Help Center >

Privacy Policy

Introduction Categories of Personal Data, Purpose, and Legal Basis Storage of Your Personal Data Inquiries via Chat Function on Our Customer Portals and Mobile Applications Social Networks Deletion of User Data Recipients of Your Personal Data Inquiries via Chat Function in Our Customer Portals and Mobile Applications Transfer of Your Personal Data to Third Countries (Outside the EU/EEA) DATA SUBJECT RIGHTS Changes to this Privacy Policy

Privacy Policy

Introduction

HOBACA, with its headquarters at Ulica Hrvatske bratske zajednice 4, 10 000 Zagreb, OIB: 56806792756 ("HOBACA", "we", "us", "our"), recognizes the importance of treating the personal data of our clients, suppliers, business partners, website visitors, and other individuals we interact with, in a confidential manner. Transparency is a fundamental value at HOBACA, and we are committed to adhering to the requirements and obligations related to data privacy in accordance with applicable laws, including the General Data Protection Regulation (GDPR). Therefore, we have secure and adequate data processing procedures in place.

HOBACA is the data controller for your personal data. This privacy policy explains how HOBACA uses the personal data we collect from you when you use our website, customer portals, and mobile applications.

When visiting our website, customer portals, and/or mobile applications, HOBACA will process personal data about you, such as cookies, type and version of the browser, IP address, and duration of visit. The purpose of using cookies is, among other things, to improve your user experience on our website, customer portals, and/or mobile applications, provide functionality, generate statistics, target marketing of our products to your needs, and remember your preferences.

The legitimate interests we aim to achieve are providing products and services that function optimally, ensuring a good experience on the website, and conducting marketing activities. The legal basis for processing your personal data is Article 6(1)(f) of the GDPR. In certain cases, the legal basis for processing your personal data is your consent, which will be requested upon visiting the website, customer portals, and/or mobile applications, in accordance with Article 6(1)(a) of the GDPR.

When using our services, HOBACA d.o.o. will further process information related to date and time, frequency, location, and pattern of charging electric vehicles. Information related to purchases includes name, contact details, address, costs, and transaction details. We use third-party solutions such as Stripe for processing credit card payments, to collect payment information. If you provide payment information, we will share with the third party information such as your debit/credit card number, billing address, telephone number, and information about the installed app to process payments. In such circumstances, the third-party service provider, not HOBACA d.o.o., stores your payment information on our behalf acting as a data processor, and processes payment information for your virtual wallet within the application, processing information about your telephone number and information about the installed app.

If you wish to receive a newsletter or book a demo, we also process the following information about you: first and last name, subject(s) of interest, and your email address to tailor content and send our newsletters to you. The legal basis for processing your personal data in this regard is our legitimate interests in branding our products and business and the relevant marketing material you have requested, in accordance with Article 6(1)(f) of the GDPR. You can unsubscribe from receiving our newsletter at any time. To express your desire to unsubscribe, you can use the appropriate link included in all newsletters or send an email to info@hobaca.com.

HOBACA will only retain your personal data for as long as necessary to fulfill the purposes for which your personal data are processed. We maintain industrial security standards to protect your data. We encrypt data during transmission and storage, where appropriate, to ensure the privacy of your information.

HOBACA securely stores your data on our secure (password-protected and firewall-protected) servers. All payment information is fully encrypted. It should always be kept in mind that the transmission of information over the internet is inherently insecure, and HOBACA cannot guarantee the security of data sent over the internet. Emails sent over the internet may not be encrypted, so we advise you not to include any confidential or sensitive information in your emails to us.

Access controls are in place to limit access to your information to those who need it to perform their job functions. For example, information about you may be provided to our customer support team to assist you with your requests.

If you submit an inquiry related to HOBACA's services via the HOBACA chat function, we will process personal data about you, such as your IP address, geographical location, and personal data you include in your inquiry, e.g., name, email address, and telephone number. HOBACA will not process special categories of personal data (sensitive personal data) about you, unless you have provided such information to us, e.g., via the chat function. We kindly ask you not to send such sensitive personal data.

