Privacy Policy

Last updated: 1 September 2026.

This Privacy Policy sets out how GLOBAL BIRO d.o.o. za posredovanje pri zapošljavanju collects, processes, uses, stores and protects the personal data of natural persons in the course of its employment-mediation activity and in connection with the use of the website https://globiro.hr (hereinafter: the website). The Policy applies to visitors of the website, to candidates for employment (including foreign workers), to employers and business partners and to all other persons whose data we process.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter: GDPR), the Act on the Implementation of the General Data Protection Regulation (NN 42/2018) and other applicable regulations of the Republic of Croatia.

1. Controller

The controller of personal data is:

• GLOBAL BIRO d.o.o. za posredovanje pri zapošljavanju
• Registered office: Sukoišanska 26, 21000 Split, Republic of Croatia
• OIB: 51046671088
• Phone: +385 21 292 691
• E-mail: info@globiro.hr
• Website: https://globiro.hr

For any question about the processing of personal data and the exercise of data subjects' rights you can contact us at the address above or by e-mail at info@globiro.hr.

2. Categories of data subjects and the personal data we process

2.1. Visitors of the website. When you visit the website and fill in the contact form or write to us by e-mail, we process:

• data you enter yourself: name and surname, e-mail address, phone number and the content of the message or enquiry;
• technical data recorded automatically: IP address, browser type and version, operating system, date and time of access and data on the content viewed;
• data collected through cookies, under the conditions described in the Cookie Policy.

2.2. Candidates for employment and foreign workers. In the course of employment mediation we process the data needed to carry out the selection procedure, obtain documentation and establish the employment relationship, for example:

• identification and status data: name and surname, sex, date and place of birth, citizenship, data from the passport and other identity documents;
• contact data: address of permanent or temporary residence, phone number, e-mail address;
• data on education, qualifications, work experience, skills and knowledge of languages;
• data needed to obtain the permit for residence and work and other documentation before the competent authorities;
• exceptionally, special categories of personal data (for example data on fitness for work), and only when this is necessary and on an appropriate legal basis.

2.3. Employers and business partners. We process data on legal persons and the personal data of their contact persons and authorised representatives (name and surname, position, phone number, e-mail address) to the extent needed to conclude and perform contracts and for business communication.

3. Purposes of processing and legal bases

We process personal data for the following purposes and on the following legal bases:

• answering enquiries and communication through the contact form, e-mail or phone, on the basis of consent or of steps taken at the request of the data subject before entering into a contract (Art. 6(1)(a) and (b) GDPR);
• employment mediation and the provision of services, and the conclusion and performance of contracts with candidates, workers and employers (Art. 6(1)(b) GDPR);
• compliance with the controller's legal obligations, including obligations under labour, tax and accounting legislation and the regulations on the stay and work of foreigners (Art. 6(1)(c) GDPR);
• the controller's legitimate interests, for example ensuring the security and functionality of the website, improving services and direct business communication (Art. 6(1)(f) GDPR);
• the use of cookies and marketing activities that are not necessary for the website to work, on the basis of consent (Art. 6(1)(a) GDPR);
• the processing of special categories of data when necessary for carrying out obligations and exercising rights in the field of employment and social security law (Art. 9(2)(b) GDPR) or with the explicit consent of the data subject (Art. 9(2)(a) GDPR).

4. Recipients of personal data

We do not sell personal data. We disclose data to third parties only when this is necessary for the purposes above or when a regulation obliges us to, and to the following categories of recipients:

• competent state authorities (for example the Ministry of the Interior, the Tax Administration, the Croatian Pension Insurance Institute, the Croatian Health Insurance Fund and inspection bodies);
• employers to whom the candidate or worker is referred;
• foreign partner employment agencies with which we cooperate in recruitment;
• service providers who process data for us as processors (for example providers of website and server development and maintenance, IT support, accounting and legal services), who are contractually bound to confidentiality and data protection.

5. Transfer of personal data to third countries

Because we recruit workers in cooperation with agencies in third countries, among others in the Republic of the Philippines, the Republic of Indonesia and the Federal Democratic Republic of Nepal, personal data is in some cases exchanged with recipients outside the European Economic Area.

The European Commission has not adopted an adequacy decision for these third countries. The transfer is therefore carried out with appropriate safeguards within the meaning of Art. 46 GDPR (for example standard contractual clauses) or, where such safeguards are not applicable, on the basis of the derogations in Art. 49 GDPR, in particular when the transfer is necessary for the performance of a contract with the data subject or for pre-contractual measures taken at the data subject's request. At the data subject's request we will make available information on the safeguards applied.

6. Retention period

We keep personal data only as long as necessary for the purpose for which it was collected, or as long as the applicable regulations require:

• we keep data from enquiries through the contact form and e-mail until the purpose for which you contacted us is fulfilled, and for no longer than two years, unless a business relationship results from the communication;
• we keep data related to contractual relationships and accounting and tax data for the periods prescribed by law (for example bookkeeping documents in accordance with the accounting regulations);
• we keep data processed on the basis of consent until consent is withdrawn or the purpose of processing ends.

When the retention period expires, we delete or anonymise the data.

7. Rights of data subjects

Under the GDPR you have the following rights in relation to your personal data:

• the right of access to the data and to information on the processing;
• the right to rectification of inaccurate data or completion of incomplete data;
• the right to erasure ("right to be forgotten") under the conditions of Art. 17 GDPR;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interest and to processing for direct marketing purposes;
• the right to withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise these rights, write to us at info@globiro.hr or to the address of our registered office. We will reply to your request without undue delay and at the latest within one month.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or misuse. Access to the data is given only to authorised persons, to the extent necessary for their tasks.

9. Cookies

The website uses cookies and similar technologies. Detailed information on the types of cookies, their purpose and how consent is managed is contained in the separate Cookie Policy available on the website.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to bring it into line with regulations or with changes in the way data is processed. The current version is always published on the website, with the date of the last update.

11. Supervisory authority

If you believe that the processing of your personal data has infringed any of your rights, you have the right to lodge a complaint with the supervisory authority:

• Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb
• E-mail: azop@azop.hr, website: www.azop.hr