Privacy Policy

1. General

This privacy policy (hereinafter: the “Privacy Policy”) issued by MANPOWER d.o.o. Zagreb, Ulica grada Vukovara 23, OIB 35539279541, a company entered in the Register of Temporary Employment Agencies under number 28/09 pursuant to the Decision of the Ministry of Labor, Pension System, Family and Social Policy, Class: 102-02/21-03/28, Registration No.: 524-04-01-02/1-21-2, and MANPOWER SAVJETOVANJE d.o.o., Ulica grada Vukovara 23, Zagreb, OIB: 89200617014 (hereinafter: the “Companies” or “We”). In this regard, the Companies act as the controllers of your personal data.

This Privacy Policy contains information on the processing of your personal data if:

you are a job candidate or a user of our career-related services, whether you have applied for a specific job posting or registered in our candidate database, including cases where you visit our Facebook page or other social/professional network page (e.g., Instagram, LinkedIn) and apply for a job posting through it;
you are our business or other partner, or their employee or representative;
you are a user of the websites and apps listed herein and all related online services provided through them (“you”); and
you participate in prize games, contests or similar promotional activities that we organize or conduct (collectively: “Participants”).

This Privacy Policy applies only to natural persons and their personal data.

Once you become our employee, a separate Employee Privacy Notice will apply to you.

This Privacy Policy was published on the date indicated below and replaces the previous version.

All references to “privacy rules”, “privacy policy” or “privacy statement” shall be deemed references to this Privacy Policy.

For any questions or requests regarding your personal data, please contact us by e-mail at [email protected] or by post at the registered address of the Companies: MANPOWER d.o.o., MANPOWER SAVJETOVANJE d.o.o., Ulica grada Vukovara 23, 10 000 Zagreb, with the note “PERSONAL DATA PROTECTION”.

2. What personal data do we process and for what purposes?

We process the following categories of personal data:

Applications for job openings and registration in the candidate database

We process personal data that you provide to us, as well as data we collect during the candidate search and assessment process:

Basic personal data: first name, surname, address, date of birth.
Contact details: residential address, telephone number, e-mail address, link (URL) to a social media profile.
Additional data relevant for candidate selection: education (name of institution, degree title, duration of studies, knowledge of foreign languages, computer skills, driving license), work experience (previous employers, positions held, duration), projects (project name, URL, description, duration), professional social networks (LinkedIn), test results.
Your photograph (if provided).

For what purpose do we process your personal data?

To determine if you are interested in finding employment or changing your existing job and to include you in our candidate database. For this purpose, we may process your publicly available personal data (e.g. from competent employment authorities or other platforms), as well as data you have provided to us (e.g. through open applications, job applications, etc.). Where the processing of personal data is necessary in order to take steps at your request prior to entering into an employment contract, such data is processed on the basis of Article 6(1)(b) of the General Data Protection Regulation - GDPR (pre-contractual measures);
To undertake actions necessary to select and hire of new employees and make them available to our users (for example, selecting candidates for interviews, organising interviews, psychological and other testing, and presenting potential candidates to our users - companies to which you will be assigned after employment). Such data is processed on the basis of Article 6(1)(b) GDPR (pre-contractual measures);
To comply with our legal obligations (for example, to respond to a data subject request). In this case, the basis for the processing of your personal data is the fulfillment of our legal obligation;
To protect our legitimate interests (for example, where it is necessary to implement security measures for our network and information systems, review publicly available professional social media profiles such as LinkedIn in order to identify candidates, perform initial screening and evaluation of qualifications and experience where necessary). In such case, the legal basis is our legitimate interest;
In addition, if we have been in contact with you regarding a specific job position that you did not accept or was ultimately not offered to you, if you have given your consent, we will continue processing your personal data for future job opportunities for which you may be a suitable candidate.

Salary Benchmarking and Labor Market Analytics

We may process the following categories of your personal data for the purpose of internal salary benchmarking and labor-market analytics:

Salary-related information (e.g. your current salary level, salary expectations, benefits, salary range if specified).
Professional experience data (e.g. years of experience in a specific field, seniority level).
Job-related information (e.g. job title, job category, industry/sector, required skills or competencies).
Education and qualification data (only if relevant for benchmarking a specific position or industry).

Whenever possible, such data is processed in an aggregated or anonymized form.

For what purpose do we process your personal data?

To conduct internal salary benchmarking and analyze compensation trends in the labor market.
To improve the quality of our recruitment, advisory, and staffing services by understanding current compensation levels in the market.
To provide more accurate recommendations to clients and candidates regarding compensation expectations and the level of responsibility (seniority) associated with a particular role.

Where identifiable data must be used, processing is based on our legitimate interest in conducting market analysis to improve our services. Where required, or where we use data beyond the scope of legitimate interest, processing is based on your consent.

