Nautički centar Liburnija d.o.o. undertakes to protect the user’s personal data information by collecting only the essential, basic information necessary to meet our obligations; informing users of the way they use the collected data, regularly gives users the choice of using their data. Any user information is strictly kept and only accessible to employees who are required to do this. All the employees of the Nautički centar Liburnija d.o.o. and business partners are responsible for adhering to the privacy principles.
The web site contains information about products and services offered by Nautički centar Liburnija d.o.o. The site serves as the electronic sales point of the company. Nautički centar Liburnija d.o.o. cannot be held responsible for any damages arising out of the use of information from these pages for purposes beyond the scope of their intended purpose. Nautički centar Liburnija d.o.o. undertakes to apply maximum security measures to protect the interests of users and to prevent any misuse of information.
Payment transactions with credit and / or debit cards are performed using a secure SSL protocol using 128-bit encryption, which is considered a safe way of performing cash transactions worldwide. Nautički centar Liburnija d.o.o. cannot be considered responsible for abuses that cannot be established as a result of technical-security breaches of the web store system or failure of employees of the Nautički centar Liburnija d.o.o.
PRIVACY AND DATA PROTECTION
The Company responsible for processing personal data is:
Nautički centar Liburnija d.o.o., a limited liability company, based in the Republic of Croatia, Omišalj, Pušća 132, registered at the Court Registry of the Commercial Court in Rijeka under registration number MBS: 040248155, personal identification number (OIB): 76605301533.
Personal Data Protection Officer Contact Information:
e-mail: [email protected]
Method of collecting and types of data being collected
Some services provided by the Company require the collection of personal information of users, where basic data are collected in the following ways:
- Directly by the users themselves in such a way that they deliver to the Company, as a processing manager, a certain amount of information relevant to the provision of the corresponding services. For the purpose of providing the appropriate services, the user is obliged to provide the Company with the following information that is necessary to establish a contractual relationship for the provision of a particular service and / or the sale of certain products from its range:
- a) firs and last name;
- b) address;
- c) Personal Identification Number (OIB)
- e) phone contact;
- f) electronic mail contact information (e-mail address);
- g) personal identification data;
- h) bank account information and card number for the purpose of regulating payment obligations;
- From other sources, from our business partners or from publicly available sources (for example, data can be accessed through the phone book and other publicly available services);
- Automatically visiting our web page (web pages, apps, and the web shop portal), which is the data associated with network identifiers (Internet Protocol addresses and cookie identifiers).
The cookie is a small data file that is stored on a computer or mobile device while visiting a particular web page. Cookies are used to provide better user experience to each user, to save the user preferences, with a view to making web pages more effective, as well as tracking and testing the use and visibility of the Company’s web site. Cookies are also used to track Internet usage and user profile creation, and then to display custom internet ads based on the user preferences.
By deactivating and / or blocking cookies, the user can still browse the Company’s web site. However, there is a likelihood that some features and / or functionalities of the web page will not be available to such a user, it means that the time needed to access certain website functions will be longer than usual.
Subject network identifiers may leave traces that, combined with other identifiers and information provided by Internet service servers, may serve to identify the user. Also, for this purpose we collect and process the following data:
- a) IP address data;
- b) data on the use of particular applications;
- c) user habits information – we create the data for profiling users.
The amount or scope of personal information that the Company collects depends on the type of service the Company provides to its users, as well as the legal basis on which it collects data. The Company continually takes care of collecting only the necessary scope of personal data needed to achieve the legally established purpose for which data is processed.
Purposes for which personal data is collected and processed further
The Company’s personal information is collected to provide, maintain, protect and improve its purchase-related services in order to understand the ways in which users use the services provided and use the Company’s web site and to perform contractual obligations Company. Such information is collected by the Company on the basis of a claim made by the user for one or more specific purposes, as well as in one of the following cases.
Execution of contractual obligations
The Company collects and continues to process user personal data for the purpose of contract conclusion and delivery, delivery of ordered products, advice and assistance in product use, provision of appropriate additional and / or extended product warranties, user complaints and others actions that relate to the conclusion and execution of the contract in accordance with the relevant regulations.
The legal basis for the processing of personal data of users for the foregoing purposes is the necessity of entering into a contract, it means that, in the event that the user refuses to provide essential information, the Company will not be able to enter into a contract and / or undertake certain activities related to execution of the contract concluded.
Fulfilment of legal obligations
The Company is obliged to provide access to personal data processed by them, correction of inaccurate personal data, deletion of personal data, or limitation of personal data processing, as well as to acquaint them on the basis of the submitted written request of users to the above address of the data protection officer with the possibility of complaints about personal data processing and the right to transfer data.
