PRIVACY AND PERSONAL DATA PROTECTION RULES PP ORAHOVICA doo
These Privacy and Personal Data Protection Rules (hereinafter referred to as the Rules), based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation), explain what personal data is collected in connection with the provision of our services and products, how we process, use and protect this data, for what purposes we use it, and what your rights are.
In order to know how and for what purposes PP ORAHOVICA d.o.o., as the data controller, processes your data, please read these rules. Your privacy and the protection of personal data are of utmost importance to us.
If you would like to contact us regarding this policy or your personal data, please use the following contact details:
PP ORAHOVICA d.o.o.
Zdenci
Pustara 10
Personal Data Protection Officer
E-mail: voditelj@pporahovica.hr
Who processes your personal data?
PP ORAHOVICA d.o.o. collects personal data in the process of concluding employment contracts, in the process of concluding cooperation contracts with associates, contacting representatives of suppliers and contractual partners, announcing prize games and competitions, publishing newsletters, for marketing purposes, for the purpose of improving business and user experience, and complies with all applicable regulations with the aim of protecting the privacy of its Customers or Users.
This document describes how the controller doo processes the personal data of customers and/or potential customers.
PP ORAHOVICA d.o.o. takes care of ensuring all security measures for your personal data.
Customers of the company PP ORAHOVICA d.o.o. (hereinafter: Customers) or Users of our products and services, and Users who are recipients of our notifications about products and services (hereinafter: Users) are advised to read everything stated in these Rules in order to better understand what data PP ORAHOVICA d.o.o. collects and processes, for what purpose, on what legal basis, with whom and why it shares it, what protective measures it implements, and what the rights of Customers or Users as data subjects are.
What categories of personal data do we process?
When performing the tasks for which we are registered as a company, we will process various categories of personal data.
a) Customer support
If you contact our office or customer support or through any other means of communication available to you, we need your contact information in order to resolve the issue you are addressing us with. In addition, we will need to identify you in a manner that is detailed in our other internal documents. The information you provide to us will be used only for the stated purpose. In certain cases, we will use the services of other legal entities to which we entrust your information only to the extent that this is necessary to resolve your case (e.g. authorized companies that provide customer support or maintain the system or perform some repairs for us).
b) Website
When you send any type of inquiry through our website, we collect your first and last name and contact information (email address, phone number). PP ORAHOVICA d.o.o. automatically collects personal data from your computer, and there are also situations in which we collect other types of data, such as the date and time of access to our website, information about the hardware, software or internet browser you use, as well as the operating system of your computer, the version of the application and your language settings. We may collect information about the clicks and your access to our pages that are shown to you.
c) Employees and associates
PP ORAHOVICA d.o.o. collects and processes personal data of its employees and other associates for the purpose of executing employment contracts signed with employees and consulting contracts and/or service contracts signed with associates, which relate to personnel, administrative or other business/contractual purposes. In the latter case, we collect and process data such as: name, surname, gender; marital status, citizenship, place of residence, date and place of birth, personal identification number; title, occupation, data on professional training, data related to health insurance, work experience; data on account number (IBAN), signature, etc.
d) Suppliers and our business partners
From suppliers and other clients, i.e. associates and business partners, we collect and process data such as: name and surname of the responsible person in the legal entity; contact details of the person responsible for communication and fulfillment of contractual obligations.
e) Tender procedure
From job candidates, and all for the purpose of possible employment, the data that PP ORAHOVICA d.o.o. collects and processes may include: name, surname, address, contact details, level of education, citizenship, title and occupation, data on previous work experience, data on professional development and training, and test results that may also reflect the candidate’s ability to perform all work obligations that a specific position for which he/she is applying places before him/her. The data is collected on the basis of consent for a clearly stated purpose of data collection. We will inform you about everything when the competition procedure opens.
f) Receiving information about our services and products/newsletter
We collect information such as e-mail address from subscribers to our newsletter, for the purpose of informing them about our new products and benefits that you can enjoy. The processing of this category of data is based on consent or on the basis of our legitimate interests, primarily to control and ensure a high standard of quality of our services and products, and thus to achieve your satisfaction, especially for the purpose of sending information about our products and services with which you can achieve additional savings, reduce the cost of using electricity and increase satisfaction with our services.
g) Exercising the rights of data subjects and responding to requests from Users and Customers
When processing your requests for protection of rights, your personal data, such as your name, surname, OIB (Personal Identification Number), or address, will be processed. We must process the data in order to fulfill our obligations under applicable regulations.