Outplacement Services and Professional Transition Support

We may process the following categories of your personal data for the purpose of providing outplacement services and professional transition support:

Identification and contact data (e.g. first name and surname, e-mail address, telephone number).
Work experience and professional career data (e.g. CV, employment history, professional qualifications, skills, certificates and professional achievements).
Education and training data.
Career interests and professional goals.
Information that you voluntarily provide to us during career counselling, interview preparation and other activities within the outplacement programme.

For what purpose do we process your personal data?

To provide career counselling and professional transition support services.
To assist in preparing CVs, cover letters and other documents required for seeking employment.
To prepare you for job interviews and the development of professional skills.
To identify and present suitable job opportunities, with your knowledge and according to your instructions.
To administer and improve the quality of our outplacement services.

The processing of your personal data is based on the performance of an outplacement services agreement, our legitimate interest in organizing and providing such services and, where applicable, your consent.

Your personal data will be shared with potential employers only with your prior knowledge, instruction or consent when necessary to achieve the purpose of the outplacement programme.

Depending on the purpose of the service and your preferences, your personal data may be included in our candidate database so that we can inform you about future job opportunities that match your profile. Inclusion in the candidate database is not mandatory and depends on your decision.

Contact Form

If you contacted us through one of the forms on our website (contact form), we process the following data (depending on the information you entered):

first and last name, e-mail address, phone number, company name, industry, and message.

For what purpose do we process your personal data?

For the purpose of responding to your message. In this case, the legal basis for processing your personal data is our legitimate interest or measures taken at your request before entering into a contract (if your enquiry relates to engaging our services).

Data sent via the contact form are used solely to answer your inquiry. We do not disclose data to third parties unless necessary to provide a response or required by law or another regulation binding upon us.

Visitors to Our Social Media Pages

If you are a Facebook user and have visited our Facebook page, Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; hereinafter: “Meta”) and we act as joint controllers of your personal data.

Meta processes your personal data as a visitor to our Facebook page in accordance with its privacy rules (https://facebook.com/privacy/explanation), while we influence this processing only by defining categories of Facebook users (e.g. according to age, gender, etc.) that are of business interest to us.

We are solely responsible for all posts and messages published through Facebook. Meta does not participate in their preparation or approval. Meta does not necessarily share our views, vision or similar opinions expressed through our posts or messages.

We receive user data from Meta exclusively on a statistical, for us anonymized, basis.

If you have left a comment, inquiry or similar on our Facebook page, we will not store or process your data separately. This also applies to our other social media websites, such as LinkedIn (https://www.linkedin.com/legal/privacy/eu), Instagram or YouTube (https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/).

If you apply for a job through Facebook, we process your application in the same manner as applications submitted through other channels.

Our Business Partners

We process personal data that you have provided to us, as well as data collected during the establishment and maintenance of our business relationship.

This includes the following data (data relating to an authorised person or contact person):

first name, surname, relationship with the legal entity (owner, director, employee or similar), telephone number, e-mail address.

For what purpose do we process your personal data?

To fulfil our contractual obligations to you and to take other necessary actions related to the conclusion and performance of a contract (e.g. issuing invoices) or prior actions (e.g. sending offers). In this case, the legal basis for the processing of your personal data is the performance of our contract or taking actions at your request before concluding the contract. If you are an employee or representative of our business partner, the legal basis is our legitimate interest due to our business relationship with your employer;
For other purposes where we have a legitimate interest as your business partner (for example, where it is necessary to assess your satisfaction with our services, etc.).
To fulfill our legal obligations.

Organization and Management of Contests and Prize Draws

For the purposes of prize draws, the Companies (“Organizer”) act as data controllers of your personal data.

What data do we collect?

You may choose to provide your name and e-mail address in order to participate in the prize draw. Providing your personal data is entirely voluntary.

All personal data is collected directly from you.

The Organiser processes your personal data for the following purposes:

1. Voluntary participation in the prize draw and contacting winners

Data: first name, surname, address, mobile phone number, e-mail address.

Legal basis: consent (Article 6(1)(a) GDPR).

2. Contacting winners and delivering prizes

If you become a winner, we will contact you and request additional information required for delivering the prize.

Data: delivery address, telephone number, information required for digital delivery (e.g. gift cards), as applicable.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

How will your data be used?

Your personal data will be used exclusively for:

registration of participants in the prize draw,
contacting winners,
prize delivery.

We do not carry out automated decision-making or profiling.

Who Will Have Access to Your Data?

Access to your data is limited to uthorized employees of the Organiser and the Organiser’s affiliated companies involved in the implementation of the prize draw.

These affiliated companies act as data processors and provide administrative and operational support solely in accordance with the Organiser’s instructions.

