PRIVACY POLICY
PRIVACY POLICY FOR PERSONAL DATA
INTRODUCTION
La Controverse d.o.o. based in Funtana, Cerlenki 15, OIB: 46014349699 (hereinafter referred to as the Company), must collect and use certain data about individuals in its business.
The purpose of this policy is to ensure that the Company fully complies with legal, organizational and technical obligations in relation to the protection of personal data.
All employees of the Company are fully aware of the content of this policy and ensure its application when handling personal data or processing personal data. Employees whose tasks include the handling of personal data are adequately educated in terms of their tasks in relation to the protection of personal data.
This policy applies to all personal data held by the Company in relation to any person, regardless of whether it was, is currently or will be a customer, supplier or contact.
This policy is developed with the aim of preventing potential harm to the Company and its employees and data subjects and to ensure that the processing of personal data by the Company is fully in accordance with the law and other regulations.
These General Terms and Conditions are written and harmonized according to the laws of the Republic of Croatia.
DEFINITION AND APPLICATION
Personal data shall be considered to be all data relating to an individual whose identity has been identified or identifiable, namely an individual who can be identified directly or indirectly, in particular by means of identifiers such as name, identification number, location data, online identifier or by means of one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
Under the processing of personal data, it considers any procedure or set of procedures performed on personal data or on sets of personal data, either automated or non-automated by non-automated means such as collection, recording, organization, structuring, storage, adaptation or modification, withdrawal, finding, inspection, use or use, disclosure by transfer, dissemination, publication or otherwise, harmonization or combination, restriction, erasure or destruction, and the implementation of logical, mathematical and other operations with that data.
The Company collects and processes personal data primarily for the purpose of providing services in its business. Therefore, the Company has the need to collect and process certain types of data on individuals who come into contact with the Company (respondents). The Company treats this personal information adequately, regardless of how this data is collected, recorded, kept and used – on paper, or on other material.
At the time of submitting the data subject's data to the Company, the data subject agrees that the Company processes his personal data, in accordance with the indicated purpose. The protection of the privacy of the data subject's data is permanent, and at any time the data subject can exercise his rights, which are listed and explained below.
The Company collects and processes personal data of data subjects in accordance with the Personal Data Protection Act (OG 103/03, 118/06, 41/08, 130/11, 106/12), other Croatian regulations, Directive 95/46/EC and the General Regulation and Personal Data Protection (GDPR) (Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016).
The Company keeps the collected data appropriately and ensures its confidentiality. The Company will not pass on the collected data to third parties without the data subject's permission, except in cases where it is necessary for the performance of the Company's legal obligations, in cases where this is necessary in order to fulfill tasks performed in the public interest or in cases where the data subject has published this information himself or herself, as well as in other competent regulations certain cases. The data subject, as regards the personal data processed for him by the Company, has the following rights:
Right to be informed
The data subject has the right at any time to request notification of whether his personal data are being processed and for what purpose, who is the controller, the contact data of the data protection officer, what categories of personal data are processed, for what period they are processed or stored, who is the source for obtaining his personal data, who are all the recipients of his personal data, as well as the right to be notified of its other rights set out in this policy (right of access, right to rectification, right to erasure, right to restrict processing and more).
Right of access
The data subject has the right to obtain from the Company a confirmation of whether the personal data relating to him or her are being processed, then gain access to that data and information about:
for the purpose of processing,
categories of personal data being processed;
recipients or categories of recipients to whom the data has been disclosed or will be disclosed;
where possible, on the period for which the data is stored or on the criteria by which it is possible to establish that period;
to request the Company to correct or delete personal data or to restrict the processing of personal data relating to the data subject or the right to object to such processing;
the right to lodge a complaint with the supervisory authority;
if personal data are not collected from the data subject, any available information about their source;
the existence of automated decision-making, including profiling, with consequences.
Right to correction
The data subject has the right to obtain without undue delay from the Company the correction of inaccurate personal data relating to him. The data subject has the right to supplement incomplete personal data, including by making an additional statement.
