Privacy policy

SH Planet d.o.o. as controller of your personal data, uses and protects all information that users provide when using the webpage of SH Planet d.o.o. and our other services, especially with regard to the processing of personal data in the provision of our services.

Contact details of the data controller:

SH Planet d.o.o.
Horvatova ulica 80a
10 020 Zagreb
Republic of Croatia
OIB: 47595174497
Email address: shplanet@icloud.com
Webpage: https://www.sh-planet.com

The contact details of the Data Protection Officer:

Data Protection Officer
Horvatova ulica 80a
10 020 Zagreb
dpo@renaissance.hr

What is personal data?

Personal data is any information relating to a specific or identifiable natural person. In particular, personal data are considered to be all data that determine the identity of the user (for example, name and surname, e-mail address, address of residence, etc.).

Processing is any operation or set of operations carried out on personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, withdrawal, inspection, use, disclosure by transmission, publication or otherwise making available, classification or combination, blocking, erasure or destruction, and the performance of logical, mathematical and other operations with that data.

How we collect your personal data?

We collect your personal data in the following cases:

when ordering products from our web shop
when browsing our webpage
when applying for open job vacancies
when concluding a contract with us
when obtaining employment
when contacting us via e-mail

What personal data we collect and process?

In the above cases, we collect the following personal data:

ORDERING PRODUCTS FROM OUR WEB SHOP:
- name and surname
- the name of the company where you are employed, or on behalf of which you place the order
- Email address
- Telephone number
- The country to which the purchased product must be delivered
- The city to which the purchased product must be delivered
- The street and postal code to which the purchased product must be delivered
- Special instructions regarding the order and delivery, which you can specify yourself in free form
BROWSING OUR WEBPAGE:
- IP address
- domain name
- type of search engine
- number of visits
- time spent on the pages
- cookies (depending on your choice)
APPLYING FOR OPEN JOB VACANCIES:
- general and contact information (name and surname, date of birth, address of residence, telephone and/or mobile phone number, e-mail address, personal photo if you provide it, skills, URL to social network profiles, e.g. LinkedIn if provided, and other information provided in the CV and / or application)
- data on competences (academic education, work experience, knowledge of certain technologies and solutions, knowledge of certain business processes, organizational skills, teamwork, hobbies, knowledge of foreign languages) in case we invite you to an interview and/or testing (skills), we use data on the results of the interview and/or testing
CONCLUDING A CONTRACT WITH US:
- name and surname of the sole proprietor (if we conclude a contract with a sole proprietorship) and OIB/other identification number
- name and surname of a natural person (if we conclude a contract with a natural person, e.g. employment contracts) and OIB/other identification number
- name and surname of the person(s) authorised to represent the company and their OIB/other identification number
- name and surname of the proxy of the person(s) authorized to represent the company i.e. company and their OIB/other identification number
- address of permanent/temporary residence of a person(s) authorized to represent the company or proxy of persons authorized to represent the company i.e. company or natural person/sole proprietor (if we conclude a contract with them)
- contact e-mail address
- contact data (name, surname, e-mail address, phone number, position) of persons employed in legal entities with whom we have concluded contracts, if they are listed in the contract itself as contact person/s data for a particular contractual relationship or subsequently submitted during the duration of the contractual relationship
OBTAINING EMPLOYMENT:
- name and surname
- OIB
- Sex
- date of birth
- citizenship
- Address of permanent/temporary residence
- residence and work permit or work registration certificate, if the worker who is a citizen of a third country is required to have them
- professional education and special exams and courses that are a requirement for performing work, statements, licenses, certificates, etc.
- work start date
- the name of the position, i.e. the nature or type of work for which the worker is employed
- Type of concluded employment contract
- date and reason for termination of employment, or termination of employment for hired-out workers
- date of submission of application (start, changes, termination) for mandatory insurance of workers as insured persons based on employment, including voluntary pension insurance, if the employer participates in paying for it, and mandatory health insurance during work abroad
- all employment contracts in written form or confirmation of the concluded employment contract with the employee, all amendments to the employment contract
- agreements between employer and employee, consents and written statements of employees, decision on termination
- application forms (beginning, changes, termination) of mandatory pension and health insurance
- public and private documents that provide evidence of the accuracy of information on professional education, courses, training and other information on which the exercise of rights and obligations from the employment relationship, i.e. in connection with the employment relationship, depends
- public and private documents, decisions, certificates, calculations, etc. related to the obligations of calculation and payment of wages, as well as payment of taxes and contributions
- resolutions, private documents, certificates, minutes, etc. related to protection and occupational safety, injuries at work and occupational diseases
- decisions, private documents, certificates, etc. related to exercising rights from pension insurance, including rights based on the length of insurance, which is calculated with increased duration
- resolutions, private documents, certificates, records, etc. related to exercising rights from compulsory health insurance
- public and private documents, decisions, certificates, etc. related to the exercise of the right to provide personal care or some other right from the general labor regulations and to the exercise of maternity and parental rights
- workers' requests for the protection of rights from the employment relationship, with decisions, acts and letters of the employer adopted in the procedure regarding such requests
- other documents, documents and acts related to the exercise of rights from the employment relationship, i.e. in connection with the employment relationship
- resume and job application
- copy of school reports, diplomas and other certificates of professional training
- tax card
- information from an identity card or a copy of a passport, bank account information
- seniority statement at HZMO
- work and residence permit in the case of a worker who is a foreign citizen
- the Conviction no criminal proceedings are being conducted
- signed confidentiality statement
- a signed declaration of the employee's consent to receive documents on salary, salary compensation and severance pay electronically
- signed consent of the worker for certain processing of certain types of personal data for certain purposes
- a copy of the lease agreement for the employee for whom the Employer bears housing costs, the agreement on the regulation of rights and obligations based on the apartment lease agreement
- certificate of training to work in a safe manner
- for workers who were temporarily hired-out to the employer by affiliated companies and for workers who were hired-out to the employer as a beneficiary by temporary employment agencies, the following additional documentation must be submitted:
  - the assignment agreement between the employer and the associated employer and the written consent of the employee
  - the assignment agreement between the agency and the beneficiary and the referral by which the temporary employment agency refers the worker to the beneficiary
  - certificates of professional qualification in accordance with obligations based on regulations on occupational safety
  - other statements, documents and acts related to the realization of rights from the employment relationship, i.e. in connection with the employment relationship and rights based on the hiring-out of workers.
CONTACTING US BY E-MAIL:
- e-mail address
- name and surname (if you specify it in the e-mail)
- the content of the e-mail message, including all the information you provide in the message yourself

How your data can be used and when are they deleted?

The use of your personal data is in accordance with the regulations on the protection of personal data, more precisely in accordance with the General Data Protection Regulation / Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 (hereinafter: GDPR) and the Act on the Implementation of the General Data Protection Regulation ("Official Gazette" no. 42/18) and must be justified on the basis of one of the legal grounds. Below we present the legal grounds for the collection and processing of the above personal data.

Justified legal grounds for data processing may, inter alia, be:

legitimate interest of the controller
data processing is necessary for the performance of contracts to which the data subject is a party, or for the execution of acts at the request of the data subject prior to the conclusion of the contract
legal obligation of the controller
consent of the data subject

Processing of personal data pursuant to §6.1(f) GDPR – LEGITIMATE INTEREST

If, prior to the deletion of any of the above personal data, a dispute arises regarding any of the above mentioned personal data between SH Planet and the data subject, the data necessary for proper representation before courts and other administrative /state bodies shall be forwarded to legal representatives and courts, i.e. competent administrative/state bodies, and shall be kept and processed further regardless of the established deletion deadlines. This is necessary for the protection and defense of the legal claims of the controller and such processing of personal data represents the legitimate interest of the controller.

DELETION: The above data are kept for 10 years from the date of the final decision of the competent body and after that they are irretrievably deleted, except for those data that must be kept for a longer period based on some other grounds.

Data processing pursuant to §6.1(b) GDPR – PERFORMANCE OF A CONTRACT TO WHICH THE DATA SUBJECT IS A PARTY / TAKING ACTION AT THE REQUEST OF THE DATA SUBJECT PRIOR TO THE CONCLUSION OF THE CONTRACT

SH Planet uses this legal ground to process your personal data in situations when you where you buy our products through our web shop. Namely, when purchasing a product on our website, you leave the above-mentioned data, in the prescribed form, all for the purpose of purchasing the product (concluding a sales contract with us) and providing the information we need so that we can deliver the products you ordered to the requested location. The above information is necessary so that we can provide you with services within the web shop platform, that is, so that we can deliver the products you have ordered. Without the specified data, we would not be able to perform the service that we undertook to perform towards you by concluding the sales contract, therefore, the specified data is necessary for the execution of the contract that we conclude with you.

DELETION: The data specified in the contract (name and surname, name of the company where you are employed, i.e. on behalf of which you place the order, e-mail address, phone number, country to which the purchased product must be delivered, city to which the purchased product must be delivered, street and postal code to which the purchased product must be delivered, special instructions related to the order and delivery that you can specify yourself in free form) we keep until the execution of the above-mentioned contracts with you, i.e. after the termination of the contract, and for a maximum of 11 years from the last payments made under the contract, in accordance with the Accounting Act, unless longer storage is required due to the protection and defense of the company's legal claims in accordance with §17.3(e) GDPR. In relation to personal data related to contracts by which the controller acquires some kind of property for himself, we keep them permanently, also in accordance with the Accounting Act.

In relation to the data that we collect about you, as a candidate, in the period between your application for an open job vacancy and the decision making, we collect them at your request in order to perform actions (evaluation of you as a candidate, conducting job interviews, etc. .) that precede the conclusion of the employment contract.

DELETION: If you have not been selected in the job vacancy process, all data we have collected about you in this way will be irrevocably deleted, unless you have given us explicit consent to retain the personal data and further process them for the purpose of contacting you again in the future for another position that corresponds to your qualifications.

All inquiries that you send us by e-mail within the sphere of business communication, for the purpose of certain requirements for concluding a contract, interest in business cooperation with us, communication that we conduct after the conclusion of the contract with you, and for the purpose of fulfilling our obligations to you, fulfilling your obligations to us, the delivery of data necessary for the continuation of business cooperation or its completion, as well as all communication carried out via e-mail for the purpose of collecting data necessary for the conclusion of the contract and the taking of actions at your request, are collected and processed on the basis of this legal ground.

DELETION: Depending on the type of data and the purpose of their collection, different storage or deletion periods apply. In relation to specific personal data collected through e-mail communication, deletion deadlines are determined in accordance with the type of specific data and the purpose for which they are collected, as stated in other chapters of this Policy in relation to certain types of data. If the e-mail correspondence is of such a type that its content is relevant for the assessment of the validity of the creation and conclusion of the contractual relationship between the parties, i.e. it is essential for the performance of certain obligations arising from the contract, it is attached and archived with the contracts themselves in accordance with the deadlines prescribed for the preservation of contracts.

Data processing pursuant to §6.1(c) GDPR – COMPLIANCE WITH THE LEGAL OBLIGATIONS OF THE CONTROLLER

We use this legal ground for data processing in relation to all personal data that we collect from you at the time of establishing an employment relationship (apart from the data mentioned in the previous paragraph, which we collected based on necessity for the performance of the contract) based on labour law regulations. Namely the Labor Act ("Official Gazette" no. 93/14, 127/17, 98/19, 151/22, 64/23), the Ordinance on the content and method of maintenance of employees' registry ("Official Gazette" no. 73/17) and accounting regulations, regulations in the field of tax law and health insurance, which refer to registration / deregistration of workers, prescribe obligations that we as an employer must fulfil. Personal data collected from employees are listed in the table in the previous chapter, and they correspond to the types and categories of personal data that are prescribed by the labor law, tax/ accounting regulations.

DELETION: We store the data collected in this way in accordance with the legal retention periods, which deadlines are prescribed in detail in the table below, while we keep the salary lists of workers and registrations of applications to state/administrative bodies in relation to workers permanently, and all payments that have been made according to the accounting regulations, we store for 11 years from each payment made to the employees (including the personal data of the employees that are connected with such payments).

a written overview of the worker's data	UNTIL THE END OF THE YEAR IN WHICH THE EMPLOYMENT TERMINATED
written employment contract or confirmation of the concluded employment contract, all amendments to the employment contract agreements between employer and employee consents and written statements of the workers termination decisions application forms (beginning, changes, termination) of mandatory pension and health insurance public and private documents that provide evidence of the accuracy of information on professional education, courses, training and other information on which the realization of rights and obligations from the employment relationship depends	6 YEARS FROM THE END OF THE YEAR IN WHICH THE EMPLOYMENT RELATIONSHIP WAS TERMINATED, THAT IS, UNTIL THE LEGAL TERMINATION OF THE DISPUTE, IF THE EMPLOYER KNOWS THAT AN LABOR DISPUTE HAS BEEN INITIATED WITH REGARD TO THE EXERCISE OF RIGHTS FROM THE EMPLOYMENT RELATIONSHIP
public and private documents, decisions, certificates, calculations, etc. related to obligations to calculate and pay wages and pay taxes and contributions	ACCORDING TO ACCOUNTING REGULATIONS (depending on the document)
decisions, private documents, certificates, etc. related to exercising rights from pension insurance, including rights based on the length of insurance, which is calculated with increased duration	40 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE EMPLOYMENT RELATIONS WERE TERMINATED
resolutions, private documents, certificates, records, etc. related to exercising rights from compulsory health insurance public and private documents, decisions, certificates, etc. related to the exercise of the right to provide personal care or some other right from the general labor regulations and to the exercise of maternity and parental rights workers' requests for the protection of rights from the employment relationship, with decisions, acts and letters of the employer adopted in the procedure regarding such requests	6 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE DOCUMENTATION WAS CREATED, THAT IS, UNTIL THE LEGAL TERMINATION OF THE DISPUTE, IF THE EMPLOYER KNOWS THAT AN LABOR DISPUTE HAS BEEN INITIATED WITH REGARD TO THE EXERCISE OF RIGHTS FROM THE EMPLOYMENT RELATIONSHIP
the collective agreement referred to in the employment contract of workers employed by that employer and by which individual issues are appropriately regulated instead of mandatory information in the employment contract, and are related to the exercise of rights from the employment relationship, i.e. in connection with the employment relationship	6 YEARS COUNTING FROM THE EXPIRATION OF THE AGREED DURATION OF THE COLLECTIVE AGREEMENT OR FROM THE EXPIRATION OF THE EXTENDED APPLICATION OF THE LEGAL RULES CONTAINED IN THAT COLLECTIVE AGREEMENT, THAT IS, UNTILL THE LEGAL TERMINATION OF THE DISPUTE, IF THE EMPLOYER KNOWS THAT A LABOR DISPUTE HAS BEEN INITIATED WITH REGARD TO THE EXERCISE OF RIGHTS FROM THE EMPLOYMENT RELATIONSHIP
labor regulations that regulate wages, work organization, procedures and measures for the protection of dignity and protection against discrimination, and other important issues, which are referred to in the employment contract of workers employed by that employer and which appropriately regulate individual issues instead of mandatory data in the employment contract, and are related to exercising rights from the employment relationship, i.e. in connection with the employment relationship	6 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE LABOR REGULATIONS CEESED TO BE VALID, THAT IS, UNTIL THE LEGAL TERMINATION OF THE DISPUTE, IF THE EMPLOYER HAS KNOWLEDGE THAT A LABOR DISPUTE HAS BEEN INITIATED WITH REGARD TO THE EXERCISE OF RIGHTS FROM THE EMPLOYMENT RELATIONSHIP
the assignment agreement between the employer and the associated employer and the written consent of the employee the assignment agreement between the agency and the beneficiary and the referral by which the temporary employment agency refers the worker to the beneficiary certificates of professional qualification in accordance with obligations based on regulations on occupational safety	6 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE WORK OF THE TEMPORARY ASSIGNED WORKER TERMINATED, THAT IS, UNTIL THE LEGAL TERMINATION OF THE DISPUTE, IF THE EMPLOYER KNOWS THAT A LABOR DISPUTE HAS BEEN INITIATED WITH REGARD TO THE EXERCISE OF RIGHTS FROM THE EMPLOYMENT RELATIONSHIP
other documents and acts related to exercising rights from the employment relationship or in connection with the employment relationship	6 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE DOCUMENTATION WAS CREATED
other documents and acts related to exercising rights from the employment relationship or in connection with the employment relationship ON THE BASIS OF ASSIGNMENT	6 YEARS COUNTING FROM THE END OF THE YEAR IN WHICH THE WORK OF THE ASSIGNED WORKER TERMINATED

Processing of personal data pursuant to §6.1(a) GDPR – CONSENT

We use consent as a legal ground for the processing of personal data in the following situations:

when you give us your consent upon applying for a job vacancy or during the duration of the recruitment process for the purpose of storing and processing the personal data you have provided so that we could contact you again if a new vacancy opened that would suit your interests and abilities
when sending an open job application via e-mail or post – the above is considered your consent in relation to those personal data that you have submitted in an open application for the purpose of processing them so that we could make a decision on your employment
when accepting nonmandatory (optional) cookies on the webpages of SH Planet, in accordance with the cookie settings and the Cookie Policy published on the webpage of SH Planet.

If you are applying for an open job vacancy, you have an option, to give us, as the controller, during the process (by e-mail or in our business premises during a job interview) your consent for the retention and processing of all the data you provided when applying for an open job vacancy, as and to store resumes.

Consent refers only to the stated purpose of processing (i.e. exclusively for the purposes of contacting you in the future for future vacant positions that match your qualifications) and personal data categories of the data subject listed in the table in the row "APPLICATION FOR OPEN JOB VACANCIES" and the processing of personal data must not be used for other purposes. The processing of these personal data categories will be carried out in accordance with the General Data Protection Regulation and the Act on the Implementation of the General Data Protection Regulation. If the consent is at any time withdrawn, this will not affect the lawfulness of the processing that preceded the consent withdrawal.

DELETION: The consent is valid for 2 years from the date of its declaration. In relation to the sending of open job applications, consent will be deemed to have been given on the day of receipt of the open application by the controller. Upon expiry of the time limit of the consent or upon withdrawal of consent, the collected data will no longer be used for the purpose for which the consent was given. You can renew your consent before the expiration date by contacting us and requesting it or confirming the validity period upon our inquiry. At any time, you can withdraw your consent to the storage of your personal data or withdraw the application for the advertised position / open application by sending a notice of withdrawal to the contact e-mail address of the controller.

Recipients and transfer of data to third countries

In principle, we do not transfer your data to third parties, unless we are legally obliged to (for example if instructed so by law enforcement authorities) or unless they are needed for conducting business processes or within the framework of a data processing contract. Third parties are, for example, providers of software solutions through which we process personal data within the company, generally IT services, i.e. processors who perform individual services from the domain of accounting and finance on our behalf. In all cases, we strictly comply with the legal provisions. It is also possible to transfer data to other countries where the aforementioned contractual partners may have their headquarters or process the data. These are primarily countries of the European Economic Area (EEA) and individual countries outside the EEA. These countries may apply data protection regulations that are differently or less protective than European Union (EU) regulations. A possible consequence of this is, for example, that your data may be processed by state authorities for the purpose of control and supervision, possibly without the possibility of a legal remedy. In the event that personal data are processed outside the European Union and there is no decision of the European Commission on the adequacy, we implement appropriate safeguards, including contracting standard contractual clauses of the European Union on data protection, i.e. including them in personal data processing contracts we conclude with such contracting parties that have their headquarters in countries in relation to which there is no decision of the European Commission on adequacy.

Also, for the purpose of fulfilling our contractual obligations to you (after concluding a sales contract via the web shop), we may share your data (name, surname and delivery address) with providers of postal services/package delivery services, for the purpose of delivering products that you ordered to the address you specify in the order form.

How we take care about the security of your data?

We use a variety of security measures, including encryption and authentication, to protect and maintain the security, integrity and availability of your data.

Among other things, we use the following measures:

strictly limited personal access to your data according to the principle of "necessary access" – only certain employees of the controller have access to your data, and only those who, as part of their work responsibilities related to certain categories / types of personal data must have access to your data in order to perform their work tasks
secure transfer of collected data
installing firewalls on IT systems for the purpose of prohibiting unauthorized access;
installing strong antivirus protection to prevent unauthorized access to personal data and prevent external attacks on systems that store your personal data
permanent monitoring of access to IT systems in order to detect and prevent misuse of personal data

All your data is stored on our secure servers and the secure servers of our partners/processors and accessed and used in accordance with our policies and security standards. The protection of the privacy of your data is permanent, and we take all measures necessary to protect it. We process personal data in a secure manner, including protection against unauthorized or unlawful processing and loss.

SH Planet recognizes the importance of privacy, security and data protection and the goal of SH Planet is to incorporate personal data protection into all its business activities and to comply with all legal rules and principles of personal data processing established by the General Regulation on Personal Data Protection, in particular:

Lawfulness, fairness and transparency of the processing means that the processing should comply with a specific legal ground, and that the individual is informed of the processing operation and its purposes, and that the controller is obliged to provide the data subject with all additional information necessary to ensure fair and transparent processing taking into account the specific circumstances and context of the processing of personal data
purpose limitation - means that data should be collected for specific, explicit and lawful purposes and may not be further processed in a way that is inconsistent with those purposes
data reduction - means that data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
Accuracy means that the data must be accurate and, where necessary, kept up-to-date; every reasonable measure must be taken to ensure that personal data which are inaccurate, taking into account the purposes for which they are processed, are erased or rectified without delay
storage limitation - means that the data must be kept in a form that allows the identification of the data subject only for as long as necessary for the purposes for which the personal data are processed
integrity and confidentiality means that data must be processed in a way that ensures an adequate level of security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage
reliability - means that the controller/processor is responsible for respecting the principles and must be able to demonstrate compliance with the provisions of the General Data Protection Regulation.

We undertake not to misuse personal data from registration forms or collected through cookies, nor to hand them over to third parties without your permission, except in cases where the law expressly prescribes this and in cases where it is necessary to fulfil obligations.

All user data are strictly confidential and available only to employees who need these data to perform their work. All employees and business partners have committed to the confidentiality of SH Planet and to respecting the principles of privacy protection. We undertake to protect your personal data by collecting only basic data that is necessary to fulfil the purpose of the given consent, contractual basis, legal ground or legitimate interest.

According to the applicable national and supranational legislation, in order to protect the confidentiality of personal data, we are particularly committed to:

treating your data in accordance with the law and in good faith
collecting data exclusively for specific and lawful purposes
not forwarding personal data to countries outside the EU if these countries do not ensure an adequate level of data protection
ensuring adequate, secure storage of personal data, in such a way that it does not exceed the purpose for which the data were collected and for which they are processed
ensuring the accuracy of personal data
ensuring the processing of personal data only for the time and purpose for which they is necessary
taking all necessary and appropriate technical and organizational measures to prevent the destruction, damage or loss of your personal data.

Your rights

Right to access data - You have the right to request information on whether we are processing your personal data, what data we are processing and to request access (insight) to your personal data that we are processing. If there is a larger amount of data, we could request a more precise specification of the request for the submission of certain groups of data.

Right to rectification - If you notice that we are processing inaccurate or incomplete data about you, or if you want to change them, you have the right to request the correction of these data or the completion of incomplete personal data. In order to ensure that we always process only accurate personal data, it is necessary that you notify us of any changes to them without delay.

Right to deletion (oblivion) - Deletion of personal data can be requested, for example, if you have withdrawn your consent to the processing of certain data, when your personal data are processed illegally or when they are no longer necessary in relation to the purposes for which they were collected or processed in any way. However, please note that we will not be able to delete the data if they are necessary to fulfil legal obligations, contractual obligations or other legal grounds from the General Data Protection Regulation. In all situations where it is possible, we will irrevocably delete all your personal data from our systems and leave only general statistical data that cannot be linked to your identity.

Right to restriction of processing - You have the right to obtain a restriction of the processing of your personal data, which can be requested, for example, if you have filed an objection to data processing, if you doubt the accuracy of the personal data being processed or the legality of their processing, but you do not want this data to be deleted, or they are still necessary for the fulfilment of legal requirements.

Right to data portability - If the processing is based on your consent or is carried out for the purpose of executing a contract concluded with you, and at the same time is carried out by automated means, you have the right to receive your personal data that we have received from you. If you request it, we will transfer your personal data directly to another controller, if it is technically feasible.

Right to object - At any time, considering your particular situation, you are authorized to file an objection to the processing of personal data relating to you, which is why we will limit its processing. Also, we will delete the said data and stop processing them, unless we prove that there are well founded and justified legal grounds for the processing. In addition, you have the right to object at any time to the processing of your personal data for purposes for which you have not given your consent. After submitting an objection, your personal data will stop being processed for the stated purpose.

Right to withdraw consent - If the processing of your personal data is based on your consent, you have the right to withdraw it at any time, without any negative consequences.

In case you no longer want us to process your data in any way, or request the deletion, correction, or transfer of your data, please notify us via e-mail to the e-mail address of the Data Protection Officer: dpo@renaissance.hr. The officer may contact you to verify the authenticity of the request.

At any time, you can request:

access to the Privacy Policy
confirmation of whether the data are processed in relation to you and the possibility of reviewing the personal data contained in the personal data storage system
forwarding of your personal data contained in the data storage system
providing of a list of third parties to whom personal data have been transferred, when they have been transferred to them, on what basis and for what purpose
providing of information about the sources on which the records are based, which personal data the storage system contains about the individual and the method of processing
providing of information on the purpose of the processing and the type of personal data being processed, as well as any necessary explanations in this regard
an explanation of the technical or logical-technical decision-making procedures if the controller performs automated decision-making procedures by processing the personal data of the individual.

Personal data that are no longer needed are either irreversibly anonymized or destroyed in a secure manner.

If you object to the processing of your data, you can file your objection with the competent state authority, i.e. the Personal Data Protection Agency, Zagreb, Selska cesta 136, in accordance with the General Data Protection Regulation and the Act on the Implementation of the General Data Protection Regulation.

Last updated: October 2024.

Select your country

Language

Country/region