Your data will not be shared with third parties, except with the IT service provider maintaining the data collection system and with the delivery service responsible for prize distribution, where applicable.

Personal data is not transferred outside the EU/EEA.

How long do we retain your data?

Personal data of Participants is retained until the prize draw has been completed and the winner has been contacted, after which it is deleted without undue delay.

We may retain limited information necessary to demonstrate the lawful conduct of the prize draw and the winner selection process, where required. In such cases, Participants’ personal data may be included in such documentation and retained only for as long as required by applicable regulations.

Personal data of the winner (first name, surname and place of residence) is retained only for as long as necessary to comply with applicable legal obligations.

Direct Marketing

We wish to regularly inform our clients and potential clients about our services and offers through direct inquiries, offers or newsletters.

Depending on its type, a subscribed client or potential client receives regular updates (e.g. daily, weekly, monthly) regarding new services and offers. The newsletters may also contain advertising messages.

For what purpose do we process your personal data?

The primary purpose of processing is to send advertisements, newsletters, offers and other enquiries to customers and prospective customers, in order to inform customers and prospective customers about new services of the Data Controller and thereby to acquire (new) active customers for the Data Controller.

The purpose of processing also includes:

to carry out market research, customer satisfaction surveys;
customer relationship management;
ensuring quality and efficient customer service;
maintaining contact.

What personal data is processed?

Full name; e-mail address; e-mail address status (active or inactive); country and city; records of sent and opened e-mails and clicks on links contained therein; date of data entry; company name; and where applicable, telephone number.

What is the legal basis for processing?

The processing of personal data is based on the data subject’s consent and legitimate interest (Article 6(1)(f) GDPR). The data subject may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal.

How long is personal data processed?

We will process your data until you withdraw your consent, but no longer than two years from the date consent was given.

Data may be deleted before that period expires if the purpose for which it was collected ceases to exist or the data is no longer required for processing.

Where processing is based on legitimate interest, personal data is retained for no longer than two years following the last significant interaction (e.g. multiple emails opened, email clicks, or other engagement). If no such interaction occurs within this period, the data is deleted or anonymised unless another legal basis applies.

What is the source of the data?

We obtained your contact details either through your direct interaction with us (for example, by registering on our website or using our services) or from publicly available sources where business contact information is made accessible.

3. Who Has Access to Your Personal Data?

We consider your personal data to be a business secret and protect it in accordance with applicable regulations and best practices.

Third parties may access and process your personal data only in the situations described below:

Our clients (employers to whom you will be referred when we assist in your hiring) are entitled to access your personal data if you are a candidate who meets their requirements. For instance, if you have applied for a job posting for a certain position, after which we have contacted you to access the selection process, introduced you to the employer’s identity and you met the required criteria during the process, we share you data with the client who ordered that posting;
Affiliated companies within the same corporate Manpower group may access your personal data where necessary for compliance with legal obligations, conducting recruitment and hiring processes, including the management of a shared candidate database, in accordance with this Privacy Policy.
Third party service providers who provide us with services necessary for our operational activities, such as accounting services, postal services, archiving services, etc. In such cases, they process your personal data solely in accordance with our instructions and are obliged to protect your personal data.
Third party service providers whose services we use to comply with legal obligations or where we have a legitimate interest, and who process your personal data in accordance with legal authorities granted to them. This includes auditors and similar professionals.
Competent authorities conducting supervision over the legality of business operation and actions. In such cases, they process your personal data in accordance with their legal authority.

4. Profiling and Automated Decision-Making

We do not perform automated decision-making based on your personal data, nor do we create profiles of data subjects for such purposes.

Do We Use Artificial Intelligence (AI)?

Yes, we occasionally use artificial intelligence (AI) to support administrative and similar business activities.

Where personal data processing occurs, it is solely incidental and limited to the data necessary for achieving a specific administrative or operational purpose.

We do not use AI to make decisions about individuals, including employment decisions, candidate profiling or any automated decision-making that produces legal effects or similarly significant effects on individuals.

AI tools are used solely as assistance to employees in performing their regular business activities, with appropriate human oversight always ensured.

We do not use sensitive personal data for AI systems, and AI systems are not used to assess, rank, profile or make decisions about individuals.

5. Transfer of Personal Data to Third Countries

Your personal data may be transferred outside Croatia only where necessary, for example:

to affiliated companies involved in your employment process;
to clients or service providers outside Croatia engaged to provide services such as IT hosting, cloud services, HR platforms, payroll processing or similar operational support;
to our subcontractors for staffing services, as appropriate.

All transfers to third countries are carried out with appropriate safeguards in accordance with the GDPR.

6. How Do We Protect Your Personal Data?

The protection of your personal data is extremely important to us.

