Protection of personal data and privacy

ALGIZ d.o.o. (hereinafter: the Company) in its business conducts personal data protection measures in accordance with the General Data Protection Regulation (GDPR), legal and regulatory obligations. If you have any questions concerning the processing of your personal data and the exercise of your rights under the General Data Protection Regulation, you may contact: [email protected]

We are fully committed to ensuring the continued and effective establishment of this policy, and we expect the same from our employees and business partners.

This policy sets forth the expected behavior of the Company, its permanent, temporary and temporary employees and business partners and third parties with respect to the collection, use, storage, transfer, disclosure or destruction of personal data processed in the Company's business processes.

PERSONAL DATA PROTECTION RULES define the purpose and manner of use of personal data, the categories of personal data we collect, the time period in which we process them, and the means of information regarding the processing of your data.

PRIVACY POLICY ON THE WEB defines how we collect and store the information we collect through the Company's website.

PERSONAL DATA PROTECTION RULES

These rules apply to the privacy practices that the Company applies when contracting and providing services to its customers. We have defined these data protection rules to clarify the purpose and use of personal data, the categories of personal data we collect, the time period during which we process them, and to familiarize you with all ways of informing you regarding the processing of your data.

THE DATA WE COLLECT

During various forms of interaction with the Company (use of the Company's publisher's websites, sending inquiries / requests by email, mailing, participating in sweepstakes and competitions, entering into advertising contracts, cooperation agreements), personal information is collected which implies, but is not limited to the following

Name surname
Residential address
NIN
Bank account number
E-mail address
Telephone number

During various forms of interaction, the Company may also collect non-personally identifiable information, including but not limited to:

Information about the device through which you connect to the Internet
Type and the version of Internet browser you use
Ways to use the Company's website

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We process and use personal information only for the purposes for which it was collected. The processing of personal data is only allowed to the extent that at least one of the following is fulfilled:

Processing is necessary to comply with the Company's legal obligations - which includes, but is not limited to, processing of data for invoicing for the purpose of resolving complaints under the relevant regulations (Law on consumer protection)
Processing is necessary for the purposes of the legitimate business interests of the Company or a third party, except where those interests are stronger interests or fundamental rights and freedom of users that require the protection of personal data - for example, processing of data for marketing purposes, when we inform our users about special offers or invite events we expect to be interested in.

Use of data

The Company uses personal information for the following purposes:

Provision of services under contractual obligations - The Company may use personal information during the provision of contracted services, and to provide various forms of communication during the cooperation process
Marketing and sales activities - The Company may use personal information for the purpose of informing about new benefits , content, discounts or similar activities
Protection of Company Members and Employees - The Company may disclose personal information of individuals if it believes it is necessary or appropriate to protect the health and safety of employees, visitors, property and / or users
Legal obligations of reporting and processing

Methods of data collection

Personal information is collected in one of the following ways:

Directly from an individual - information provided for the purpose of entering into or executing a contract, by coming to the premises of the Company, by telephone conversation with an individual, by participating in a sweepstakes or a prize contest of the Company.
Indirect - information publicly available on non-Company websites (eg social media posts, open forums), information obtained through cookies, links and similar technologies

REQUIREMENTS OF THE RESPONDENTS

The Company provides the realization of the rights of users in relation to:

Access to information
Objection to processing
Processing restriction
Data transfer
Correction of data
Deleting data

The user submits the claims for the exercise of his rights in writing or verbally. If an individual files a claim relating to any of the foregoing rights, the Company will consider any such claim in accordance with all applicable data protection laws and regulations. The Company reserves the right to charge for processing customer requests in exceptional cases where requests are unreasonable.

Users have the right to be informed, upon successful submission of their request, of the following, after successful verification of their identity:

The purposes of processing personal data
The source of personal information, if not obtained from the user
Category of personal information
To recipients or categories of recipients to whom personal information has or may be transmitted, together with the location of those recipients
The period of storage of personal data or the reasoning for determining the storage period
Use any automated decision making, including profiling

All requests for access or correction of personal information must be made by e-mail: [email protected] and each receipt will be recorded. The response to each request shall be submitted within 30 days of receipt of the user's written request.

