Ban Technologies d.o.o. (“we”, “us”, “our”), based in Velika Gorica, Croatia, operates the iNTAkt operations platform (“iNTAkt”, “the Platform”). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our web application, mobile application, and related services.

1. Information We Collect

Account Information

When you register for an iNTAkt account, we collect the following personal information:

  • Name
  • Email address
  • Company name
  • Job title or role
  • Phone number

Operational Data

As you use the Platform, you enter business data that we store and process on your behalf. This includes project details, work orders, tasks, inventory records, procurement data, time tracking entries, and material consumption logs. This is your business data — you control what is entered into the Platform.

Device & Usage Data

We automatically collect certain technical information when you use iNTAkt, including your IP address, browser type, operating system, device type, pages visited, feature usage patterns, and session duration.

Mobile-Specific Data

Our mobile application may request access to the following device features, only when you explicitly grant permission:

  • Camera access — for barcode and QR code scanning and photo attachments
  • Microphone access — for speech-to-text task creation

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and operate the Platform
  • Process and display your operational data
  • Authenticate your identity and manage access controls
  • Send service notifications, including system alerts, task assignments, and stock warnings
  • Improve platform performance and fix issues
  • Respond to support requests
  • Comply with legal obligations

We do NOT use your data for advertising or sell it to third parties.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we must identify a legal basis for every type of personal data processing. We rely on the following bases:

Performance of a contract (Art. 6(1)(b))

We process account information, operational data, and authentication data to provide the iNTAkt platform under our service agreement with you. Without this data we cannot deliver the service you signed up for.

Consent (Art. 6(1)(a))

We rely on your explicit consent for: analytics cookies on our marketing website (Google Analytics 4 — see Section 8) and for newsletter emails. You can withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Legitimate interests (Art. 6(1)(f))

We process limited personal data based on our legitimate interests where those interests don't override your rights and freedoms:

  • Contact form inquiries — responding to your demo request or general inquiry
  • Service security and integrity — detecting and preventing abuse, fraud, and unauthorized access
  • Service improvement — analyzing aggregated platform usage to fix bugs and improve features
  • Direct marketing to existing customers — limited communication about features and updates relevant to your use of the platform; you can opt out at any time

Legal obligation (Art. 6(1)(c))

We retain certain records to comply with Croatian and EU law, including tax and accounting obligations (typically 11 years for invoices and contractual documents under Croatian law) and responding to lawful requests from authorities.

4. Data Storage & Security

We take the security of your data seriously and implement the following measures:

  • EU-based hosting — all data is hosted within the European Union
  • Encryption in transit — TLS 1.2 or higher for all data transfers
  • Encryption at rest — AES-256 encryption for stored data
  • Role-based access controls — granular permissions within the Platform
  • Regular security assessments — ongoing evaluation of our security posture
  • Need-to-know access — internal access limited to authorized personnel only

5. Data Sharing

We do not sell your personal data. We may share data with the following parties under specific circumstances:

  • Infrastructure providers (hosting, cloud services) — bound by data processing agreements that require them to protect your data to the same standards we maintain
  • Analytics tools — Google Analytics 4 for our marketing website only, subject to your cookie consent. See Section 8 for details.
  • Legal authorities — when required by law or to protect our legal rights

We do not share your operational business data — including projects, inventory, and work orders — with any third party.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access — request a copy of your personal data
  • Right to rectification — correct inaccurate or incomplete data
  • Right to erasure — delete your account and all associated data
  • Right to data portability — export your data in a machine-readable format
  • Right to restrict processing — limit how we use your data
  • Right to object — object to certain types of processing
  • Right to withdraw consent — withdraw your consent at any time

To exercise any of these rights, contact us at hello@intakt-suite.com. We will respond within 30 days.

7. Account Deletion

You may request complete deletion of your account and all associated data by contacting hello@intakt-suite.com. Upon receiving your request, we will:

  • Confirm your identity
  • Delete your account and all personal data within 30 days
  • Remove your operational data from active systems within 30 days
  • Purge data from backups within 90 days

8. Cookies & Tracking

We use cookies and similar technologies in two distinct contexts: our marketing website and the iNTAkt platform.

Marketing website (intakt-suite.com) — essential cookies

These are required for the website to function. They store your language preference and your cookie-consent choice. They cannot be disabled and contain no personal information.

Marketing website — Google Analytics 4 (with consent)

When you click Accept on the cookie banner, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use our website. We implement Google Consent Mode v2: until you accept, no analytics cookies are stored and only anonymized, cookieless signals are sent. Once you accept, GA4 sets first-party cookies (named _ga and _ga_*) that hold a randomly generated client ID — these are valid for up to two years.

  • What we measure: page views, button clicks (downloads, contact form submissions, language switches, FAQ opens) and aggregate traffic patterns.
  • What we don't enable: Google Signals, ad personalization, cross-device tracking, demographic profiling, or any advertising features.
  • Where data is processed: by Google in the EU/EEA where possible; some processing may occur in the United States under the EU–US Data Privacy Framework.

Withdrawing consent

You can change your mind at any time. Use the button below to clear your stored choice and the consent banner will reappear so you can choose again. You can also opt out of Google Analytics on every website by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

iNTAkt platform — essential cookies only

Within the iNTAkt application itself we use only essential cookies required for platform operation, including session management and authentication. We do not run advertising cookies, retargeting pixels, social media trackers, or cross-site profiling within the application.

9. Data Retention

We retain your data for as long as your account is active. After account deletion, personal data is removed from active systems within 30 days and from backups within 90 days. We may retain anonymized, aggregated data indefinitely for analytics purposes.

10. Children’s Privacy

iNTAkt is a business operations platform not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

11. International Data Transfers

Your data is stored within the European Union. If any processing occurs outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform or by email. The “Last updated” date at the top of this page indicates the most recent revision.

13. Contact

For privacy-related questions or to exercise your data protection rights, you can reach us at:

  • Email: hello@intakt-suite.com
  • Company: Ban Technologies d.o.o.
  • Location: Velika Gorica, Croatia