Privacy Policy

Pontis Technology d.o.o. (“Pontis,” “we,” “our,” or “us”) values and respects the privacy of all individuals
who interact with our services, website, and platforms.

This Privacy Policy explains how we collect, use, disclose and protect personal data, as well as the
rights that individuals have in relation to their data. By using our website or services, you
acknowledge that you have read and understood this Privacy Policy.

Who We Are

Pontis Technology d.o.o. is a technology company headquartered at Savska cesta 144a, Zagreb,
Croatia. We provide advanced software development, artificial intelligence solutions, DevOps, data
migration and security services to global clients. For the purpose of applicable data protection
legislation, Pontis Technology acts as the data controller with respect to personal data collected
through our website and services. You may contact us regarding privacy matters at
hello@pontistechnology.com.

Data We Collect

We collect personal data directly from you, automatically when you use our website, and indirectly
from third parties. This includes:

1. Contact information such as your name, email address and phone number provided when
submitting inquiries or job applications.

2. Information you provide when applying for employment, including your CV, cover letter and
professional history.

3. Technical data such as IP addresses, browser type, operating system and browsing behavior,
collected through cookies and similar technologies.

4. Data from third-party analytics and marketing tools to help us understand how visitors interact
with our services.

Purpose and Legal Basis of Processing

We process personal data for the following purposes:

• To respond to inquiries, requests or messages you send us.
• To evaluate and process job applications and manage recruitment.
• To provide, improve and optimize our services, including analyzing website usage.
• To communicate with you regarding updates, news or marketing materials, where permitted.
• To comply with legal obligations and protect our legitimate business interests.

Our processing is based on legal grounds under the General Data Protection Regulation (GDPR),
including performance of a contract, compliance with legal obligations, consent, and legitimate
interests.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, enhance user experience and
analyze traffic. Cookies may be functional, statistical or marketing-related. You can manage or
disable cookies through your browser settings. Some cookies are necessary for the website to
function properly and cannot be disabled.

Sharing of Data

We do not sell or rent personal data. We may share data with trusted third-party service providers
such as hosting partners, analytics providers and recruitment platforms. These processors act on our
instructions and are bound by contractual obligations consistent with GDPR. If data is transferred
outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as
Standard Contractual Clauses.

Internally, your personal data is disclosed to our employees and associates only on a need-to-know
basis. Respecting the same rule, we will share your personal data with other Pontis Technology
entities seated in Germany, and Bosnia and Herzegovina, based on legitimate interest for wide
business-related reasons, such as research and development, HR matters, accounting, network and
information security, internal administrative purposes, prevention of fraud, etc.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Contact form submissions are typically retained for up to one year. Recruitment data is retained for 6 months or 4 years, depending on your approval, during which we may inform you about future employment possibilities.

Security of Data

We implement technical and organizational measures to protect personal data from unauthorized
access, disclosure, alteration or destruction. These include encryption, access controls and regular
monitoring of our systems. While we strive to protect your data, no system is entirely secure, and we
cannot guarantee absolute security.

Your Rights

You have the following rights regarding your personal data:

• Right to be informed – You can ask for clear information about how we collect, use, and share your personal data.
• Right to rectification – You can ask us to correct or update any inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”) – You can ask us to delete your personal data if it is no longer needed, if you withdraw your consent, or if you object to the processing.
• Right to restrict processing – In certain cases, you can request that we stop processing your personal data, except for storage or specific lawful uses.
• Right to object – You can object to the processing of your data in certain situations, including if we use it for direct marketing.
• Right to withdraw consent – If we rely on your consent for processing, you can withdraw it at any time without affecting prior lawful use.
• Rights in relation to automated decisions – You can ask us to explain and review any decision made solely by automated systems (including profiling) that could significantly affect you.
• Right to complain – You can file a complaint with your local data protection authority, such as the Croatian Personal Data Protection Agency (AZOP). if you believe your rights have been violated.

If you wish to exercise your rights, have questions, or want to make a complaint, please contact us at hello@pontistechnology.com. We will respond within 30 days, as required by law.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology
or legal requirements. Updates will be posted on this page with the revised effective date. We
encourage you to review this Privacy Policy periodically to stay informed.

Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Croatia. Any
disputes arising in connection with this Policy shall fall under the jurisdiction of the courts in Zagreb,
Croatia.

Contact

For any questions or concerns about this Privacy Policy or the way your data is processed, you may
contact us at:

Pontis Technology d.o.o.
Savska cesta 144a
10000 Zagreb, Croatia
Email: hello@pontistechnology.com