To delete all data related to using the HOBACA mobile application or HOBACA platform, users should request it via email at info@hobaca.com.

As necessary, HOBACA may disclose or transfer your personal data to HOBACA-affiliated companies, business partners, or other collaborators for business purposes. Such third parties also include social network providers, as described in the previous section.

In certain specific cases, e.g., in connection with disputes, including when disclosing your personal data is necessary for establishing, exercising, or defending legal claims of HOBACA, HOBACA may disclose your personal data to its advisors or other relevant third parties, provided that it is deemed necessary and lawful.

HOBACA uses third-party services, such as managed hosting service providers, card payment processors, and technology partners for providing software, network solutions, marketing, logistics, infrastructure, and other services necessary for the operation, development, delivery, and maintenance of our products and services, and fulfilling our other purposes defined in this Privacy Policy. When a third party processes personal data on our behalf, the processing is carried out in accordance with documented instructions provided by HOBACA and further terms and conditions stated in the data processing agreement concluded with HOBACA. Such data processors are not allowed to process your personal data for their own purposes. HOBACA ensures that processing is carried out securely and in compliance with all applicable privacy laws, including, but not limited to, the GDPR.

Inquiries from potential clients will be deleted 3 years after the inquiry is resolved, unless it is deemed necessary to retain such inquiries for documentation purposes, for example, due to disputes, including establishing, exercising, or defending legal claims.

Inquiries from existing clients will be deleted 3 years after the end of the contractual relationship, unless it is deemed necessary to retain such inquiries for documentation purposes, for example, due to disputes, including establishing, exercising, or defending legal claims.

In certain cases, your personal data may be transferred to countries outside the EU/EEA. HOBACA ensures that such transfer will be carried out in accordance with applicable data protection laws. This implies that any party outside the EU/EEA receiving your personal data will ensure an adequate level of protection, for example, by concluding EU standard contractual clauses ("SCC") with HOBACA. HOBACA will ensure the implementation of additional security measures if deemed necessary in the specific case. You can request a copy of the legal basis for transfers on request. Please contact info@hobaca.hr.

As Data Subjects, you have the following rights at any time and without any fee:

  • to be informed about the purpose and manner of processing your personal data;
  • to request access to your personal data;
  • to request updating or correction of personal data we process; this allows you to correct any incomplete or inaccurate data we process about you, along with the possibility of needing to verify the accuracy of the new data you provide us;
  • to request the deletion of your personal data; this enables you to ask us to delete or remove your personal data where there is no good reason for us to continue processing it.

You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing, or where we may have processed your information unlawfully or are required to erase your personal data to comply with local law. Note, however, we may not always be able to comply with your deletion request for specific legal reasons which will be notified to you, if applicable, at the time of your request.

  • to restrict the processing of your personal data; this allows you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it;
  • to object to processing of your personal data, wholly or in part, when we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
  • to freely withdraw your consent at any time, when we are relying on consent to process your personal data, by opting out at the bottom of our marketing communications;
  • to withdraw your consent you have given for the processing of your personal data at any time by sending a request to info@hobaca.hr, which will not affect the lawfulness of processing based on consent before its withdrawal;
  • to request that we transfer your personal data to you or a third party; we will provide your personal data in a structured, commonly used, machine-readable format to you or a third party you have chosen;

If you have any questions regarding this Privacy Policy, wish to exercise your rights as mentioned above, or disagree with the way HOBACA processes your personal data, you can contact HOBACA at info@hobaca.com.

You can also file a complaint with the relevant data protection authority, which is an independent public body responsible, among other things, for monitoring and enforcing the application of the GDPR. In the Republic of Croatia, the relevant authority is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka). Contact information for the Agency is available on its website: www.azop.hr.

HOBACA reserves the right to change this Privacy Policy in relation to new technologies, regulatory requirements, or other purposes. For this reason, please visit this page periodically. Below is the date when the latest version of this Privacy Policy was uploaded.