What are your rights in terms of personal data protection?
PP ORAHOVICA d.o.o. respects that every user should have the opportunity to ensure the accuracy, completeness and up-to-dateness of their personal data. If the user believes that their personal data is incomplete, inaccurate or not up-to-date, they can contact PP ORAHOVICA d.o.o. by sending an e-mail to voditelj@pporahovica.hr
Please note that at any time you have the right to request the following from PP ORAHOVICA doo:
- to provide you with access to your personal data
You can ask the controller what personal data about you they are using, and you can also request access to that personal data. You have the right to know the purpose of the processing, what categories of your personal data we store, the bodies or categories of bodies with which we share your personal data, the period for which the data will be retained, as well as the source of the data in cases where the data is collected indirectly.
You can contact us if you would like a copy of some or all of the personal information we hold about you.
- request correction of incorrect data
We want your personal information to be accurate and up-to-date. You can ask us to correct or remove information that you think is inaccurate or out of date. We will do this if no valid regulation prevents us from doing so.
- request deletion of personal data
You can ask the controller to stop processing or even delete your personal data. If we need your personal data to perform a contractual obligation towards you, the controller may no longer be able to perform such contractual obligations. Also, if your personal data is required to comply with certain legal obligations (e.g. tax obligations), your request may not be able to be fulfilled.
- Restricting access to your data (to us and/or third parties) in certain processes or completely
If you wish to contest the accuracy of the data, or we no longer need the personal data for the purpose of the processing, but you require them for the establishment, exercise or processing of legal claims, or you have objected to the processing on grounds that we consider legitimate, you have the right to request the restriction of the processing of your personal data.
- lodge a complaint about the way we use your data
Remember that you have the right to object to the processing of personal data based on a legal basis that PP ORAHOVICA d.o.o. considers legitimate.
- request the transfer of data to another processor (portability of rights)
If the processing is based on your consent or is carried out by automated means, you have the right to request that PP ORAHOVICA d.o.o. transfer your data to another processor.
To exercise any of the above rights, please use the contact details provided at the beginning of these Rules.
Competent authorities for personal data protection
If you are not satisfied with how we have collected or used your personal data, you can file a formal complaint with the competent data protection authority:
for Croatia: Personal Data Protection Agency, Ulica Metela Ožegovića 16, 10000 Zagreb, azop@azop.hr
Where is your personal data stored and who has access to your data?
We store the personal data we collect about you in a secure environment. Your personal information is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
The processed data is stored on our premises and IT systems, but sometimes we store data on the servers of our trusted service providers.
PP ORAHOVICA d.o.o. will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or modification of personal data), which can only be accessed by authorized persons.
The data collected for the purposes set out in these Rules will be stored only for as long as is necessary to fulfil the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than PP ORAHOVICA d.o.o. reasonably considers necessary to achieve the purpose for which they were collected or processed. If you are interested in specific data retention periods, you can always contact our data protection officer.
PP ORAHOVICA d.o.o. will keep certain personal data for the period of time prescribed by the law or regulation that obliges PP ORAHOVICA d.o.o. to keep data.
If you have given us your consent, we will process your personal data until you withdraw your consent. If you raise a justified objection to the processing of your personal data based on legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to point out the following: if a judicial, administrative or extrajudicial procedure has been initiated, personal data may be stored until the end of such procedure, including the possible period for filing legal remedies. Therefore, PP ORAHOVICA d.o.o. will store certain personal data for the period of time prescribed by law or regulation that obliges the data controller to store the data.
Privacy is important to us, so we will never share your personal information with third parties except for the purposes described in these Rules.
Does PP ORAHOVICA d.o.o. exchange data with third parties?
PP ORAHOVICA d.o.o. cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with EU legislation.
PP ORAHOVICA d.o.o. as the controller of personal data may transfer personal data outside the EU if it is necessary for the performance of a contract between PP ORAHOVICA d.o.o. and the processor and/or another controller or to comply with legal obligations. In the latter case, PP ORAHOVICA d.o.o. transfers personal data only to countries that provide an adequate level of protection, either through model contracts containing binding provisions or through binding corporate rules; or in accordance with an approved certification mechanism and/or a privacy protection framework when transferring personal data from the European Union and Switzerland.
