Legal notice

Digitalni Ugovori (digitalni-ugovori.eu, digital-contracts.eu) is operated by: • Company: registered company name — the full name exactly as entered in the court register. • Legal form: legal form, e.g. d.o.o. / j.d.o.o. / obrt. • Registered seat: registered seat — street, number, postal code, city, country — the registered address, not a PO box. • The service runs on the provider's own servers, in a data centre located at: data centre location — city and country. We do not use a third-party cloud application platform.

• Register court: commercial court where the company is registered — the commercial court holding the company's entry. • MBS: court register number (MBS) — the company's court register number. • OIB: company OIB (11 digits) — the company's 11-digit Croatian identification number. • Share capital: share capital amount and whether it is paid in full — the amount, and whether it is paid up in full. • VAT identification number: VAT ID, or state that the company is not registered for VAT. • Bank and account: bank name, IBAN IBAN of the business account — the company's business account.

• Persons authorised to represent the company: names of board members / persons authorised to represent, and whether they represent jointly or individually — board members and how they represent the company (individually or jointly). • Supervisory board: chair of the supervisory board, or state that there is no supervisory board — if the company has no supervisory board, say so here explicitly rather than dropping the field.

• Email: contact email address — an address someone actually reads; the law requires rapid, direct and effective communication. • Phone: contact phone number, or state that support is email-only. • Postal address for written correspondence: postal address for written correspondence, if different from the registered seat. Use the same email address for questions about contracts and signing, for personal-data requests, and to report an error on these pages.

If the activity is subject to authorisation or supervision, the competent authority is: supervisory authority name and address, or state that the activity requires no authorisation. If the service is provided within a regulated profession, state the professional body, the professional title and the state that granted it: professional body, professional title and the state that granted it, or state that no regulated profession is involved. A software platform for concluding contracts and signing them electronically does not normally require a specific authorisation, but credit or financial intermediation may. The operator must check which of these the business actually does and enter the correct answer here.

Digitalni Ugovori is not a qualified trust service provider and is not on any EU trusted list. That matters, because it separates the signature levels in the application — three are available today; AES and remote QES are announced but not yet live: • Simple signature (SES): the signer draws or types a mark, and the document is then sealed with the platform's own certificate, so later alteration is detectable. That certificate identifies the platform, not the signer. The signer's identity is evidenced by the audit trail — possession of the one-time link, IP address, user agent and timestamps. This is not a qualified signature. • Advanced signature (AES): the simple signature plus additional identity factors. Announced, not yet available. • Qualified signature (QES) with an eID card: the signer signs with their Croatian eID card via Web eID; the private key never leaves the card. • Remote qualified signature through a qualified trust service provider: planned, not yet live. Once it is live, the provider will be named here: name of the qualified trust service provider, once remote QES goes live. Timestamps come from public time-stamping authorities: name(s) of the time-stamping authority or authorities in use. Signature validation runs on a locally hosted EU DSS instance, which fetches the EU List of Trusted Lists and the national trusted lists from public EU endpoints.

Which personal data is collected, how long it is kept and what rights you have is described in the Privacy Policy, published as a separate page. Data protection officer: data protection officer name and contact, or state that no DPO is appointed and give the privacy contact address. The supervisory authority is the Croatian Personal Data Protection Agency (AZOP, azop.hr); you can complain to it directly, without contacting us first. One thing is worth stating here too: signed documents and their audit trail are retained even after an erasure request, because they are evidence of a legal act for the other parties to that document; your remaining data is anonymised in that case. The details are in the Privacy Policy.

Disputes arising from use of the service fall to: competent court or agreed place of jurisdiction. Out-of-court consumer dispute resolution: out-of-court consumer dispute resolution body the operator accepts, or state that none is designated. Note to the operator: the European online dispute resolution (ODR) platform ceased operating in July 2025, so do not add the old link to it — name a body you genuinely accept, or state plainly that none is designated.

Responsible for the content of these pages: name of the person responsible for the content of this site. Text, design and marks belong to the service provider, except where stated otherwise next to a particular item. The pages may contain links to third-party sites we do not control and whose content we are not responsible for. Explanations on these pages are informational; they are not legal, tax or financial advice. For your own situation, consult a professional.

This page was last reviewed: date this page was last reviewed. If you spot an incorrect or outdated detail, write to contact email address and we will correct it. The Privacy Policy, Terms of Use and Accessibility Statement are published as separate pages.