Application of the policy
Valid as of 16.07.2021.
APPLICATION OF THE POLICY
If you have any questions and/or comments, please contact us by email: email@example.com or via the contact form on the Website.
WHAT PERSONAL DATA DO WE COLLECT AND HOW DO WE USE THEM?
We may collect your personal data directly from you as part of the transparent registration process when necessary to provide you with our services, for example, to sell you the products you ordered, or to communicate with you, for example at your request or as part of our promotional activities. However, when visiting our Website, we also process certain information by analyzing the information collected about your visit and use of our Website, which may also be considered Personal Data even if you cannot be specifically identified by such data.
- Data for registration, orders, purchases and deliveries of offered products
In order to be able to order and purchase products offered on our Website, we collect, among other things, the following categories of Personal Data: data on your identity (first and last name), contact details (email address, mobile phone number, residential address), data for payment and other data specified in the forms for conducting buying transactions. You also have the option of registering and creating your account on our Website. In this case, in addition to the already listed categories of data, we will also process your username and password. We process such Personal Data on the basis of a contract that we conclude with you in this manner because we need them for its conclusion and fulfillment, i.e. for the purpose of selling the products ordered and delivered to you.
- Marketing and profiling
We may offer you the opportunity to receive marketing and other promotional information, materials and/or other communications about the products and services we offer, such as e-newsletters, for which you can choose in which of the offered ways you want to receive, for example, by email, SMS/MMS message, etc. In such cases, we will ask you for corresponding personal data, such as your name, email address, mobile phone number, etc., as well as approval, i.e. consent to send you such promotional communications. We process personal data for the purposes of direct marketing on the basis of consent, and store them for a maximum of 6 months after withdrawal of consent.
Profiling is a form of automated processing that uses personal data to assess certain personal aspects related to your interests and consumer behavior concerning our offering, marketing, advertising and business in general, especially for the analysis or prediction of such aspects of behavior. While your personal data may be used for profiling of our customers and their consumer habits, such processing of your personal data is not used to make decisions based solely on automated processing or to produce legal effects that relate to you or significantly affect you in any similar manner.
For example, when you visit our Website, we collect certain data, such as your computer name and browser type, clicks, and views. Information about your use of our Website and services allows us to classify Website visitors, i.e. our customers into specific groups with a number of common characteristics, such as age group, gender or region (so-called segments). We will probably classify you into one of our segments. We use segments to customize the Website and, for example, to change the order of search results or to determine where we will post certain offers in order to make you more likely to see them. We process such Personal Data because we need them based on our legitimate interests for the purpose of improving the quality of our Website. Logs on the use of our Website will be deleted 1 year after being generated.
At any time, you have the right to object to the processing of your Personal Data for direct marketing purposes, which includes creating a profile as explained in the previous paragraphs of this item 2, or the right to withdraw or modify consent to receive promotional communications. After we receive your complaint, i.e. after withdrawing your consent, we will stop processing your Personal Data for such purposes. In doing so, the withdrawal of consent does not affect the lawfulness of the processing based on the consent before it was withdrawn. You can withdraw or change your consent, or you can exercise your right to object by sending an email to the email address: firstname.lastname@example.org or contact form indicating that you want to unsubscribe from our direct marketing list or to oppose the use of your Personal Data for profile creation. You can also unsubscribe from the direct marketing list via the link contained in each of our promotional communications. Finally, if you are a registered user, you can uncheck the box to receive marketing messages in your account.
- Maintenance and optimization of our Website
Your Personal Data will also be used to maintain and analyze our Website for the purpose of resolving functionality issues, improving the availability, security and protection of the Website from fraud or other similar violations. We process such Personal Data for the stated purposes on the basis of our legitimate interests, and Personal Data will be kept for a maximum of 1 year.
EXCHANGE OF YOUR PERSONAL DATA
We may disclose your Personal Data, i.e. provide access to your Personal Data to the competent authorities in accordance with legal obligations, as well as to our affiliates or controllers, or other business partners such as data analysis or IT service providers that maintain our information and communication networks (hereinafter : Recipients). Disclosure of Personal Data to Recipients is based on the corresponding legal grounds, for example, in the case of competent authorities, this is primarily due to a corresponding legal provision, and in the case of our affiliated companies or business partners, this will usually be an appropriate contract for personal data processing. organizational measures for the protection of your Personal Data, including in particular the obligation to maintain data confidentiality. If some of the Recipients are from so-called "third countries", i.e. countries outside the European Economic Area that are not considered to provide an adequate level of protection of personal data, such transfer of Personal Data is carried out on a valid basis and for justified purposes in a manner that ensures adequate protection in accordance with applicable law.
