Data processing agreement (Art. 28 GDPR)

08.10.2026.

Parties

Controller: the business registered in Organizator (the Business). Processor: AI MAX d.o.o., Zdravka Kučića 39, 51000 Rijeka, OIB 32316086825, MBS 040500532, info@aimax.hr (AI MAX). The agreement is concluded by acceptance at sign-up and remains in force while the account is active.

Subject and duration

AI MAX manages appointments for the Business and sends appointment messages to its clients for as long as Organizator is used.

Data and data subjects

Clients of the Business: name, mobile number, email (optional), appointment time, service, status, the Business's note. Staff of the Business: name and, if given access, email. Special categories (health) are not processed.

Purpose

Booking, confirmations, reminders, cancellation and rescheduling, client card. Nothing else; AI MAX does not use the data for its own purposes or promotional messages.

Instructions

AI MAX processes data only on documented instructions of the Business, contained in Organizator settings and this agreement, and will inform the Business if an instruction infringes the law.

Confidentiality and security

Persons with access are bound by confidentiality. Measures: per-business separation, sign-in access, password hashing, encrypted connections, daily backups, EU servers.

Sub-processors

Hetzner Online GmbH (server hosting, EU) and, if the Business enables SMS, Telnyx LLC (SMS delivery; standard contractual clauses). General authorisation is given; AI MAX informs the Business of changes by email and the Business may object.

Assistance

AI MAX assists the Business with data subject requests (export, rectification, erasure) and notifies the Business of a personal data breach without undue delay, at the latest within 48 hours of becoming aware.

End of processing

On termination AI MAX returns the data on request and deletes it unless law requires retention; backups are deleted in the regular cycle.

Audit

AI MAX provides the Business on request with the information needed to demonstrate compliance with this agreement.