Privacy policy

General information.
1. the Operator of the Service is Kamila Talowska, 21222 Poljica, put Gorča 10, hereinafter referred to as ADMINISTRATOR.
2. The Service performs the functions of obtaining information about users and their behaviour as follows:
a. Through voluntarily entered information in the forms.
b. By storing cookies (so-called ‘cookies’) in the end devices.
c. Through the collection of web server logs

Information about cookies.

1. The Service uses cookies.

2. Cookies (so-called “cookies”) are computer data, in particular text files, which are stored on the Service User’s end device and are intended for using the Service’s websites. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device and a unique number.

3. The entity that places cookies on the Service User’s end device and obtains access to them is the Service Operator.

4. Cookies are used for the following purposes:
a. creating statistics that help understand how Service Users use websites, which allows for improving their structure and content;
b. maintaining the Service User’s session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service; c. determining the user profile in order to display tailored materials in advertising networks, in particular the Google network.
5. Two basic types of cookies are used within the Service: “session cookies” and “persistent cookies”. “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or disabling the software (internet browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
6. Software for browsing websites (internet browser) usually allows cookies to be stored on the User’s end device by default. Users of the Service can change the settings in this respect. The internet browser allows deleting cookies. It is also possible to automatically block cookies. Detailed information on this subject is included in the help or documentation of the internet browser.
7. Limitations on the use of cookies may affect some functionalities available on the websites of the Service.
8. Cookies placed on the Service User’s end device and used by advertisers and partners cooperating with the Service operator may also be used. 9. We recommend reading the privacy policies of these companies to learn about the principles of using cookies used in statistics: Google Analytics Privacy Policy 10. Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the user uses the Service. For this purpose, they may store information about the user’s navigation path or the time spent on a given page. 11. In the scope of information about user preferences collected by the Google advertising network, the user may view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

 

Server logs.
1 Information about certain user behaviour is subject to logging at the server layer. This data is used exclusively for the administration of the website and to ensure the most efficient operation of the hosting services provided.
2 The resources viewed are identified by URLs. In addition, the following may be recorded:
a. time of arrival of the request,
b. time of sending the response,
c. name of the client station – identification via HTTP protocol,
d. information on errors which occurred during the HTTP transaction,
e. URL address of a page previously visited by the user (referer link), if the user accessed the Website via a link,
f. information about your browser,
g. IP address information.
The above data is not associated with specific visitors.
4. the above data is used only for the purpose of server administration.
5. Data sharing.
a. Data shall only be made available to external parties within the limits of the law.
b. Data enabling the identification of an individual shall only be shared with the consent of that individual.
c. The Operator may be obliged to provide information collected by the Service to authorised bodies on the basis of lawful requests to the extent of the request.

Managing cookies – how to give and withdraw consent in practice?
1. if you do not wish to receive cookies, you can change your browser settings. We stipulate that disabling cookies that are essential for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases may make it impossible, to use the websites
2. to manage your cookie settings, select your browser/system from the list below and follow the instructions:
a. Internet Explorer
b. Chrome
c. Safari
d. Firefox
e. Opera
f. Android
g. Safari (iOS)
h. Windows Phone

 

PROTECTION OF PERSONAL DATA
In this document, the ADMINISTRATOR sets out how it implements the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data in relation to the personal data of its contractors and their representatives.

Personal data is considered to be any information relating to an identified or identifiable person. By giving your consent, you agree to the collection, use and sharing of information in accordance with the Privacy Policy. When collecting and using personal information, we are transparent about the basis and manner in which we process personal information.

SECURITY
We have implemented measures to secure personal data against loss, theft, misuse and unauthorised access, disclosure, alteration and destruction. All data collected is protected using appropriate technical and organisational measures and security procedures. We implement our internal policies, procedures and implement training covering data protection, security and confidentiality.

PROCESSING OF PERSONAL DATA
ADMINISTRATOR collects and processes data in accordance with and for the purposes of its activity, in connection with the services or products offered and provided. These are contact and personal data necessary for the execution of ongoing and future contracts, including those related to the quality of the services provided and the security of their execution. ADMINISTRATOR shall not collect and process other data that is not necessary for the performance of the contract. The provision of personal data is voluntary, nevertheless it is a necessary condition for the execution of contracts for services offered by ADMINISTRATOR. Similarly, this applies to contracts concluded between the ADMINISTRATOR and the Suppliers.

PURPOSE AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA
ADMINISTRATOR processes your personal data because it is necessary for the performance of a contract concluded with you or your employer or principal, including:
(a) providing, maintaining and improving the services;
(b) to provide proper customer service;
(c) handling requests you make to us;
(d) contacting you, for the purposes of providing the services;

In addition, the processing is necessary for the fulfilment of a legal obligation incumbent on ADMINISTRATOR by virtue of contracts executed (e.g. tax rules, retention of documents and accounting records), as well as due to the performance of tasks related to business activities, including, for example, planning and organisation of work, reporting and carrying out analyses.

We also process your personal data on the basis of a legitimate interest, which is:
(a) to carry out marketing activities towards you of ADMINISTRATOR’s own services in connection with ongoing and continued future contracts.
b) to contact you for the purposes of the permitted marketing activities, in particular and with your consent, by e-mail;

RETENTION PERIOD
Your personal data shall be stored for the duration of the contract concluded with you and also after its termination for the purposes of performing legal obligations, including tax and accounting, the assertion of claims in connection with the performance of the contract, archiving. The maximum retention period is 10 years after the completion of the contract. Personal data obtained for marketing purposes and for the purpose of sending commercial information by electronic means are stored until you withdraw your consent to such processing. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES
We only entrust personal data to other parties if we are permitted to do so by law. We include provisions in the relevant contracts regarding security measures to protect your data and maintain confidentiality. Accordingly, your data may be passed on to:
(a) entities that work with us to support us in the provision of services and perform activities related to the provision of services;
b) external entities that operate and manage our internal IT systems;
(c) supervisory authorities, in response to a request for information, where disclosure is in accordance with or required by applicable law, regulation, legal process or governmental request;

YOUR RIGHTS
Under current law, individuals have certain rights regarding their personal data and the controller is responsible for exercising those rights. In circumstances where the ADMINISTRATOR is the controller and decides how and for what purpose personal data is processed, we inform you of your rights:

The right of access to personal data – individuals have the right to access their data that we, as controller, hold.
The right to rectification – if your data is out of date or incorrect.
The right to erasure – if your data is no longer necessary for the purposes for which it was collected or you do not consent to further processing.
Right to restrict processing – if you notice that your data is inaccurate, is being processed illegally, you can request that we restrict the processing of your data for a period of time to allow us to check the accuracy of the data or its compliance.
The right to object – at any time where the processing of your personal data is carried out on the basis of a legitimate interest and the objection is justified by your particular situation or your personal data is processed for marketing purposes.

If you wish to exercise these rights, please send an email to the email address provided in the contact section or by post. You have the right to lodge a complaint in relation to our processing of your personal data with a supervisory authority, i.e. the President of the Authority

CHANGES TO THE PRIVACY POLICY
The Privacy Policy shall come into force on 25 May 2018 and will remain in force subject to any future changes to its provisions.
The updated Privacy Policy will be effective as of the date it is published by ADMINISTRATOR on this website