English
Privacy Policy
Last updated: January 15, 2026
We built Workplace.hr in the EU, for the EU. That means GDPR is not a checkbox we ticked — it is the foundation the product was designed on. This page explains, in plain language, what data we collect, why, and what your rights are.
Who is the data controller?
Converge Software d.o.o., registered in Zagreb, Croatia (OIB / VAT TBA), is the data controller for personal data processed through workplace.hr and its subdomains. You can reach our data-protection contact at dpo@workplace.hr.
What we collect
| When | What | Why |
|---|---|---|
| You join the waitlist | Email address, optional source tag, IP address, user agent | To send you product updates and to throttle abuse. |
| You use a free tool (calculator, optimiser) | Anonymised query parameters | To improve calculation accuracy. No personal data is required to use the tools. |
| You contact us | Name, email, message body | To respond to your enquiry. |
We do not use third-party advertising trackers, Google Analytics, Facebook Pixel, or fingerprinting libraries. The site uses self-hosted analytics (Umami) which does not set cookies.
Why we process it (lawful basis)
- Consent — for the waitlist and marketing email. You can withdraw consent at any time by replying with “unsubscribe” or emailing
dpo@workplace.hr. - Legitimate interest — for security logging (IP, user agent, request timing) limited to 30 days.
- Contract — once you become a paying customer, processing of contract-relevant data is necessary to deliver the service.
Where it lives
Your data is hosted on dedicated EU infrastructure (Frankfurt + Stockholm). It does not leave the European Economic Area for any purpose.
How long we keep it
| Category | Retention |
|---|---|
| Waitlist email | Until you unsubscribe, or 24 months of inactivity |
| Server access logs | 30 days |
| Customer account data | Length of your subscription + 90 days |
| Invoicing records | 11 years (Croatian tax law) |
Your rights
Under the GDPR you can:
- Request a copy of all personal data we hold about you.
- Ask us to correct or delete it.
- Withdraw consent for marketing.
- Lodge a complaint with the Croatian DPA (AZOP) or your local supervisory authority.
To exercise any of these rights, email dpo@workplace.hr. We respond within 30 days.
Sub-processors
We use the following providers, each bound by a Data Processing Agreement (DPA):
- Hetzner Online GmbH — server hosting (Falkenstein, Germany).
- Stalwart Mail Server — outbound transactional email, self-hosted on the same infrastructure.
A current list is available on request.
Updates to this policy
If we change this policy materially, we will email everyone on the waitlist and post a notice on the homepage at least 14 days before the change takes effect.
Last updated: