Pursuant to Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals in connection with the processing of personal data on the free movement of such data and on the repeal of Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: General Data Protection Regulation), which has been in full application since 25 May 2018 in the Republic of Croatia and all member states of the European Union, as well as the Law on the Implementation of the General Regulation on Data Protection (Official Gazette No. 42/18, hereinafter: the Law), the Labor Law (Official Gazette No. 93 / 14 and 127 / 17), the Occupational Safety and Health Act (Official Gazette No. 71/14, 118/14 and 154/14), i.e. in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union and the best to European practice, STJEPAN TOMIĆ.
registered in the commercial court in the COMMERCIAL COURT IN SPLIT (hereinafter: ENDEM D.O.O.), as the manager of personal data processing of users of its services and customers, has created a Policy on the protection of personal data of service users and customers. The Policy on the Protection of Personal Data Privacy is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates which user data is collected, how such data is processed, and for what purposes it is used. The policy on privacy protection also informs service users and/or customers of their rights in the collection and further processing of personal data, all for the purpose of protecting their privacy in a broader sense.
The privacy protection policy is based on the following principles of personal data processing: the principle of legality, transparency and best practice, the principle of limited processing and reduction of the amount of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of integrity and confidentiality of data, the principle of responsibility, the principle of trust and fair processing, the principle of opportunity (purpose of processing), the principle of processing in unnamed (anonymized) form.
The Privacy Policy applies to all services offered by ENDEM D.O.O., whereby the goal of the Policy is to inform users in a clear and transparent manner about the procedures for processing their personal data and their rights. First of all, users can contact the Association at any time with a request to change, supplement and/or update the data relating to them, as well as withdraw the given consent and request the cessation of further processing of personal data.
The person responsible for processing personal data is: STJEPAN TOMIĆ
Contact information for the protection of personal data:
e-mail: [email protected]
Ways of collection and types of personal data that are collected
Directly by the users themselves in such a way that the users themselves submit the data to ENDEM D.O.O. as a data controller in a certain scope of data that is essential for the provision of appropriate services, sales or some other link between the user and HVARINSIDER.COM. In order to provide appropriate services, the user is obliged to submit to ENDEM D.O.O. the following information which is necessary for the establishment of a contractual relationship for the purpose of providing a particular service and/or selling certain products. The customer – user can submit the data orally or in writing to the center of ENDEM D.O.O. , via an email sent to one of the email addresses of ENDEM D.O.O. and through the website ENDEM D.O.O., HVARINSIDER.COM.
From other publicly available sources of data about companies and natural persons in companies on internet portals, telephone directories containing such data and other publicly available services only for the purposes for which they were initially collected.
Automatically by visiting ENDEM D.O.O. internet (web) pages, applications and portals, where it is data associated with network identifiers (addresses of Internet protocols and cookie identifiers, such as Google Analytics for monitoring user and/or customer interaction).
A cookie is a small data file that is stored on a computer or mobile device when you visit a certain website. Cookies are used to provide a better user experience to each user and/or customer, save user and/or customer preferences, with the aim of making the website work more efficiently, as well as for monitoring and testing the use and visits of the ENDEM D.O.O. website.
By turning off and/or blocking the saving of cookies, the user and/or customer can still browse the websites of ENDEM D.O.O.. However, there is a probability that certain features and/or functionalities of the website will not be available to such a user and/or customer, or that the time required to access certain functions of the website will be longer than usual.
The network identifiers in question may leave traces that, in combination with other identifiers and information provided by Internet service servers, may serve to identify the user and/or customer.
The amount, that is, the extent of personal data that ENDEM D.O.O. collected depends on the type of service that ENDEM D.O.O. provides its users and/or customers, as well as the legal basis on which it collects data. ENDEM constantly takes care of collecting only the necessary scope of personal data that is needed to achieve the legally established purpose for which the data is processed.
Data on potential users
ENDEM also collects data on potential users and/or customers of its services and/or products. This data includes basic data (name and surname, e-mail address), but also the interests of potential Users and/or Customers who contact the association with the desire to be informed and/or offered certain products and services.
A cookie is a small data file that is stored on a computer or mobile device when you visit a certain website. Cookies are used to provide a better user experience to each user and/or customer, save user and/or customer preferences, with the aim of making the website work more efficiently, as well as for monitoring and testing the use and visits of the ENDEM D.O.O. website.
By turning off and/or blocking the saving of cookies, the user and/or customer can still browse the websites of ENDEM D.O.O.. However, there is a probability that certain features and/or functionalities of the website will not be available to such a user and/or customer, or that the time required to access certain functions of the website will be longer than usual.
The network identifiers in question may leave traces that, in combination with other identifiers and information provided by Internet service servers, may serve to identify the user and/or customer.
The amount, that is, the extent of personal data that ENDEM D.O.O. collected depends on the type of service that ENDEM D.O.O. provides its users and/or customers, as well as the legal basis on which it collects data. ENDEM constantly takes care of collecting only the necessary scope of personal data that is needed to achieve the legally established purpose for which the data is processed.
What types of personal data are collected?
The data that the Customer – User most often provides are:
name and surname
address
personal identification number (OIB)
contact phone number and/or mobile phone
e-mail contact information (e-mail address)
data from the identity card
data on the bank account and card number for the purposes of regulating the payment obligation
Where are personal data processed?
Personal data of Users – Customers of ENDEM D.O.O. processed in the Republic of Croatia.
Where is the collected data stored?
The data is processed in such a way that all or part of the information about the Customers – Users – Respondents is stored in the database of the data controller.
Obligations of the processing manager in relation to processing security
TECHNICAL AND INTEGRAL DATA PROTECTION
The Processing Manager implements technical and organizational measures to ensure an adequate level of security.
The Data Controller also takes measures to ensure that any individual acting under the Data Controller’s responsibility, who has access to personal data, does not process such data unless instructed by the Data Controller.
Taking into account the nature, scope, context and purposes of processing, as well as risks of different levels of probability and severity for risks to the rights and freedoms of individuals, the Controller implements appropriate technical and organizational measures in accordance with the Security Policies to ensure and be able to prove that the processing is carried out in accordance with the General Regulation.
Purpose of data collection and further processing
ENDEM collects and further processes personal data of users and/or customers for the purpose of entering into and executing contracts, realizing purchases or servicing equipment, delivering ordered products, providing advice and assistance with product use, providing appropriate additional and/or extended product warranties, resolving user and/or customer complaints, and other actions related to entering into and executing contracts in accordance with applicable regulations.
The processing of personal data of users and/or customers for the aforementioned purposes is a necessity and a legal basis for concluding a contract, i.e., in the event that the user and/or customer refuses to provide essential data, the service will not be able to conclude a contract and/or take certain actions related to the execution of the concluded contract.
Organization of prize games
ENDEM periodically organizes prize games, so the data is used to inform about the prize won.
Direct promotion (marketing)
Contact information of users and/or customers can be used to send promotional information about products and services of ENDEM D.O.O. if the Customer – User has given consent.
Videos
ENDEM D.O.O. uses surveillance cameras to protect people and property.
Duration of storage of personal data
Depending on the purpose and legal basis on which the personal data of users and/or customers is collected, ENDEM D.O.O. in certain cases, it is mandatory to keep personal data for the time period (period) prescribed for a particular purpose by the relevant regulations or after the end of the purpose for which they were collected. During the legal term that binds ENDEM D.O.O. for the storage of individual personal data or when the purpose ceases, they are deleted.
In cases where the basis for data collection and processing is the user’s and/or customer’s consent, personal data is stored for 10 years.
Data processed based on the consent of the user and/or customer may be deleted even before the expiration of the period specified in this Policy, in the event that such deletion is requested by the user and/or customer, or when the user and/or customer objects to such processing in writing via the Internet via the published e-mail address: [email protected].
Ways of exercising rights
Exercise your rights if you believe that there has been an irregularity in the processing of your personal data, via contact information or by email [email protected]. Also, the user and/or customer has the right to submit a complaint to the national supervisory authority.
Under what conditions and for what reason are personal data forwarded to third parties
Personal data of Customers-Users of ENDEM D.O.O. forwards to third parties (including competent authorities) in the following cases:
in order to fulfill the legal obligations of ENDEM D.O.O. when such processing is necessary for the protection of the key interests of Buyers – Users
in order to fulfill the contractual obligation, to perform work for the account of the Customer – User, for which it is necessary to hire a third party – processor
Processing of personal data in the context of employment
Personal data of workers may be collected, processed, used and delivered to third parties only if this is determined by law or if it is necessary for the exercise of rights and obligations from the employment relationship, i.e. in connection with the employment relationship.
In order to exercise rights and obligations from the employment relationship, the data controller will collect, process, use and deliver to third parties only those personal data that are necessary for the stated purpose, and will deliver this data only at the request of courts and other state or public bodies.
GDPR and Cookies
About this cookie policy
This Cookie Policy explains what cookies are and how we use them, the types of cookies we use, i.e. the information we collect using cookies and how that information is used and how to control cookie settings. For more information on how we use, store and protect your personal data, please see our Privacy Policy.
You can change or withdraw your consent from the Cookie Statement on our website at any time
Find out more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Your consent applies to the following domains: HVARINSIDER.COM
What are cookies?
Cookies are small text files used to store small data. They are stored on your device when a website is loaded in your browser. These cookies help us to make the website work properly, make it more secure, provide a better user experience and understand how the website works and to analyze what is working and where it needs improvement.
How do we use cookies?
Like most internet services, our website uses first and third party cookies for several purposes. First-party cookies are mostly necessary for the website to function properly and they do not collect any of your personal information.
The third-party cookies used on our website are mainly to understand how the website works, how you interact with our website, to protect our services, to provide ads that are relevant to you, and overall to provide you with a better and improved user experience and help speed up your future interactions with our website.
What types of cookies do we use?
Basic: Some cookies are necessary for you to experience the full functionality of our website. They allow us to maintain user sessions and prevent any security threats. They do not collect or store any personal data. For example, these cookies allow you to log into your account and add products to your cart and pay securely.
Statistics: These cookies store information such as the number of visitors to the website, the number of unique visitors, which pages of the website were visited, the source of the visits, etc. This data helps us understand and analyze how well the website is performing and where it needs to be improved.
Marketing: Naša web stranica prikazuje oglase. These cookies are used to personalize the ads we show you so that they are meaningful to you. These cookies also help us to monitor the effectiveness of these advertising campaigns.
The information stored in these cookies can also be used by third-party ad providers to display ads on other websites to your browser.
Functional: T These are cookies that help certain non-essential functions on our website. These functionalities include embedding content such as videos or sharing website content on social media platforms.
Preferences: These cookies help us store your preferences and browsing preferences such as language settings so that you have a better and more efficient experience on future visits to the website.
How can I control my cookie settings?
If ENDEM decides to change your settings during your browsing session, you can click on the “Privacy and Cookie Policy” tab on the screen. This will again display a consent notice allowing you to change your settings or withdraw your consent entirely.
In addition, different browsers offer different methods for blocking and deleting cookies used by websites. You can change your browser settings to block / delete cookies. To learn more about managing and deleting cookies, visit wikipedia.org, www.allaboutcookies.org.