Privacy Policy

Evroproces d.o.o. (hereinafter: "we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovenian data protection legislation.

The data controller is Evroproces d.o.o., Ulica heroja Šaranoviča 27, 2000 Maribor, Slovenia. Contact: info@evroproces.si, phone: +386 70 630 880.

We collect the following categories of personal data: - Identity data (name, surname) - Contact data (email address, phone number, address) - Employment data (profession, experience, qualifications) - CVs and other documents you choose to upload - Company data (company name, company address) - Technical data (IP address, browser type, visit time)

We process your personal data for the following purposes: - Providing employment services and connecting workers with employers - Communicating with you regarding our services - Fulfilling legal obligations - Improving our services and website - Marketing and promotion of our services (with your consent)

When you submit a lead form in one of our advertisements on Facebook or Instagram (Meta lead forms), which link to this privacy policy, we receive the data you enter in the form (such as your name and surname, phone number, email address, country, profession and your answers to the form's questions). We receive this data from Meta Platforms Ireland Ltd., which processes it as a separate controller under its own privacy policy. The same applies to the forms on www.evroproces.com — the worker application questionnaire and the employer request form — which show a consent notice with a link to this privacy policy directly above the submit button. On those forms you give us the data directly. By submitting any of these forms you expressly consent to Evroproces d.o.o. using the contact details you provided to contact you about job opportunities or available workers, our services and promotional offers, and to send you marketing messages, through: - Phone calls - SMS and messages in messaging apps (e.g. WhatsApp, Viber) - Email Messages may be sent manually or automatically, including shortly after you submit the form, by us or by service providers that send SMS and email on our behalf. The legal basis for this processing is your consent (Article 6(1)(a) GDPR) and, for handling your enquiry, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). We keep a record of your consent (the date and the form, page or advertisement through which you gave it). You can withdraw your consent to marketing at any time, free of charge and as easily as you gave it: via the opt-out link or instructions in any SMS or email, during a call, or by writing to info@evroproces.si. After you withdraw it we will stop sending you marketing messages; we may still contact you about an application or enquiry you have submitted. Withdrawal does not affect the lawfulness of processing carried out before it.

When you send a message to our Facebook Page "Evroproces" or to our Instagram account @evroproces, we receive it from Meta Platforms Ireland Ltd. and store it in our customer relationship management system (CRM), so that our staff can answer your enquiry about a job or about hiring workers. We store: - The text of your messages and of our replies - Attachments you send (such as photos, documents, audio and video) - Your name and profile picture as shown in Messenger or Instagram, and the ID Meta gives you for our Page or account - Delivery and read receipts and reactions Our staff may link the conversation to your record in our CRM, for example to your job application. Every reply is written and sent by a member of our staff; we do not send automated or marketing messages through Messenger or Instagram. Message content is not shared with anyone other than the service providers that host our CRM. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering the messages we receive (Article 6(1)(f) GDPR). We keep: - Conversations linked to your record in our CRM for as long as we keep that record - Conversations not linked to a record for 180 days after the last message - Conversations marked as spam for 30 days - The technical delivery log for 30 days A message you unsend in Messenger or Instagram is deleted from our CRM immediately, together with its attachments. Meta keeps its own copy of the conversation under its own privacy policy.

Processing of your personal data is based on: - Performance of a contract or pre-contractual measures - Your consent - Legal obligation - Legitimate interests of our company

We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected, or in accordance with legal obligations. After this period, the data will be securely deleted or anonymized.

We may share your personal data with: - Employers seeking workers (with your consent) - Workers seeking employment (with your consent) - Service providers who assist us in our business (e.g. website hosting, email delivery and our customer relationship management system) - Authorities if required by law - Analytics and advertising providers (Google, Microsoft, PostHog), where you have consented to analytics or advertising cookies

You have the following rights: - Access to your personal data - Correction of inaccurate data - Deletion of data ("right to be forgotten") - Restriction of processing - Data portability - Objection to processing - Withdrawal of consent - Complaint to the supervisory authority

You can ask us to delete your personal data at any time, including the messages you sent us on Facebook Messenger or Instagram. Write to info@evroproces.si or send a message to our Facebook Page or Instagram account, and tell us the name or account you used so that we can find your data. We will delete your data and confirm it within 30 days, unless the law requires us to keep certain data (for example employment records); in that case we will tell you which data we keep and why. A message you unsend in Messenger or Instagram is deleted from our CRM automatically and immediately. Deleting your data in our CRM does not delete the copy that Meta keeps. You can delete conversations in Messenger or Instagram yourself.

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction.

Our website uses cookies and similar technologies. Strictly necessary storage — such as remembering your cookie choice — is used without consent. Analytics and advertising cookies are only set after you accept them in the cookie banner; if you decline, no such cookie or identifier is stored on your device. You can change or withdraw your choice at any time via "Cookie settings" in the footer, as easily as you gave it. With your consent we use: - Google Analytics 4 and PostHog, to understand how visitors use our website - Google Ads, to measure how effective our advertising is - Microsoft Advertising, to measure how effective our advertising on Bing is If you submit one of our forms after accepting advertising cookies, your email address and phone number are converted into an irreversible cryptographic hash in your browser and sent to Google in that form only. This lets Google attribute the enquiry to an advertisement without receiving your contact details in readable form. Google acts as a separate controller for this processing and may process the data outside the European Economic Area on the basis of the European Commission's adequacy decision for the EU-US Data Privacy Framework and standard contractual clauses. Microsoft does not receive your contact details. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal. Without asking for consent we also use: - Vercel Web Analytics and Speed Insights, which count page views and measure how fast pages load in aggregate, without storing cookies or other identifiers on your device - Vercel BotID, which checks technical signals from your browser when you submit a form, to confirm that it was sent by a person and not by an automated program; it is used only to keep spam out of our forms, never for analytics or advertising The legal basis is our legitimate interest in running a fast and secure website (Article 6(1)(f) GDPR). These services are provided by Vercel Inc., our website hosting provider, which processes the data on our behalf and may process it outside the European Economic Area on the basis of the EU-US Data Privacy Framework and standard contractual clauses.

We reserve the right to change this privacy policy. All changes will be published on this page with the date of last update.

For questions regarding this privacy policy, please contact us at: info@evroproces.si or +386 70 630 880.