Last updated: 13 October 2026
This policy explains how Infosit d.o.o. processes personal data when you visit www.infosit.com, use our landing pages and online tools on go.infosit.com, contact us, subscribe to our emails, apply for a job with us or do business with us.
The controller of your personal data is Infosit d.o.o., M. Vlasica 26/31, 52440 Poreč, Croatia, OIB 13375007367.
For any question about your personal data, or to exercise your rights, write to info@infosit.com or to the postal address above. We reply within one month.
We have not appointed a Data Protection Officer. Questions about personal data are handled through the contact above.
When you visit www.infosit.com or go.infosit.com, our hosting providers process technical data needed to deliver the pages and keep them secure: your IP address, browser and device type, the pages you request and the time of the request. The legal basis is our legitimate interest in operating secure websites (Art. 6(1)(f) GDPR). Pages of www.infosit.com also load fonts, scripts and a reviews widget directly from other providers; they are listed in section 3.2. Cookies are described in section 8.
On go.infosit.com we publish landing pages and online tools, for example self-assessments and other tools that calculate a result for you, downloadable materials such as guides and checklists, registrations for events and webinars, and pages of our campaigns. Each page says next to its form what it collects and why, and links to this policy.
What we may collect, depending on the page:
Where a tool calculates a result, the page says whether your answers are sent to us or processed only in your browser. For example, the AI readiness self-assessment (go.infosit.com/ai-self-assessment, also reached from www.infosit.com/en/ai-self-assessment) scores your answers in your browser and sends us only your business email address, the result (total score, result band, score per dimension and the two recommended areas to start with) and your consents. The results of our tools are information for you, not decisions about you.
If a page is run together with a partner, for example a co-organised event, and your data is shared with that partner, the page says so before you send the form.
Why and on what basis:
Providing your data is voluntary. Without the data a form marks as required we cannot send you what you asked for.
When you contact us through a form on www.infosit.com, we process your email address, your message and the address of the page from which you sent it. The forms are protected against spam by Google reCAPTCHA. Your message is delivered to us by email through Twilio SendGrid, and you receive an automatic confirmation at the email address you entered. The submission is also recorded in our HubSpot account so that we can follow up on it.
When you contact us by email or by phone, we process your name, contact details, your message and any attachments you send.
We use this data to reply and, where relevant, to prepare an offer. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Contacting us does not subscribe you to our marketing emails; for that you subscribe separately (section 2.4).
If you subscribe, we process your email address, your name if you give it, your subscription preferences and whether you open our emails or click their links. The subscription form on www.infosit.com is a HubSpot form. The legal basis is your consent (Art. 6(1)(a) GDPR). Every email contains an unsubscribe link.
For our customers, partners and suppliers we process the business contact details of their representatives and the data needed for contracts, delivery and invoicing. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR) and our legal obligations, for example under accounting and tax law (Art. 6(1)(c) GDPR).
If you apply for a job, we process the data in your application and CV to run the selection. When you apply through the form on our careers pages, the form collects your email address, your message and a link to your CV and motivation letter; we open the documents at that link only for the selection. The form works as described in section 2.3. The legal basis is taking steps at your request before entering into an employment contract (Art. 6(1)(b) GDPR). We keep your application for future openings only if you agree to that (Art. 6(1)(a) GDPR).
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
We share personal data only with service providers that process it on our behalf under a data processing agreement, and only to the extent needed for the purposes in this policy:
| Provider | What it does for us |
|---|---|
| HubSpot, Inc. and its group companies | Customer relationship management, forms, emails, website analytics and the cookie banner on our websites. HubSpot also records the messages sent through the forms on www.infosit.com. Our HubSpot account is hosted in HubSpot's EU data centre. |
| Twilio (SendGrid) | Delivery by email of the messages sent through the forms on www.infosit.com to us, and of the automatic confirmation to you. |
| Microsoft Ireland Operations Ltd. | Hosting of go.infosit.com on Microsoft Azure in the EU, and our email (Microsoft 365). |
| Hrvatski Telekom d.d. (Croadria hosting), Croatia | Hosting of www.infosit.com, including its server logs. |
| Google Ireland Ltd. | Spam protection on the forms of www.infosit.com (reCAPTCHA) and, only with your consent, website analytics on www.infosit.com and go.infosit.com (Google Analytics 4): the pages you visit, your device and browser, your approximate location and whether you sent a form (the name of the form and the page, never its content). Google signals and personalised advertising are switched off. |
reCAPTCHA is loaded on every page of www.infosit.com that contains a form, which is almost every page, so Google receives technical data about your visit to those pages even if you do not send a form.