Right to erasure / right to be forgotten
The data subject has the right for the Company to delete without delay the personal data relating to it if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the data subject withdraws the consent on which the processing is based and there is no other legal basis for processing, if the data subject objects to the processing, where personal data are unlawfully processed, where personal data have to be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the Company is subject, if the personal data were collected in connection with the offer of information society services to the child.
This does not apply if the processing is necessary (and to the extent necessary) for the exercise of the right to freedom of expression and information, to comply with a legal obligation requiring processing in Union law or the law of the Member State to which the Company is subject, or for the performance of a task of public interest or in the exercise of the official authority of the Company, for reasons of public interest in the field of public health, for archiving purposes in the public interest, for scientific or historical research purposes, for the purpose of setting up, exercising or defending legal claims.
Right to lodge a complaint with the supervisory authority:
On the basis of his particular situation, the data subject has the right to object at all times to the processing of personal data relating to him, including profiling, in cases where the processing is necessary for the performance of a task of public interest or in the exercise of the official authority of the Company or if the processing is necessary for the legitimate interests of the Company or a third party. The Company may no longer process personal data unless the Company proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the data subject or to make, exercise or defend legal claims.
If personal data are processed for direct marketing purposes, the data subject has the right at any time to object to the processing of personal data relating to him for the purposes of such marketing, which includes profiling to the extent related to such direct marketing.
Right to data portability:
The data subject has the right to receive personal data relating to him or her, which he has provided to the Company in a structured, commonly used and machine format, and has the right, without interference from the Company, to transfer this data to another controller if the processing is based on his consent and if the processing is carried out by automated means.
The data subject is entitled to a direct transfer from the Company to another controller if technically feasible, and this right must not adversely affect the rights and freedoms of others.
Rights related to automatic decision-making and profiling:
The data subject shall be entitled not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects relating to him or her or similarly significantly affects him or her, unless that decision is necessary for the conclusion or performance of a contract between the data subject and the Company, if it is permitted by Union law or the law of the Member State to which the Company is subject or based on the explicit consent of the data subject.
Right to withdraw consent:
Consent of the data subject is one of the legal grounds for processing data relating to the data subject. The data subject has the right to withdraw the consent he or she has given at any time. The withdrawal of consent shall not affect the lawfulness of the processing of data made prior to the withdrawal of the consent.
Right to restrict processing:
The data subject has to request restrictions on the processing of his personal data: if he disputes the accuracy of his personal data – for the period necessary for the Company to verify this accuracy, if the processing of his personal data is unlawful and does not require deletion but only to restrict the processing, if the Company no longer needs his personal data, but needs the existence of them in order to exercise his legal requirements, if he has objected to the processing, he has the right to request a restriction of processing for the period until determining whether the Company's legitimate reasons for processing go beyond its reasons for the complaint.
In order to exercise his or her rights, the data subject should contact the Personal Data Protection Officer by sending a written notice or request to the Personal Data Protection Officer La Controverse d.o.o., by e-mail using his e-mail address provided by La Controverse d.o.o. or by terrestrial mail to: Funtana, 52452, Cerlenki 15 or by delivering a personal statement directly at the Company's premises, with prior notice on the phone number +385915543158, with identification by valid identity document.
PERSONAL DATA PROTECTION OFFICER
La Controverse d.o.o. appointed a person of the personal data protection officer:
Dorotea Mirčetić
Phone: +38591 952 8981
e-mail address: contact@babiesbybabes.com
Any questions regarding the protection of personal data should be referred to the Data Protection Officer.
PRINCIPLES OF PERSONAL DATA PROTECTION
The Company considers that the lawful and proper treatment of personal data is very important and therefore ensures that personal data is treated lawfully and correctly. To this end, the Company fully supports and adheres to the Data Protection Principles.