PP ORAHOVICA d.o.o. uses tools and services of social networks that do not operate in the territory of the European Union, and we are obliged to inform you that these third parties that manage social networks can transfer your data to the USA, where they are shared with the intelligence services in accordance with the regulations in force in the USA.
We care about the protection of your personal data and that is why we have launched mechanisms that will enable an even higher level of your protection. We perform temporary data transfers in relation to service providers Google, LinkedIn and Facebook based on the consent of the data subjects to the proposed transfer, while always noting that there are risks associated with such transfers due to the lack of an adequacy decision and appropriate safeguards by Google Ireland Ltd., Linkedin Ireland Unlimited Company and Facebook Ireland Ltd. as independent data controllers.
PP ORAHOVICA d.o.o. will send a special notification to Users or Customers in cases of:
– that the transfer of data is necessary for the performance of a contract or the implementation of pre-contractual measures at the request of the data subject; or
– that the transfer is necessary for the conclusion or performance of a contract concluded in the interest of you as the Customer or User, between us as the controller and another natural or legal person; or
– that the transfer is necessary for the establishment, exercise or defense of certain legal claims.
We will inform you additionally and in a timely manner about all the measures taken, and we will also change our internal documents after the completion of the ongoing procedures.
We may provide your personal information to our trusted partners who maintain our IT system or provide services on behalf of PP ORAHOVICA doo, for example, for marketing, delivery, finance, advertising, maintenance services, debt collection services, legal services and other services within and outside PP ORAHOVICA doo, without which we would not be able to adequately perform our obligations and contracted services. These service providers are, however, obliged, under the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose that we have strictly specified. We also oblige them to adequately protect your data and to consider it a business secret. In addition, you do not have to worry because regular audits check the compliance of our partners with the applicable regulations of the Republic of Croatia.
Period and location of data storage
The storage period for the personal data we collect depends on the purpose of the processing for which it was collected.
We retain your personal data during the contract conclusion process and during the use of our services or products, and delete them upon termination of the contractual relationship, upon the expiration of all legal obligations or the cessation of the legal grounds from the General Data Protection Regulation related to the processing of your personal data. Therefore, we must inform you that in certain situations we will not be able to delete your data because we are obliged to retain it under other applicable regulations of the Republic of Croatia.
We retain your personal data, in the event that a procedure for forced collection of unpaid receivables has been initiated, until the final conclusion of the procedure or, if a complaint about a product or service has been filed within the deadline, until the final completion of the complaint procedures in accordance with applicable regulations.
Other websites
These Privacy Policy refer only to the use and use of data that PP ORAHOVICA d.o.o. collects from users (respondents). Other websites that can be accessed through the website of PP ORAHOVICA d.o.o. have their own statements on confidentiality and data collection, as well as the methods of their use and publication.
PP ORAHOVICA d.o.o. is not responsible for the methods and conditions of work of third parties. You can read more about the privacy policies of third parties on their websites.
FACEBOOK ONLINE
https://www.facebook.com/policy.php
YOUTUBE ONLINE
https://policies.google.com/privacy?hl=en
INSTAGRAM ONLINE
https://help.instagram.com/519522125107875
LINKEDIN ONLINE
https://www.linkedin.com/legal/privacy-policy
If you have any questions regarding the collection and processing of data by Facebook, YouTube, Instagram and/or LinkedIn or would like to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:
FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data Protection Officer Contact:
https://www.facebook.com/help/
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact Facebook’s lead supervisory authority, the Irish Data Protection Commissioner or the Croatian Personal Data Protection Agency.
FOR YOUTUBE:
Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland
Data Protection Officer Contact:
https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for YouTube, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency.
FOR INSTAGRAM:
FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data Protection Officer Contact:
https://www.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Instagram, the Irish Data Protection Commissioner or the Croatian Personal Data Protection Agency.
LINKEDIN IRELAND UNLIMITED COMPANY
Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland
Data Protection Officer Contact:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for LinkedIn Ireland, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
Use of Internet cookies (“cookies”)
To maintain the website and ensure its functionality, PP ORAHOVICAd.oo uses technology commonly known as “cookies”.
