1. Who is responsible for your data

The controller is the individual operator of the ZS Proces project in Croatia. ZS Proces is not currently a registered company. For privacy questions and data-rights requests, contact [email protected].

The controller details in this policy will be updated when the business is formally registered. This does not reduce your rights under applicable data-protection law.

2. Information we may process

Website information

Our hosting and security providers may process technical data such as IP address, browser type, requested pages, timestamps and security events. This website currently uses no advertising cookies, analytics cookies or contact-form tracking.

Meta account and advertising information

When a Meta account holder authorizes an integration, it may access basic account identifiers, Business, Page and Ad Account identifiers, campaign and creative metadata, delivery and performance insights, permissions and token-related technical information, and lead information only where separately enabled and authorized.

Agent and support information

Instructions, conversation history, agent memory, generated analyses and diagnostic logs may be processed when Hermes Agent is used to perform authorized tasks.

3. Why we process information

• To connect and authenticate an account you have authorized.
• To retrieve, analyze, report on or manage advertising assets at your direction.
• To provide requested automation and maintain relevant agent context.
• To diagnose failures, prevent abuse and protect connected accounts.
• To meet legal, regulatory and platform obligations.

4. Legal bases

Depending on the activity, processing is based on your consent, steps taken at your request or performance of an agreement, our legitimate interests in delivering and securing the requested service, or compliance with a legal obligation.

5. Automated actions and human control

Hermes Agent may analyze data and prepare or execute actions within the permissions you grant. Account owners should review material campaign, budget and publishing decisions. ZS Proces does not use this integration to make solely automated decisions that produce legal or similarly significant effects about individuals.

6. Service providers and recipients

Information may be processed by Meta, Cloudflare, Hostinger, the AI model provider selected in the Hermes Agent configuration, and professional advisers or authorities where legally required. We do not sell personal data or use Meta data to create unrelated advertising profiles.

7. International transfers

Some providers may process information outside Croatia or the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard.

8. Retention

Access tokens, campaign data, conversation history, agent memory and operational logs are kept only as long as needed for the authorized task, continuity, security or legal obligations. Valid deletion requests are normally completed within 30 days; residual backups may take up to 90 days to cycle out.

9. Security

We use access controls, encrypted connections, limited permissions and provider security features appropriate to the service. No internet service is completely risk-free.

10. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction or portability of your personal data, and may object to certain processing. Contact [email protected]. You may also complain to the Croatian Personal Data Protection Agency at azop.hr.

11. Children

This service is intended for business users and is not directed to children. We do not knowingly collect children’s personal data.

12. Changes to this policy

We may update this policy when the service, providers or legal entity changes. The effective date above will be revised and material changes communicated where required.