How to Recover Laptops from Employees in Croatia

Croatia is an established hiring market for remote-first companies. Its EU membership, strong technical talent pool, and growing remote-work culture mean more distributed teams now have employees in Zagreb, Split, or Rijeka. Eventually, those employees leave. When they do, IT teams need a clear process to recover company devices without creating compliance gaps.

This guide explains Croatia's legal requirements, return logistics, costs, timelines, and the six-step recovery process you need to manage device returns compliantly.

What to know before recovering laptops in Croatia

Croatia's EU membership makes device recovery relatively straightforward. The free movement of goods means devices can move from Croatia to other EU countries without customs declarations, duties, or brokers.

EU membership simplifies logistics, but employers still need to consider two key compliance frameworks:

Zakon o radu (Croatian Labour Act): Employer-owned equipment must be returned when employment ends, while wage deductions for unreturned devices are restricted. Equipment return obligations should therefore be documented in the employment contract from the start.

GDPR, enforced by AZOP: Croatia's data protection authority, AZOP, enforces GDPR requirements. Employers must protect personal data on company devices throughout offboarding and promptly address the security risks of unretrieved equipment.

On the ground: GLS, DPD, and Hrvatska pošta provide reliable courier coverage in major cities, while rural areas and the Dalmatian islands may require additional planning. Clear, early communication with departing employees can also help prevent recovery delays.

Laptop recovery considerations in Croatia

Before you initiate a recovery, a clear picture of what you are working with helps. The table below covers the key logistical and compliance dimensions for recovering devices from Croatian employees.

Step-by-step guide to recovering laptops from an employee in Croatia

Step 1: Confirm the device and employee details

Start by verifying your asset register. Pull the device record for the employee: serial number, make, model, and current mobile device management (MDM) enrollment status. Cross-reference the employee's current Croatian address. If they have relocated since hire, confirm the pickup address directly with them. Do not rely on outdated HR records for a physical pickup.

MDM enrollment status determines your data security options. If the device is enrolled, you have remote management capabilities including selective corporate wipes and remote lock. If it is not enrolled, physical recovery is your only path to securing the data, which changes the timeline and risk profile significantly.

Also confirm whether the device is company-owned or employee-provided under a bring your own device (BYOD) policy. If it is BYOD, your recovery process will differ. This guide addresses company-owned devices.

Step 2: Plan the recovery and data handling

Decide on your data security approach before you contact the employee. The right choice depends on your incident-response policy, legal guidance, MDM configuration, and the sensitivity of the data involved. For most standard offboarding scenarios, the common approach is to apply a remote lock on the last day and complete the full secure erase after physical return, preserving forensic options in the meantime.

Your data handling plan should cover:

• Confirm whether remote lock is needed immediately upon offboarding (recommended for high-risk roles)

• Set a timeline for selective MDM-managed wipe of corporate partitions, if applicable

• Schedule a NIST 800-88 compliant secure erase for after physical return

• Plan who issues the data-erasure record and what evidence your internal compliance policy requires

NIST 800-88 (Guidelines for Media Sanitization) provides a recognized framework for secure device erasure. A data-erasure record can document the device, date, method, standard used, and responsible technician or system, giving you an audit trail for any subsequent compliance review.

Step 3: Notify the employee and arrange shipping or courier pickup

Contact the employee at least five to seven business days before their last day. The notification should be professional and clear: explain what is being returned, how the return process works, and what happens next. Under the Croatian Labour Act, employers cannot enter an employee's home without prior agreement. A pickup must be arranged cooperatively.

Send a pre-labeled return kit directly to the employee's address. Include:

• A pre-addressed, prepaid shipping label (GLS or DPD recommended for tracked EU returns)

• Adequate protective packaging (padded box or foam inserts)

• Written return instructions in both English and Croatian where possible

• A contact email or phone number for logistics questions

For remote device offboarding, sending a return kit in advance can reduce friction and help prevent failed pickups. Employees who have already received the box and label are more likely to complete the return without follow-up.

If the employee prefers a courier pickup over a drop-off, schedule it directly with GLS or DPD. Both carriers support door-to-door collection in most Croatian cities.

Step 4: Track the shipment and handle issues

Once the return is initiated, monitor shipment status in real time. Both GLS and DPD provide parcel-level tracking. Confirm you have the tracking number before the employee's last day.

If the employee misses a scheduled pickup or fails to drop off the parcel by the agreed date:

• Send a written follow-up within 24 hours

• Document all contact attempts with timestamps

• Escalate to a door-to-door courier pickup if drop-off repeatedly fails

• Engage your legal team if the device remains unreturned after the last day

Document every communication. Under the Croatian Labour Act, any enforcement action, including potential civil claims for unreturned equipment, depends on a clear paper trail showing you took reasonable steps to recover the device.