Some of the measures we implement include:

implementation of database pseudonymisation whenever possible;
minimisation of personal data processing (handling only the necessary data set for a particular process);
ensuring confidentiality in handling personal data, both internally and externally;
application of modern data protection methods and access control mechanisms for data resources containing personal data;
continuous monitoring of all resources used for personal data processing.

7. Retention Period

We retain personal data only for as long as necessary to fulfil the purposes for which they were collected.

For personal data subject to legally prescribed retention periods (for example, under accounting regulations), we retain your data throughout the mandatory retention period and delete it without undue delay after its expiry.

Personal data processed on the basis of your consent is retained for the duration of that consent. Data will be deleted upon the expiry or withdrawal of consent, or earlier if the purpose for which it was collected no longer exists or the data is no longer required for processing. Deletion is carried out without undue delay as soon as reasonably possible.

Personal data processed on the basis of our legitimate interest is retained only while that legitimate interest exists and no longer than necessary to achieve the purpose of processing. Once the legitimate interest ceases to exist, the data is deleted within a reasonable period.

In the case of a job application, if you were not selected and you have not given consent for future processing, your application and related data will be deleted after the recruitment process has concluded.

If you provided consent for future employment opportunities, your personal data will be processed until that consent expires or is withdrawn, or earlier if the purpose for which the data was collected ceases to exist or the data is no longer required for processing, but in any case not longer than two years from the date consent was given.

Personal data can be processed until end of a court, administrative or extrajudicial proceeding.

8. Your Rights

We will respond to your request regarding your personal data without undue delay and no later than one month from the date of receipt of the request.

Exceptionally, if the request is complex or if a large number of requests have been received, this period may be extended by an additional two months, of which we will inform you within one month of receiving the request, together with the reasons for the extension.

The exercise of your rights is generally free of charge. However, in certain cases, in accordance with the General Data Protection Regulation, we may charge a reasonable fee to cover the administrative costs of processing the request or refuse to act upon the request.

You may exercise your rights by (1) sending your request to [email protected]r; (2) explaining in the message which right you wish to exercise; (3) providing information by which we can identify you (your full name and date of birth or personal identification number (OIB)).

You may also send your request by post to MANPOWER d.o.o. or MANPOWER SAVJETOVANJE d.o.o., Ulica grada Vukovara 23, 10 000 Zagreb with the indication: “PERSONAL DATA PROTECTION”. Upon receipt of your request, we will send you an acknowledgment of receipt. Please note that you may exercise your rights only in relation to your own personal data.

Access to Personal Data

You have the right to request confirmation as to whether we are processing your personal data and to obtain information on how we process it.

Correction of Inaccurate Personal Data

You have the right to request the correction of your inaccurate personal data, as well as the right to have your personal data completed.

Deletion of Personal Data

If you withdraw your consent to the processing of your personal data, or when the legal basis for the processing or your personal data ceases to exist, or in other cases provided for by the applicable law, you have the right to request the deletion of your personal data.

Restriction of Processing of Personal Data

If you dispute the accuracy of your personal data or in other situations provided for by the GDPR, you have the right to request the restriction of the processing of your personal data until such situation is resolved.

Portability of Personal Data

You have the right to request the transfer and obtain your personal data.

Objection to Processing or Handling of Your Personal Data

You have the right to object to the processing of your personal data, as well as generally to the manner in which we handle your personal data.

Right to Withdraw Consent

If you have provided it, you have the right to withdraw your consent to the processing of personal data. You may also request the permanent deletion of your personal data that we processed on the basis of your consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

If you would like to learn more or exercise any of the above rights, please contact:

MANPOWER d.o.o. or MANPOWER SAVJETOVANJE d.o.o., e-mail: [email protected]

or by post at: MANPOWER d.o.o. or MANPOWER SAVJETOVANJE d.o.o., Ulica grada Vukovara 23, 10 000 Zagreb, with the indication: “PERSONAL DATA PROTECTION”.

Right to Lodge a Complaint with the Personal Data Protection Agency

At any time, you have the right to lodge a complaint with the competent personal data protection authority: Croatian Personal Data Protection Agency (AZOP) Ulica Metela Ožegovića 16, 10000 Zagreb regarding the processing and protection of your personal data.

9. Final Notes

This Privacy Policy enters into force on the date of its publication on the website: https://manpower.hr/. The Privacy Policy (including all of its annexes) may be updated from time to time in order to reflect changes in our privacy protection practices and regulatory developments. We will inform you of significant changes by publishing a prominent notice on our website, with each notice indicating at the top the date on which it was last updated.

Published on: 30 July 2026

Effective from: 30 July 2026

Contact Us

Our friendly team would love to hear from you.

Our presence in the SEE market