PROCESSING OF PERSONAL DATA ON THE BASIS OF THE USER'S PRIVILEGE

In certain cases, the Company may seek the consent of users to process personal data for certain purposes. When the processing of a user's personal data is based on consent, the user may withdraw the consent given at any time, but this will not affect the lawfulness of the consent-based processing before it is withdrawn.

DATA RETENTION

The club will not retain personal information for longer than is necessary for the purposes for which it was originally collected. The Company will retain your personal information for as long as it is necessary for the provision of products or services; as long as required in accordance with these Rules or the time of collection; as long as is necessary because of our legal obligations, the resolution of disputes and the execution of our contracts; or to the extent permitted by law. When the retention period expires, the Company will erase personal data in a way that ensures that they cannot be reconstructed or read.

DATA PROTECTION

The Company implements physical, technical and organizational measures that guarantee the security of personal information (eg prevention of loss or damage, unauthorized alteration, access or processing and other threats to which personal data caused by human activity or the physical / natural environment may be exposed).

The security measures implemented are aimed at:

Prevent unauthorized persons from gaining access to the data processing system in which personal data are processed
Prevent persons who have the right to use a data processing system from accessing personal data that is beyond their needs and authority
Ensure that personal data during electronic transmission or during transmission cannot be read, copied, modified or removed without authorization
Ensure the availability of system records for the purpose of determining from whom personal data from the data processing system were entered, modified or removed
Ensure that when processing is performed by the processing executor, the data can only be processed in accordance with the instructions of the processing manager
Ensure that personal information is protected from unwanted destruction or loss
Ensure that personal data collected for different purposes can be processed separately
Ensure that personal information is not held longer than necessary

REQUEST BY THE JUDICIAL AUTHORITIES

In certain circumstances, personal information is allowed to be shared without the knowledge or consent of the user. And when disclosure of personal information is required for any of the following purposes:

Prevention or detection of crime.
Arrest or prosecution of offenders.
Assessment or collection of taxes or fees.
By order of the court or any law.

COMPLAINTS MANAGEMENT

In case of complaints regarding compliance with these and other rules regarding the protection of personal data, please contact us by e-mail [email protected]. In the event of a complaint, we will investigate the entire situation regarding the use and disclosure of personal information in accordance with these policies and will attempt to resolve it as soon as possible.

PROTECTION OF PERSONAL DATA OF CHILDREN

Although the Company is focused on informing the general public, we are well aware that children deserve special protection in every respect, including the protection of personal data, since they may be less aware of the risks and possible consequences of disclosing their information.

Pursuant to Article 19, paragraph 1 of the Law on Implementation of the General Data Protection Regulation (NN 42/2018), the Company considers all persons under the age of 16 to be children, and does not seek or collect personal information about or about children without the consent of the holder of parental responsibility.

Therefore, the Company will make every reasonable effort to process the information it receives from children only with the consent of the holder of parental responsibility.

If the Company learns that the personal information of the children has been sent to it but without the valid consent of the holder of parental responsibility, the Company will make reasonable efforts to do the following:

delete this personal information from your files as soon as possible
to provide this personal information in the event that deletion is not possible, that this personal information is not further used for any purpose
and in any case will not be given to any third party

If a parent or guardian has questions regarding our processing of their child's personal information, please feel free to contact us using the details in the next section.

WHERE YOUR PERSONAL DATA WILL BE PROCESSED

We process your information within the European Economic Area. If there is a need to transfer personal data outside the area, such transfer will only take place if the European Commission has confirmed that the third country has fulfilled a certain level of data protection or if there are appropriate safeguards under applicable law (eg binding corporate rules, standard contractual clause).