A cookie is a small text file that is stored on your computer or mobile device when you visit a particular website. With the help of cookies, a website can remember your actions and settings (such as login, language, font size and other display-related settings) for a given period of time, so that you do not have to re-enter them every time you return to the site or browse various other PP ORAHOVICAd.oo sites. Cookies can be temporary or permanent, for example, JavaScript or Flash technology. Thanks to cookies on our site, you can browse the content without any problems and you will be shown results that are relevant to you.
Rules on handling cookies
To maintain the website and ensure that its functionality is at the expected level, we use a technology known as “cookies”.
A cookie is a small piece of data that a website stores on a visitor’s computer or mobile device. A cookie allows a website to “remember” the visitor’s actions from previous visits. Most browsers allow the use of cookies, but the user can delete them at any time or set the browser to prohibit their storage. The most common reasons for using cookies are: identifying visitors, remembering specific user preferences, helping to enter information that has already been entered during previous visits, collecting data for analysis and promotional campaigns.
Cookies can be classified:
By duration:
Temporary cookies – are stored on your computer and are automatically deleted after you close your web browser. They allow a website to retrieve temporary data, such as comments or shopping cart status.
Persistent cookies – remain in your web browser even after you close it and usually have an expiration date. They store information such as your username and password, which allows you to use the “remember me” functionality when logging in, so that you do not have to enter your username and password every time you visit Agro Invest Grupa.hr. Agro Invest Grupa.hr uses persistent cookies to facilitate access for registered users.
By legal entity from which they come:
First-party cookies – these come from the website you visited, and can be temporary or permanent. They allow websites to store data that is used when the user visits the website again.
Third-party cookies – there are several external services that store limited cookies for the user (Facebook, Instagram, Google Analytics and AdWords).
By purpose:
Necessary cookies: These are essential for the use of the website and without them the website does not have its full functionality. Functional cookies may include cookies that provide a service requested by the user.
Tracking and analytics cookies: They are collected anonymously, cannot track user activities on other websites, and are used to track user behavior and for the purpose of measuring audience behavior and compiling reports for website improvements.
Marketing cookies for personalization of offers and targeting and advertising: They are used to display advertisements relevant to the user and their interests. These cookies can also be used to measure the effectiveness of a campaign with which the user was in contact during a visit to the website.
What options are available to you?
PP ORAHOVICA allows you to update your cookie settings at any time. You can also delete cookies at any time.
In the settings you can choose which cookies you want to accept.
Using Google Analytics tools
For statistical analysis and measuring the effectiveness of this website, we use Google Analytics – a service for measuring traffic and related Google services.
You can learn more about Google’s privacy policy at the link: https://policies.google.com/privacy?hl=en.
These rules do not apply to services and third parties that have separate privacy policies, however, in accordance with regulations relating to the protection of personal data, PP ORAHOVICA d.o.o. is obliged to inform its users about the data collected by Google when providing its services to other natural and legal persons.
PP ORAHOVICA d.o.o. cannot fully influence the processing of data by Google as part of your use of their services. Please read the sections of this policy carefully to learn how Google processes your personal data.
The information Google collects includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number.
In addition, Google collects data about how applications, browsers, and devices interact with Google services, including IP address, crash reports, system activity, and the date, time, and referring URL of the web request.
Google collects data when a Google service on your device contacts Google servers – for example, when you install an app from the Play Store or when the service checks for automatic updates. If you use an Android device with Google apps, your device periodically contacts Google’s servers to provide device information and connect to their services. This includes information such as device type, carrier name, crash reports and apps you have installed.
For details about the Google and other cookies used, please read the Cookie Policy.
Data processing via mobile application
These Rules also apply to data processing via a mobile application owned by PP ORAHOVICA doo, except in relation to chapters: ˝7. Other websites, 8. Use of Internet cookies (“cookies”) and 9. Use of Google Analytics tools.
In relation to the categories of data that will be processed, it is important to note that in relation to the application, the following will be processed: mobile identifier, i.e. data about the mobile device, the operating system of the mobile device, contact information of the registered user, data about the legal entity on whose behalf the employee uses the mobile application, name and surname if the registered user’s data can be found from the e-mail, e-mail and official mobile or other telephone number.
Entry into force and changes to the Rules
These Rules enter into force upon publication on the website and/or mobile application.
PP ORAHOVICA d.o.o. reserves the right to amend these Rules and they will be published on the website. In the event that the change significantly affects your rights or poses a risk to the exercise of your rights, we will inform you about the changes in another, most appropriate way, depending on the specific situation.