1. Principles of Personal Data Processing
In accordance with Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR, General Data Protection Regulation), which has been fully in effect since 25 May 2018 in the Republic of Croatia and all European Union member states, as well as the Act on the Implementation of the General Data Protection Regulation (hereinafter: the Act), and in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union, as well as the best European practices, Exportdrvo d.d., headquartered at Trg Marka Marulića 18, Zagreb, OIB: 89462181048 (hereinafter: Exportdrvo), as the data controller of personal data of its service users and customers, has developed this Privacy Policy.
Exportdrvo is committed to protecting and respecting your privacy. This Privacy Policy ("Policy") explains how Exportdrvo collects, uses, and manages your personal data available on the website and accessible through the use of the website: www.exportdrvo.hr.
Read this Policy carefully to understand why and how we collect your personal data (and which data) and how it will be used. Regarding the personal data we collect, Exportdrvo is the "data controller," meaning it determines the purposes for which and the means by which personal data is processed.
This Policy applies to all services offered by Exportdrvo, with the goal of clearly and transparently informing our visitors, partners, and users of our services (hereinafter: data subjects) about the processes for handling their personal data and their rights.
For more information on how the privacy policy is implemented, we have outlined your rights regarding personal data and the types of data we may collect directly from you or through interaction with you, how we may use it, how we protect it, and with whom we may share it.
2. How and when do we collect your Personal Data??
When we collect personal data, we use it in accordance with this Policy.
Personal data refers to information that directly (such as name, gender, address, email address, postal address, etc.) or indirectly identifies (such as a pseudonym like a personal identification number) a data subject.
We collect your personal data when it is necessary to fulfil your needs and requests, provide services, or for our business purposes:
- When you access the website www.exportdrvo.hr, we will collect your IP address, which is also considered personal data.
- When you send an inquiry to Exportdrvo via the contact form on the website exportdrvo.hr. As the data controller, we will request you to enter your personal information (personal data) such as your email address, name, and the company you are contacting us on behalf of. The legal basis for processing your data is consent. Therefore, the data subject submitting an inquiry on the website www.exportdrvo.hr gives consent for the processing of their personal data. The data subject can withdraw their consent at any time by notifying the Data Protection Officer via email.
- When you contact our office and request assistance or ask a question in order to exercise any of your rights guaranteed by applicable regulations,
- When you contact us through social media, we collect the data you have made available to us when submitting inquiries or requests.
The above categories of your personal data are collected based on consent shown to you when visiting www.exportdrvo.hr via a pop-up window, or based on legitimate interest (for example, in cases involving cookies necessary for the functioning of www.exportdrvo.hr), or to fulfil our obligations arising from applicable laws in the Republic of Croatia.
If the processing is based on your consent, you have the right to withdraw your consent at any time. To withdraw consent, you need to notify the data controller by email at: szp@exportdrvo.hr or at the address Exportdrvo d.d., Trg Marka Marulića 18, 10000 Zagreb, with the note "For the attention of the Data Protection Officer." Such withdrawal will not affect the legality of the processing based on consent before its withdrawal.
Exportdrvo d.d. does not share your personal data with third parties.
3. Which rights do you have?
Please note that at any time you have the right to request the following from Exportdrvo:
- Access to your personal data
You can ask Exportdrvo which personal data it uses and request access to that personal data. You have the right to know the purpose of the processing, which categories of your personal data we store, the bodies or categories of bodies with which we share your personal data, the retention period of the data, as well as the source of the data in cases where the data is collected indirectly.
You can contact us if you would like a copy of some or all of the personal data we store about you.
- Request correction of inaccurate data
We want your personal information to be accurate and up to date. You can ask us to correct or remove information that you believe is incorrect or outdated.
- Request the deletion of personal data
You can ask Exportdrvo to stop processing and delete your personal data. If we need your personal data to fulfill a contractual obligation to you, Exportdrvo may not be able to fulfill its contractual obligations. Additionally, if your personal data is required to comply with certain legal obligations (e.g., tax obligations), your request might not be accepted.
- Restrict access to your data in specific processes or entirely
If you want to challenge the accuracy of the data, or we no longer need the personal data for the purpose of processing but you need it for the establishment, execution, or defense of legal claims, or if you object to the processing based on what we consider to be a legitimate basis, you have the right to request restriction of the processing of personal data.
- Object to how we use your data
You have the right to object to the processing of your personal data based on a legal basis that Exportdrvo considers legitimate.
- Request the transfer of data to another data controller (right to data portability)
If the processing is based on your consent or is carried out by automated means, you have the right to request the transfer of your data to another data controller.
You can exercise all of the above rights by:
- Sending an email to szp@exportdrvo.hr
- Sending a request to the physical address: Exportdrvo d.d., Trg Marka Marulića 18, 10000 Zagreb, with the note “For the attention of the Data Protection Officer.”
You can also contact the above addresses for clarification of the mentioned rights and any other inquiries related to the collection and processing of data by Exportdrvo. We will respond to all requests within one month from the receipt of the request.
If you believe that your rights are not being respected, you can also file a complaint with the supervisory authority for personal data protection: Agency for Personal Data Protection (AZOP) at the address: Selska cesta 136, 10 000 Zagreb; email address: azop@azop.hr, website for more information: www.azop.hr.
Where is your personal data stored?
The personal data we collect about you is stored in a secure environment. Your personal data is protected from unauthorized access, disclosure, use, alteration, or destruction by any organization or individual.
Processed data is stored in our premises and secure IT systems, sometimes also stored on servers of our trusted service providers located within the EU.
Exportdrvo will ensure that personal data is kept in a secure location (which includes reasonable administrative, technical, and physical protections to prevent unauthorized use, access, disclosure, copying, or alteration of personal data), accessible only to authorized individuals who are bound by confidentiality regarding all data they learn in the course of their duties.
How long will Exportdrvo retain your personal data?
The collected data for the purposes specified in these rules will be stored only as long as necessary to fulfill the purpose for which the data was collected, and for no longer than a period of 3 years, except in exceptional cases where a longer retention period is required by law (for example, data related to unilateral contract termination and complaints will be kept for 1 year, data related to the exercise of your privacy rights will be kept permanently, while data on invoices will be retained for 11 years).
In the case that you have given consent; we will process your personal data until you withdraw your consent. If you file a legitimate objection to the processing of your personal data, we will no longer process your data in the future.
Additionally, it is important to note that, in the event of a judicial, administrative, or extrajudicial procedure, personal data may be stored until the completion of such proceedings, including any potential period for filing legal remedies.
Cookies
In order to maintain the website and ensure its functionalities meet the expected level, Exportdrvo uses technology known as "cookies."
Cookies are small files sent to your computer, which can be temporary or permanent. Thanks to cookies, you can browse our pages without difficulty. For more information about cookies, please read our Cookie Policy.
Entry into Force and Amendments to the Privacy Policy
These Rules enter into force upon publication on the Exportdrvo website.
By accessing and/or using the Exportdrvo website, the user confirms that they have read, understood, and agreed to the Privacy Policy and the terms of use of the Exportdrvo website. If the user does not agree with these terms, they are required to refrain from using, leave, and not access and/or use the Exportdrvo website.
Exportdrvo reserves the right to amend and supplement the Privacy Policy, and the revised version will be published on the website. The changes will take effect immediately after being published on the website. Any use of the website by the user after such notice will be deemed as acceptance of these changes.
The user agrees to periodically read the Privacy Policy to stay informed of any changes. If the user continues to use the website after the changes, it is presumed that they have familiarized themselves with the changes, understand them, and fully accept them. We disclaim any liability for any damages caused to users, registered users, or third parties as a result of such changes.
