Privacy policy

08.10.2026.

Who we are

Organizator is a service of AI MAX d.o.o., Zdravka Kučića 39, 51000 Rijeka, OIB 32316086825, MBS 040500532, info@aimax.hr (AI MAX).

Two roles

For data of businesses using Organizator (sign-up, sign-in, settings) and for enquiries from this site, AI MAX is the controller. For data of clients who book with a particular business, THAT BUSINESS is the controller and AI MAX is the processor, acting only on the business's instructions under the data processing agreement (Art. 28 GDPR).

Business data

Business name, trade, email, mobile number, password (stored only as a hash) and what you enter: services, staff, working hours. Purpose: providing the service under the terms of use (contract). Kept while the account is active and up to 12 months afterwards unless law requires longer.

Clients' data

Name, mobile number, optionally email, chosen service and time, appointment status (confirmed, cancelled, attended, no-show) and a note entered by the business. We do not collect the reason for the visit or health data. Purpose: booking and appointment messages (confirmation, reminder, cancellation, change). The email address or mobile number is also used to send a one-time confirmation code with which the client confirms the booking (transactional message); the code is not stored in readable form and an unconfirmed booking is released automatically. No promotional messages. Clients exercise their rights with the business; requests sent to us are forwarded to the business.

Recipients and processors

Data is on our own servers in the European Union (Hetzner Online GmbH, Germany/Finland). Emails are sent from our own mail server. SMS, when enabled by the business, is sent via Telnyx LLC (mobile number and message text); transfer outside the EU relies on standard contractual clauses. We do not sell data.

Security

Data is separated per business, access requires sign-in, passwords are stored as hashes (scrypt), connections are encrypted (HTTPS) and backups run daily.

Cookies

The site and the app work without tracking cookies. The app stores your sign-in and language in the browser. Traffic measurement (Google Analytics) is enabled only with your consent.

Your rights

Access, rectification, erasure, restriction, objection and portability. Write to info@aimax.hr. You may complain to the Croatian Personal Data Protection Agency (azop.hr).