is anonymized after 30 days, while business records created by that user are retained in anonymized form,
• security and access logs are retained for seven days unless longer retention is required to investigate a security incident or comply with law,
• backups are retained for seven days,
• business data processed on behalf of a controller is retained according to the controller's instructions and contractual obligations,
• accounting records and other legally required documents are retained for the periods prescribed by applicable Croatian law.

After the applicable period expires, data is deleted, anonymized or access to it is permanently restricted.

8. Your Rights

Under the GDPR, you have the right to:

• access your personal data,
• correct inaccurate data,
• request deletion of data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent.

To exercise rights concerning your account or processing for which AppSkill is controller, contact Show email . For processing determined by a customer organization, you may first contact that organization; AppSkill will assist it in responding to the request.

9. Data Security

We implement appropriate technical and organizational measures, including:

• SSL/TLS encryption,
• access control mechanisms,
• security logging,
• system backups,
• user account protection.

10. Automated Decision-Making and Artificial Intelligence

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects on users. Automated application functions support organization, calculation, display and notifications, while decisions are made by authorized persons.

The application currently does not use artificial intelligence services to process users' personal data or documents.