Direct advertising (marketing)
User contact information may be used to send promotional product and service information to the Company if the user has given the consent of such processing or if there is a legitimate interest of the Company for such actions unless these interests are of greater interest or the fundamental rights and freedoms of users that require the protection of personal data.
The Company may use the contact information and contact users whose personal data already has, on the legitimate interest in sending promotional notices about all the products and services provided by using all available advertising channels unless the user does not object to such processing.
In order for the user to receive notices that correspond to his / her wishes and habits, it is necessary for the Company to use certain user data to create personalized advertising notices by the user explicitly objects to such processing, or withdraw its earlier application for processing.
The legal basis for the processing of personal data for the aforesaid purposes is a legitimate interest of the Company, unless such interest is a strong interest or fundamental rights and freedoms that require data protection.
The Company uses certain user data exclusively for the purposes of own records, in order to protect the legitimate interests of users and / or the Company. For example, this includes the use of personal data for the purpose of creating bids that meet the needs and wishes of users, research and market analysis.
Potential users’ information
The Company is also authorized to collect information about potential users of their services and / or products. These data include basic information (first and last name, e-mail address), as well as the interests of potential users addressing the Company with the desire to be informed and / or offered certain products and services.
The legal basis for collecting the described case is the user’s attachment.
Time to store and process personal data
Depending on the purpose and the legal basis on which the user’s personal information is collected, the Company is in some cases obliged to keep personal data in the time period that for a particular purpose are prescribed by applicable regulations or the termination of the purpose for which they were collected. By passing a statutory deadline binding on the Company for the custody of certain personal data or termination of the purpose, the same shall be deleted.
In cases where the basis for data collection and processing is a legitimate interest of the Company or the beneficiary of the user, the personal data is kept in the following time periods:
- a) data on existing users and: during the contract and 6 months after termination;
- b) data about potential users: 3 months;
Data processed on the legitimate interests of the Company and / or the beneficiaries of users may be deleted even before the expiry of the time limit specified in this Policy, if such deletion is required by the user, it means, when the user object to such processing.
The right to access personal data information
As a processing manager, the Company undertakes, on the basis of the submitted written request of the user, which request may also be in the form of electronic mail, to provide access to the personal data information processed by them, to inform them about the purpose of processing the personal data information in which they are processed, the recipients or recipient categories with which the personal data information are disclosed or will be disclosed, the estimated timing of the processing or the criteria used to determine that period.
Right to correct inaccurate data information
As a processing manager, the Company will allow for correction of incorrect personal data information in each individual case when it is determined that the personal data collected on the user is incorrect or that the user data information has changed.
Right to delete personal data information
The Company will delete the personal data information of the user in the following cases:
- a) when user personal data information is no longer necessary for the purpose of processing or termination of the processing purpose;
- b) when the user withdraws the privation as a legal basis for the processing of data information, and there is no other legal basis for data information processing;
- c) when the user objects to the processing of the data (see the title Right to complain)
- d) when personal data information is processed unlawfully;
- e) when the personal data information has to be deleted in order to fulfil the legal obligations of the European Union law or the Member State to which the data processing manager is subject;
- f) when personal data information is collected regarding the provision of information society services in relation to the child’s privation.
Right to Restrict Data information Processing
The limitation of personal data processing will be provided by the Company in cases where the user dispute the accuracy of the data when the processing is illegal and the user is opposed to the deletion of the data and instead requires a restriction on their use when the processing manager no longer needs personal data processing needs, but the user requests data for the fulfilment of legal requirements as well as when the user object to the processing of personal data based on the legitimate interests of the Company, including the user profile and / or customer profiles.
Right to Invoke Complaints
The user has the right to file an objection to the processing of personal data relating to him if the data is processed for the legitimate interests of the processing manager. In this case, the Company will cease processing personal data as the processing manager unless it demonstrates that there are convincing legitimate reasons for processing personal data in relation to user rights, in case the processing of data serves to establish, exercise or defend legal requirements.
If user personal information is processed for direct marketing purposes, the user has the right at any time to file an objection to processing for direct marketing purposes, especially if the personal data are used for the purpose of creating a profile.
Where personal data are processed
The Company’s personal data are processed by the Company in the Republic of Croatia.
Under what conditions personal data is passed on to third parties
Personal data information about users are forwarded by the Company to third parties (including competent bodies) only in the following cases:
- a) the beneficiary of the user;
- b) in order to fulfil the Company’s legal obligations;
- c) when such processing is necessary to protect key user’s interests.
Who to refer to
Nautički centar Liburnija d.o.o.
Pušća 132, 51513 Omišalj
The Company reserves the right to amend this Policy at any time without giving any special notice to the persons concerned. For this reason, it is recommended to all interested parties to regularly review the Company’s Web site content for information on the updated content of this Policy.
In Omišalj, December 2018.
In Omišalj, 20.05.2018.
Nautički centar Liburnija d.o.o.