Some pages of www.infosit.com load files directly from other providers. When your browser fetches these files, the provider receives your IP address and browser data and processes them under its own privacy policy:
| Provider | What it delivers | Where |
|---|---|---|
| Adobe (Adobe Fonts) | The fonts of the website | All pages |
| Google (Google Fonts) | The fonts of the cookie banner | All pages |
| Cloudflare (cdnjs) | A JavaScript library the website uses (jQuery) | All pages |
| Clutch | The widget with client reviews, which also loads Cloudflare Web Analytics | Home page |
We may also disclose personal data to our accountants and legal advisors where needed, to public authorities where the law requires it, or to establish, exercise or defend legal claims. We do not sell personal data.
We process personal data mainly within the European Economic Area. Some of our providers, or their sub-processors, may access data from outside the EEA, in particular from the United States. This applies to Twilio SendGrid, which processes the messages sent through the forms on www.infosit.com in the United States, to Google, whose parent company Google LLC in the United States may access the analytics data, and to the providers in section 3.2, which are based in the United States or use infrastructure there. Where we transfer data to a provider outside the EEA, the transfer is protected by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified providers, or by the European Commission's Standard Contractual Clauses. You can ask us for more information about these safeguards at info@infosit.com.
| Data | How long |
|---|---|
| Data from landing pages and online tools | Until you withdraw your consent or ask us to delete it, and at the latest 3 years after your last interaction with us |
| Newsletter and marketing subscriptions | Until you unsubscribe, and at the latest 3 years after your last interaction with our emails |
| Records of consents and withdrawals | 5 years after the processing they relate to has ended, as evidence that we acted lawfully |
| Enquiries | 3 years after our last communication, unless the enquiry leads to a contract |
| Customer, partner and supplier data | For the duration of the contract and afterwards for the periods required by Croatian accounting and tax law |
| Job applications | Until the selection ends or, if you agree, up to 2 years for future openings |
| Technical data in server logs | For the limited period our hosting providers keep logs for security, after which they are deleted |
| Analytics data in Google Analytics | Event data 2 months and user data 14 months, after which Google deletes them; reports keep only aggregated figures |
| Cookies | For the durations listed in section 8 |
We review the data we hold regularly and delete or anonymise what is no longer needed.
Under the GDPR you have the right to:
To exercise these rights, write to info@infosit.com. We reply within one month. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.
Our websites use encrypted connections (HTTPS). Access to personal data is limited to the people who need it for their work, and we use providers that apply recognised security measures. No transmission over the internet is completely secure, but we work to protect your data against loss and unauthorised access.
Cookies are small files stored in your browser. Cookies that are strictly necessary for a page to work are set without consent. All other cookies are set only after you accept them in the cookie banner. You can change your choice at any time by deleting the cookies in your browser; the banner then appears again.
The cookie banner on www.infosit.com and go.infosit.com is provided by HubSpot. We use HubSpot analytics and Google Analytics 4 on both websites, both only with your consent. We do not use advertising cookies.
| Cookie | Provider | Where | Purpose | Duration |
|---|---|---|---|---|
wires | Infosit | www.infosit.com | Strictly necessary: session of the content management system that runs the website | End of session |
__hs_cookie_cat_pref, __hs_opt_out, __hs_initial_opt_in | HubSpot | Both websites | Strictly necessary: remember your cookie choice | Up to 6 months (__hs_initial_opt_in: 7 days) |
__cf_bm | HubSpot and Clutch (through Cloudflare) | Both websites; for Clutch, the home page of www.infosit.com | Strictly necessary: protection against bots | 30 minutes |
cf_clearance | Clutch (through Cloudflare) | Home page of www.infosit.com | Strictly necessary for the reviews widget: remembers that your browser passed Clutch's bot check | 1 year |
_GRECAPTCHA | Forms on www.infosit.com | Strictly necessary: protects forms against spam | 6 months | |
__hstc, hubspotutk | HubSpot | Both websites | Analytics, only with consent: recognise returning visitors and link a form submission to the visit | 6 months |
__hssc, __hssrc | HubSpot | Both websites | Analytics, only with consent: track the current session | 30 minutes; end of session |
_ga, _ga_DLY3L1NRQY | Both websites (set for the domain infosit.com, so one cookie covers both) | Analytics, only with consent: distinguish visitors and sessions in Google Analytics | 400 days |
The Clutch cookies are set by the reviews widget on the home page of www.infosit.com under clutch.co. The fonts and the script from the providers in section 3.2 do not set cookies, and Cloudflare Web Analytics in the Clutch widget works without cookies.
We update this policy when the way we process personal data changes, for example when we publish a landing page or tool that collects data not described in section 2.2. The date at the top shows the latest version.
Infosit d.o.o., M. Vlasica 26/31, 52440 Poreč, Croatia
OIB 13375007367
info@infosit.com
If you’re looking for a results-driven, innovative software development partner to help capitalize on new, profitable opportunities, reinvent your brand, or deliver incremental value to your business, we can help.