Privacy statement
Last updated: 26 September 2026
This statement explains how we process personal data collected through this website and when you use the HRKI platform.
1. Controller
INFO NETWORK d.o.o., Valturska ulica 78/1, 52100 Pula, Croatia
OIB (VAT ID): 92134883875
Email: info@gtnet.hr · Phone: +385 52 637 000
Our customers publish their own websites on HRKI. For the data of their visitors — for example messages sent through a form on a customer's site — the customer is the controller, and we act as the processor on the basis of a processing agreement.
2. What data we collect
- Access requests: name, email address, company and the description you enter in the Request access form.
- Accounts: name, email address, organisation and workspace memberships of people invited to HRKI, and a record of when an invitation was sent and used.
- Work in the platform: the content of projects (pages, files, images, articles, price lists, form settings), their version history — including the name of the person who made each change — and logs of operations such as publishing.
- Connections to AI assistants: access tokens and sign-in records for assistants you connect to HRKI.
- Technical data: server logs (IP address, time of access, browser type), needed for the security and operation of the service.
3. Purposes and legal bases
- Replying to an access request and opening an account — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Providing the platform — performance of a contract (Art. 6(1)(b)), or processing on the customer's instructions (Art. 28 GDPR).
- Security, abuse prevention and version history — legitimate interest (Art. 6(1)(f)).
- Legal obligations — accounting and other regulations, including publishing price lists (Art. 6(1)(c)).
4. AI features and AI assistants
Some features use AI models, for example generating a first draft, translating texts or creating audio versions of articles. When you use such a feature, the content needed for it is sent to the provider of the model used for that feature. Nothing is sent unless you start the feature.
You can connect HRKI to an AI assistant of your choice (for example Claude, ChatGPT or Gemini). The assistant then reads and changes your projects on your instructions, with the permissions of your account. The exchange of data with that assistant's provider is governed by your own agreement with them.
5. Where the data is processed
HRKI runs in the Republic of Croatia, on infrastructure operated by INFO NETWORK d.o.o. in an environment certified to ISO/IEC 27001. Data is not transferred outside the European Economic Area, except where a feature you use requires it (see section 4), in which case the provider's terms apply.
6. Recipients of the data
Only employees who need the data for their work have access to it, under access control. We may share data with processors providing technical services (for example sending email), with competent authorities where the law requires it and, for customer sites, with the customer on whose behalf we process it. We do not sell data.
7. Retention periods
- Access requests: up to 12 months from the last contact, unless a business relationship arises from it.
- Accounts and project content: for the duration of the contract. Deleted projects are kept in the trash until an administrator removes them permanently.
- Published price lists: at least 30 days after each change, as the regulation requires.
- Accounting records: in line with statutory periods.
- Server logs: up to 12 months.
8. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and portability, and the right to object to processing based on legitimate interest. Send a request to info@gtnet.hr; we reply within one month at the latest.
If you believe we process your data unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.
9. Cookies
This website does not use cookies for tracking or advertising. When you sign in to the HRKI application, a technically necessary cookie keeps you signed in; it is removed when you sign out or when it expires. Fonts are loaded from Google Fonts, which means your IP address is sent to that provider in order to deliver the files.
10. Changes
We may amend this statement as the platform develops. The date of the last change is given at the top of the page.