Privacy Policy

Last updated: April 2025

1. Data Controller

The data controller for personal data is Accounting Plus d.o.o., Vinogradska 32, 21000 Split, Croatia, VAT ID (OIB): 99258930238 (hereinafter: “we,” “our company,” or “Accounting Plus”).

For any questions regarding the processing of personal data, you can contact us by email: info@accountingplus.hr

2. What Personal Data We Collect

Depending on how you use our website and services, we may collect the following personal data:

  • Contact details: full name, email address, phone number — when you contact us via the contact form or email.
  • Business details: company name, VAT ID (OIB), registered address — when you use our accounting services.
  • Client portal data: username, documents and files you upload through the client portal (invoices, receipts, contracts, and other business documentation).
  • Technical data: IP address, browser type, pages you visit — automatically collected to ensure the website functions correctly.

3. Purpose and Legal Basis for Processing

We process your personal data on the basis of the following legal grounds:

  • Contract performance (Art. 6(1)(b) GDPR) — to provide the accounting and consulting services you have requested.
  • Legal obligation (Art. 6(1)(c) GDPR) — to fulfill obligations under tax regulations, the Accounting Act, and other applicable laws.
  • Legitimate interest (Art. 6(1)(f) GDPR) — to improve our website and client communication.
  • Consent (Art. 6(1)(a) GDPR) — for sending newsletters or marketing communications, if you have explicitly requested them.

4. Client Portal — Document Uploads

Through the client portal you can send us business documentation (invoices, receipts, contracts, etc.) electronically, avoiding the need to visit our office in person. Documents you upload:

  • are stored on a secure server and are not publicly accessible,
  • are accessible only to you (as a logged-in user) and to authorized Accounting Plus d.o.o. staff,
  • are used solely to provide the accounting services covered by your contract,
  • are retained in accordance with the statutory retention periods for accounting documentation under the Accounting Act (at least 11 years).

5. Sharing Data with Third Parties

We do not sell or transfer your personal data to third parties for commercial purposes. We may share data only:

  • with competent government authorities (Tax Administration, HZMO, HZZO) when required by law,
  • with data processors who provide us with technical services (e.g. hosting), with whom we have data processing agreements in place in accordance with the GDPR,
  • in the event of a business transfer, merger, or acquisition, with prior notice to data subjects.

6. Data Storage and Security

We retain your data only for as long as necessary to fulfill the purpose for which it was collected, or for as long as required by law.

We apply appropriate technical and organizational security measures (data transfer encryption, access controls, secure file storage) to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access — you may request a copy of the personal data we process about you.
  • Right to rectification — you may request correction of inaccurate or incomplete data.
  • Right to erasure — you may request deletion of data once it is no longer needed for the purpose it was collected, provided there is no legal obligation to retain it.
  • Right to restriction of processing — you may request that processing be restricted in certain circumstances.
  • Right to data portability — you may request delivery of your data in a machine-readable format.
  • Right to object — you may object to processing based on legitimate interest.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

You can submit requests to: info@accountingplus.hr. We will respond within 30 days.

You also have the right to lodge a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP), azop.hr.

8. Cookies

Our website may use technical cookies necessary for proper functioning (e.g. a session cookie for logged-in portal users). We do not use cookies for tracking or profiling visitors without their explicit consent.

9. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy. Any changes will be published on this page with an updated date. We recommend checking the content periodically.

10. Contact

For any questions regarding privacy and personal data protection, contact us: