Name and address of the person responsible for processing
The responsible person in terms of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of the nature of data protection is:
Donji Vukojevac 83/d
44272 Donji Vukojevac
Telefon: +385 44 (0) 664 854
* Hereinafter referred to as "our company"
We are very glad that you are interested in our company. Data protection is a special priority for the management of our company. Our company's website can generally be used without providing any personal information. However, if the respondent wishes to use special company services through our website, the processing of personal data may become necessary. If the processing of personal data is necessary, and there is no legal basis for such processing, we usually obtain the consent of the person concerned.
The processing of personal data, such as the name, address, e-mail address or telephone number of the respondent, will always be in accordance with the General Data Protection Regulation (GDPR) and in accordance with the data protection regulations applicable to our company. With this Data Protection Statement, our company wants to inform the public about the type, scope and purpose of personal data that we collect, use and process. Furthermore, data subjects are informed of the rights to which they are entitled through this data protection statement.
As the person responsible for processing, our company has taken a number of technical and organizational measures to ensure the fullest possible protection of personal data processed through this website. However, internet data transmission can generally have security flaws, so absolute protection cannot be guaranteed. For this reason, each person concerned is free to transfer personal data to us in alternative ways, for example by telephone.
Our company's data protection statement is based on the conditions used by the European legislator to adopt the General Data Protection Regulation (GDPR). Our privacy statement should be legible and understandable to the general public, as well as to our clients and business partners. To ensure this, we would like to explain the terms used in advance.
In this privacy statement, we use, inter alia, the following terms:
Personal data is all information relating to an identified or identified natural person (hereinafter "data subject"). A natural person is considered to be identifiable if, directly or indirectly, by specifically assigning to an identifier such as name, identification number, location data, network identifier or one or more special features, the term can be identified physically, physiologically, genetically, psychologically , the economic, cultural or social identity of this natural person.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
Processing is any process carried out with or without the aid of automated procedures or any such series of processes relating to personal data such as collecting, recording, organizing, organizing, storing, adapting or modifying, reading, testing, using, disclosing by transmission, distribution or any other form of making available, pairing or linking, restricting, deleting or destroying.
Processing restriction is the marking of stored personal data with the aim of limiting their future processing.
Pseudonymization is the processing of personal data in such a way that personal data can no longer be assigned to a particular data subject without the use of additional information, provided that such additional information is stored separately and subject to technical and organizational measures to ensure that personal data is not assigned to an identified .
- Data controller or manager
The person responsible or responsible for the processing is a natural or legal person, body, institution or other body that independently or together with others decides on the purpose and manner of processing personal data. If the purposes and means of such processing are determined by Union law or the law of the Member States, the responsible person or the special criteria for his appointment may be provided for by Union law or the law of the Member States.
Processor is a natural or legal person, public authority, institution or other body that processes personal data on behalf of the responsible person.
The recipient is a natural or legal person, public authority, institution or other body to which personal data are disclosed, regardless of whether it is a third party or not. However, bodies which may receive personal data in the context of a specific investigative mandate under Union or Member State law shall not be considered as recipients.
A third party is a natural or legal person, public body, agency or body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process personal data.
Consent is any expression of will that the data subject voluntarily gives in an informed manner and undoubtedly for a specific case in the form of a statement or other clear affirmative action by which the respondent shows that he agrees to the processing of his personal data.
By using cookies, our company can provide users of this website with services that are easier to use that would not be possible without setting cookies.
The person concerned may prevent the setting of cookies by our website at any time by using the appropriate setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common internet browsers. If the person in question deactivates the cookie setting in the internet browser used, not all functions of our website may be fully utilized.
Collection of general data and information
Our company's website collects a range of general data and information each time the affected person or automated system accesses the website. This general data and information is stored in the server log files. (1) the types and versions of browsers used, (2) the operating system using the access system, (3) the website from which the access system accesses our website (the so-called referer), (4) the sub-websites, which access through the access system on our website can be controlled, (5) the date and time of access to the website, (6) the Internet Protocol address (IP address), (7) the Internet service provider of the access system and (8) other similar information and information used to prevent threats in the event of an attack on our information technology systems.
When we use this general data and information, our company does not draw any conclusions about the data subject. Instead, this information is needed to (1) properly deliver the content of our website, (2) optimize the content of our website and advertise for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement agencies with the information needed to enforce the law in the event of a cyber attack. This anonymously collected data and information is therefore statistically evaluated by our company, and also with the aim of increasing data protection and data security in our company in order to ultimately ensure the optimal level of protection of personal data we process. Anonymous server log data is stored separately from all personal data provided by the affected person.
Possibility of contact via the website
Due to legal regulations, the website of our company contains information that allows quick electronic contact with our company and direct communication with us, which includes a general address for the so-called. electronic mail (e-mail address). If the person concerned contacts the person responsible for processing by email or the contact form, the personal data transmitted by that person will be automatically stored. Such personal data that the data subject transfers to the controller on a voluntary basis shall be stored for the purpose of processing or contacting the respondent. This personal information will not be passed on to third parties.
