Privacy

Controller: INMAR d.o.o., Gardinovec 24, 40319 Belica, Croatia · info@inmar.hr.

Enquiry and partner attribution

We process contact, business and needs data for pre-contractual steps at your request. A valid referral code records attribution only; the partner receives no form data through the website.

Local draft

The browser stores only non-sensitive scope answers locally. Name, email, phone and consents are not stored in the local draft.

Flow enquiries and roles

When a Flow client uses the enquiry form on its website, that client determines the purpose and content of processing and is generally the controller; INMAR d.o.o. processes the data as a service provider under the written data-processing terms. The form collects contact and sector-specific enquiry details and optionally up to three photos. Automotive enquiries do not request VINs, registration numbers or vehicle documents.

Flow portal users sign in through a single-use link valid for 15 minutes; the protected session lasts eight hours. Clients can export and delete enquiries. Photos are deleted after no more than 90 days; enquiries by default 24 months after last activity, or earlier/on a shorter configured term. Audit data is limited to what is needed for security and accountability.

Basic form and Care status

For Start and Business, the content of a basic enquiry is processed only to deliver the email to the client and is not retained by WebStartHub after successful delivery. For Care, technical checks are kept for up to 90 days and daily non-personal totals for up to 13 months. These totals contain no IP address, user agent, full referrer or visitor identifier, and distinguish a click, a delivered form and a confirmed job.

Online contract and acceptance evidence

For a future enabled order, we record the business, authorised representative, business purpose, email, market and language, accepted summary and contract version, receipt time and verified Stripe association. These data serve contract administration, statutory duties and our legitimate interest in acceptance evidence, not marketing. Contract and accounting records are kept under applicable retention periods and as needed to protect legal claims. Card numbers and CVC are not stored by WebStartHub.

The data-processing annex is accepted within the same online contract — no separate signature.

Recipients, retention and analytics

Recipients may include VPS hosting, Resend for transactional email and, when you explicitly start online payment, Stripe. Referral partners receive no enquiry data or portal access. Google Analytics remains disabled until consent. There are no solely automated decisions or automatically sent AI replies.

Individuals may request access, correction, deletion, restriction or portability and may withdraw consent for follow-up messages at any time. Contact: info@inmar.hr.