RIGHT TO SUBMIT COMPLAINTS TO THE SUPERVISORY BODY

You may object to the processing of your personal data at any time if you believe that in the processing of your data we have breached the Croatian or European data protection regulations to the supervisory authority of the Personal Data Protection Agency, Martićeva 14, Zagreb, [email protected]

PRIVACY POLICY ON THE WEB

The Company recognizes and appreciates your right to confidentiality of information and is committed to maintaining the security of the information it collects through the Company's website. Your personal information is collected and used only on the basis of information you have voluntarily provided to the Company, using the Website (personal information such as name, address, city, e-mail, year of birth). The collected personal information is stored electronically and all appropriate technical and organizational measures are applied to prevent the personal data being violated. E-mails received with your personal information will be used by the Company only for the purpose of fulfilling your requests.

COOKIES

Cookies allow you to collect statistics about user behavior on web pages (e.g., what parts of the webpage are retained by users for the longest and where the shortest), which browser (e.g., Internet Explorer, Opera, Safari, Google Chrome, Firefox) is used and similar to.

A cookie is a small packet of data sent from a server to a user's computer and serves as an anonymous identifier. The purpose of cookies is to improve the user experience when using the Website. Cookies on the Company's Web site are anonymized and are not used for the purpose of accessing user data or for tracking user activity after leaving.

The Company's website monitors the statistical traffic of its pages solely to obtain the necessary information about the attractiveness and performance of its pages.

Search engine owners are keeping you informed about how cookies are managed. Read more at the related links.

For the remaining search engines, please consult the documentation provided by the search engine-owned company in question.

DIGITAL MARKETING, NEWSLETTER

The club sends out promotional materials through digital communication channels to individuals with whom at some point it has achieved some form of cooperation (subscribers, participants in sweepstakes and prize competitions) and who have provided us with contact information for such form of communication. The users of the Company's services have the right at any time to disable the service of receiving promotional material, and the Company will provide tools to enforce the right to be deleted from the notification database. The legal basis for processing the data for these purposes is the legitimate interest of the Company.

Contact information, such as your name and e-mail address, is necessary if you wish to use the services of receiving promotional material from the Company. Promotional material includes information about services and special offers as well as newsletters.

The customer will be notified at the time of first contact or at any stage of the service's use of their information for digital marketing purposes.

The general opt-out option is not available for some forms of non-marketing communications, such as communications related to the download of a product or service, sales transactions, prize money you participated in, legal compliance statements and (when permitted by law).

The Company may use the technical services of external business partners to deliver newsletters. In this case, we only process the email address you provided to receive the Newsletter for processing. We also ensure that the selected business partner uses the newsletter only for the delivery of our Newsletters, for the duration of your subscription, and may not use it for other purposes. Except as provided in the circumstances, the Company will not share your contact information that you provide to sign up for the Newsletter with third parties.

SAFETY

The Company takes all precautionary measures to protect user information, during entry and transfer, data processing and storage. Access to data is restricted and is available only to those and employees of the Company who need it to perform business activities.

The personal data provided to the Company at the time of registration will be kept during the existence of the Website or for the duration of registration of users. All information provided to the Company when registering on the Website will be destroyed at the latest upon shutting down the Website.

At any time, users have the right to request notification of their personal data being processed by the Company, or to modify or delete it, by sending a request to: [email protected].

UPDATE PRIVACY POLICY

We regularly review our privacy policies and see if they reflect the way the Company processes personal information. The current version is always available on our site www.gandalftattoo.com, and if any major changes affect your rights and freedoms, we will notify you directly.

The Company reserves the right to transfer personal data within its business group as well as to third parties, respecting the principle of an adequate level of legal protection for users' rights and freedoms.

The transfer of personal data is carried out if at least one of the following conditions is met:

Transfer is necessary for the performance of contractual obligations / services
The transfer is necessary for the implementation of the pre-contractual measures taken in response to the request of the beneficiary
The transfer is necessary for the conclusion or performance of a contract concluded with a third party in the interest of the beneficiary
Transmission is legally binding on grounds of important public interest
Transfer is necessary for the establishment, execution or defense of legal claims
Transmission is necessary to protect the vital interests of users
Transfer is necessary to connect business processes within a business group

In order to operate effectively, it is necessary to transfer personal information from one of the above listed companies and associations to another. In these cases, Algiz d.o.o. is responsible for protecting the personal data transmitted.