Routine deletion and blocking of personal data
The person responsible for processing processes and stores the personal data of the person concerned only for the period necessary to achieve the purpose of storage or if required by the provider of European directives and regulations or other legislators in the laws or regulations of the person responsible for processing.
If the purpose of storage is no longer valid or if the storage period prescribed by the European legislator for directives and regulations or other competent legislator expires, personal data will be routinely blocked or deleted in accordance with legal provisions.
Every data subject has the right, given by a European directive and the legislator, to request confirmation from the person responsible for the processing whether the personal data relating to him or her are being processed. If the respondent wishes to exercise this right to confirmation, he may contact our Data Protection Officer or another employee of the Data Processing Manager at any time.
Every person covered by the processing of personal data has the right, given to him by a European directive and the legislator, to receive free information on personal data stored on him and a copy of this data from the person responsible for processing at any time.
Every person affected by the processing of personal data has the right given to him by a European directive and the legislator to request an urgent correction of inaccurate personal data relating to him. Furthermore, the data subject has the right, taking into account the purposes of processing, to request the supplementation of incomplete personal data - also through a supplementary statement.
If the respondent wishes to exercise this right to correction, he may contact our data protection officer or another employee of the data controller at any time.
- Right to erase (right to forget)
Any person affected by the processing of personal data has the right, approved by the European legislator of directives and regulations, to request that the responsible person immediately delete personal data relating to him if there is a valid reason and if no processing is required.
If there is a valid reason for this and the respondent wants the personal data stored by our company to be deleted, he can contact our data protection officer or another employee of the data processing manager at any time. Our company's data protection officer or other employee will make sure that the request for deletion is completed immediately.
- The right to limit processing
Any person affected by the processing of personal data has the right, approved by the providers of European directives and regulations, to require the responsible person to restrict the processing of the same.
- The right to data portability
Every person covered by the processing of personal data has the right, granted by European directives and the legislator, to receive personal data concerning him or her provided by the person concerned to the responsible person, in a structured, common and machine form. readable format. You also have the right to transfer this data to another responsible person without interference by the responsible person to whom the personal data was provided.
In order to exercise the right to data portability, the person concerned may at any time contact the Data Protection Officer appointed by our company or another employee.
Everyone involved in the processing of personal data has the right to be objected to by European providers of directives and regulations, for reasons arising from their specific situation, at any time against the processing of personal data relating to them. This also applies to profiling based on these provisions.
Our company no longer processes personal data in the event of a complaint, unless we can prove convincing legitimate reasons for the processing that outweigh the interests, rights and freedoms of the respondents, or the processing serves to make, pursue or defend legal claims.
If our company processes personal data for the purpose of direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the respondent objects to the use of personal data for direct marketing purposes, our company will no longer process personal data for these purposes.
- Automated decisions in individual cases including profiling
Any person affected by the processing of personal data has the right, given by the European legislator of directives and regulations, not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on them or significantly affects them in a similar way, if a decision (1) is not required for the conclusion or enforcement of a contract between the data subject and the controller, or (2) is permitted under Union or Member State law to which the controller is subject and such legislation requires appropriate measures to protect rights and freedoms and legitimate interest of the respondent or (3) is carried out with the express consent of the respondent.
- The right to revoke consent under the data protection law
Every person affected by the processing of personal data has the right granted by a European directive and the issuer of a regulation to revoke the consent to the processing of personal data at any time.
If the respondent wishes to exercise his or her right to revoke consent, he or she can contact our data protection officer or another employee of the data controller at any time.
Data protection in applications and in the application process
The person responsible for processing collects and processes the applicant's personal data for the purpose of conducting the application procedure. Processing can also take place electronically. This is particularly the case if the applicant sends the relevant application documents electronically, for example by e-mail or via a web form on the website, to the person responsible for processing. If the person responsible for processing enters into an employment contract with the applicant, the submitted data will be stored for the purpose of processing the employment relationship in accordance with legal provisions. If the person responsible for processing does not enter into an employment contract with the applicant, the application file will be automatically deleted two months after notification of the refusal decision, provided that the deletion is not contrary to other legitimate interests of the person responsible for processing.
Legitimate interests in processing conducted by the processing manager or a third party
If the processing of personal data is based on Article 6 and point f of the GDPR, our legitimate interest is to do business for the benefit of all our employees and our shareholders.
The duration during which personal data will be stored
The criterion for the duration of the storage of personal data is the relevant legal retention period. After the deadline, the relevant data will be routinely deleted, provided that they are no longer obliged to fulfill the contract or initiate the contract.
Data protection regulations for the application and use of Google Maps
Using web fonts