Data protection principles require personal data to be:
must be processed fairly and lawfully and in particular that they must not be processed unless the conditions set out in the regulations are met;
they shall be collected for only one or more specific and lawful purposes and shall not be further processed in any way that would be incompatible with those purposes;
processing must be adequate, relevant and not excessive in relation to the purposes or purposes for which they are processed, and the data must be accurate and up to date;
may not be detained longer than necessary for the applicable purpose;
must be processed in accordance with the data subject's rights in accordance with the applicable regulations:
appropriate technical and organizational measures must be taken against unauthorised or unlawful processing of personal data and against accidental loss, destruction or damage to personal data;
it may not be transferred to a country or territory outside the EU, unless that country or territory ensures an adequate level of protection of the rights and freedoms of the data subject in relation to the processing of personal data.
POTESTAS ACTIVITIES REGARDING DATA PROCESSING
The Company undertakes the following activities related to the processing of data:
fully respects the conditions for the fair collection and processing of personal data;
fulfils the obligation to specify the purpose for which the personal data is processed;
collects and processes adequate personal data, only to the extent necessary to meet operational needs or in accordance with all legal requirements;
submits all the necessary data to the Personal Data Protection Agency;
performs strict verification of the length of retention of personal data;
ensures that the rights of data subjects can be fully exercised in accordance with the protection of personal data;
takes appropriate technical and organizational security measures to protect personal data;
ensures that personal data are not transferred abroad without insurance protection;
treats all persons fairly and fairly regardless of their age, religion, disability, gender, sexual orientation or ethnicity, when acting on their requests for notification;
sets out clear procedures for responding to requests for notification.
The Company may publish on its website the content of cookies for advertising and monitoring traffic statistics based on the interests and information of visitors to the Company's website from social networks. If the data subject uses the content on the Company's social networks or in applications, the cookie from these networks and applications could be stored on the data subject's device from which he accesses the Company's website.
Visitors have the right to exclude cookies. Internet browsers are usually programmed so that accepting cookies is their default setting, but respondents can easily adjust this by changing their browser settings. If the data subject wishes to restrict or block all cookies involving the Company's websites/applications (which may prevent the use of certain parts of the Website) or other websites/applications, the data subject may do so in the browser settings.
In the event of a personal data breach that is likely to cause a high risk to the rights and freedoms of the data subject, the Company shall inform the data subject of the personal data breach without undue delay, unless the Company has taken appropriate technical and organizational safeguards and these measures have been applied to personal data affected by the personal data breach, in particular those that render personal data incomprehensible to any person who is not authorized to access them or if the Company has taken subsequent subsequent measures of protection. measures to ensure that there is no longer likely to be a high risk to the rights and freedoms of data subjects, or if this would require a disproportionate effort, in which case the Company will apply public notification or a similar measure informing data subjects in an equally effective manner.
REVIEW AND VERIFY
The Company has the right to update this policy if necessary to reflect best practice and to ensure compliance with any changes or changes regarding the protection of personal data
GDPR CURRENCY CONVERTER
"BY USING OUR WEBSITE, YOU (THE VISITOR) AGREE TO ALLOW THIRD PARTIES TO PROCESS YOUR IP ADDRESS, IN ORDER TO DETERMINE YOUR LOCATION FOR CURRENCY CONVERSION PURPOSES. YOU ALSO AGREE THAT THIS CURRENCY WILL BE STORED IN A SESSION COOKIE IN YOUR BROWSER (A TEMPORARY COOKIE THAT IS AUTOMATICALLY REMOVED WHEN YOU CLOSE THE BROWSER). WE DO THIS IN ORDER TO KEEP THE SELECTED CURRENCY SELECTED AND CONSISTENT AT THE
BROWSING OUR WEBSITE SO THAT PRICES CAN BE CONVERTED INTO YOUR LOCAL CURRENCY (OF VISITORS)."
COOKIES
When opening our site or browsing it, the necessary data is automatically collected using cookies to optimize our site in order to provide you with the most relevant information and the best possible user experience.
Cookies are small electronic information that the website sends to the visitor's search engine and that is stored on the visitor's hard drive.
If you are concerned about storing cookies on your device, you can configure your browser to refuse to save all cookies or to alert you when setting cookies, allowing you to decide whether you want to accept them or not.
You can also delete cookies from your device. However, if you choose to block cookies or delete them, certain functions of the websites you visit may not work properly.