Step 5: Receive, inspect, and record the device

When the device arrives, process it immediately rather than leaving it in a queue while personal data may still be accessible.

Upon receipt:

• Verify the serial number matches the asset register

• Inspect the device for physical damage and note condition with photographs

• Log the chain-of-custody timestamp: date, time, and received by whom

• Update your asset management system to reflect the device's return and current condition

• Quarantine the device physically until the data wipe is completed

A clean chain-of-custody record supports both internal audits and any GDPR incident investigation. If a breach were to occur between the device leaving the employee and arriving at your facility, documentation of custody is essential.

Step 6: Wipe, certify, and redeploy

Apply a NIST 800-88 compliant secure erase to the device. Unlike a factory reset, cryptographic or overwrite-based erasure renders data unrecoverable rather than simply removing references to it. A data-erasure record should document the device serial number and make/model, the erasure method and tool version, the date and name of the technician or automated system, and the standard applied.

After the wipe is verified, re-enroll the device in MDM and prepare it for the next hire. In-country redeployment, assigning the device to another Croatian employee rather than shipping it internationally, saves time and reduces logistics cost. If the device is being redeployed to another EU country, no customs documentation is required.

Croatia-specific challenges and practical guidance

Rural and remote collection

Courier coverage is reliable in Zagreb, Split, Rijeka, and Osijek but more limited in rural areas and on islands such as Brač, Hvar, and Korčula. GLS and DPD cover most of continental Croatia, while island pickups may require Hrvatska pošta or a local courier. Allow an extra three to five days for recoveries outside major cities.

If you regularly hire in remote areas, establish a local logistics partner in advance to avoid delays during offboarding.

Getting data protection right under AZOP

Under GDPR Article 33, certain personal data breaches must be reported to AZOP within 72 hours of becoming aware of them. An unreturned device containing personal data can create a breach risk if it is lost or accessed without authorization.

Document recovery attempts, apply MDM remote lock when access is revoked, and escalate promptly if the device is not returned. Your IT offboarding checklist and recovery records can also provide important evidence if an incident is investigated.

Communicating clearly with the employee

Croatian Labour Act rules on remote work protect employees' privacy at home, so device collection should be arranged cooperatively rather than through unannounced physical access.

Use the period between notice and the employee's last day to agree on the return. Once employment ends, recovery may depend on voluntary cooperation or more formal legal remedies.

Final-pay deduction rules

Under the Croatian Labour Act, employers generally cannot deduct the value of an unreturned laptop from final pay without the required legal basis and employee consent.

Equipment return obligations and consequences for non-return should therefore be clearly documented in employment agreements from the start. Without appropriate contractual provisions, employers may need to pursue recovery through civil remedies.

Costs and timelines for laptop recovery in Croatia

Use the table below as a planning reference. Actual costs will vary by carrier, device value, insurance requirements, and whether the recovery is intra-EU or involves a non-EU destination.

For devices recovered within Croatia and redeployed locally, eliminate the international shipping cost entirely. Local redeployment is nearly always cheaper and faster than returning devices to a central warehouse and shipping them out again. The device lifecycle management guide has more detail on how to build redeployment into your global IT program.

The timelines above assume prompt cooperation. If communication breaks down or a pickup fails on the first attempt, add three to seven days for re-coordination. Building an extra week of buffer into your offboarding calendar for Croatian recoveries is a practical hedge against the most common delay pattern.

Simplify global device management with Deel IT

Recovering a laptop in Croatia is relatively straightforward, but managing device returns across multiple countries adds complexity. Different carriers, timelines, data protection requirements, and local employment rules can quickly turn offboarding into a time-consuming process for HR and IT teams.

Deel IT helps simplify the process by managing the device lifecycle across 130+ countries. With Deel IT, teams can:

• Automate device recovery: Trigger return workflows as part of employee offboarding.

• Coordinate local logistics: Manage carrier selection, retrieval, and shipment tracking, with availability and timelines based on location.

• Protect company data: Support secure, certified data erasure as part of the recovery process.

• Redeploy devices: Prepare recovered equipment for another worker instead of managing the process manually.

• Manage globally from one place: Reduce coordination between HR, IT, employees, and logistics providers across different countries.

For teams hiring in Croatia and beyond, Deel IT makes it easier to manage device recovery consistently while reducing the manual work involved in global offboarding.

Book a demo to see how Deel IT can simplify device recovery, tracking, data erasure, and redeployment.