PERSONAL DATA SECURITY
We will implement appropriate technical, physical and organizational measures to protect Personal Data from misuse or accidental, unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access (hereinafter: Data Breach), in accordance with applicable legal regulations and accepted technical standards in the field of privacy and data security. However, no website can be 100% secure. Therefore, to the fullest extent permitted by law, we exclude liability for unintended or accidental Data Breach.
Our Website may contain links to other websites. We are not responsible for the policy or practice and/or protection of privacy, content or security on other such online sites, for which this Policy does not apply. We recommend that you always read carefully the privacy policies that apply to such online websites.
DEADLINES FOR STORAGE OF YOUR PERSONAL DATA
We will process your Personal Data: (i) within the time limits prescribed by law (this applies, for example, to Personal Data used to process and execute a purchase transaction in accordance with applicable accounting and tax regulations); or if the deadlines for storing Personal Data are not determined by law, (ii) we will process them as long as necessary to achieve the purpose for which they were collected, or within the special deadlines specified in the previous provisions of this Policy if you do not request their removal before the deadline, in accordance with your right from the next section of this Policy; in doing so, (iii) certain Personal Data, i.e. the accompanying documentation in which they are contained may be stored for a maximum of 5 years from the realization of the purpose for which they were collected, for evidentiary purposes in the event of subsequent objections, disputes or proceedings.
After the expiration of the corresponding storage period, we will destroy the Personal Data or anonymize certain Personal Data if there is a need for this and the appropriate preconditions are met. Anonymized data are no longer Personal Data because they do not allow the identification of individuals.
YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
Your rights regarding our processing of your personal data are as follows:
(1) The right to access your Personal Data, i.e. the right to receive from us confirmation of whether Personal Data are processed and, if such Personal Data are processed, to access your Personal Data, including the right to obtain a copy of the Personal Data processed;
(2) To correct or supplement inaccurate Personal Data relating to you without undue delay, including by providing an additional statement or independently, by updating the data in your account if you are a registered user;
(3) The right to deletion of personal data that relate to you, especially in cases where:
(i) Storage of data is no longer necessary for the purposes for which they were collected or otherwise processed;
(ii) Data were illegally processed;
(iii) The consent you have provided for processing your Personal Data for the said purposes has been withdraw, in whole or in part, and there is no other a legal basis for processing; or
(iv) Data must be deleted in compliance with a legal obligation under the applicable legal regulations;
(4) To limit processing in the following cases:
(i) If you dispute the accuracy of your personal data, for a period that allows us to verify the accuracy of the said Personal Data;
(ii) If processing is illegal, but you oppose the deletion of your Personal Data, and instead ask for a restriction on their use;
(iii) If we no longer need Personal Data for processing purposes, but you are requesting them in order to establish, exercise, or defend legal claims; or
(iv) If you have objected to the processing of your personal data that we process on the basis of legitimate interests - until it is established whether the legitimate interests of the Employer are more important than your personal interests;
(5) If we process some of your Personal Data on the basis of consent, you have the right to withdraw consent at any time, however, this does not affect the lawfulness of processing based on consent before it was withdrawn;
(6) In the case of automated decision-making, which involves the creation of a profile, you have the right to be informed of the logic involved, as well as the importance and foreseeable consequences of such processing for you;
(7) You have the right at any time to object to the processing of your personal data for direct marketing purposes, which includes a ban on profiling to the extent associated with such direct marketing;
(8) The transferability of your Personal Data, i.e. the right to receive your Personal Data (provided to us) in a structured, commonly used and machine-readable format and to transfer this data to another processing controller if their processing is based on consent or contract and is carried out in an automated manner; and
(9) Submit a complaint regarding the processing of your Personal Data to the Croatian Personal Data Protection Agency, Zagreb, Selska cesta 136 (www.azop.hr).
If you wish to exercise any of these rights or have any questions or comments regarding the processing of your Personal Data in connection with the use of our Website or the application of this Policy, please contact us at the following email address: email@example.com or via the contact form.