In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (Official Journal of the European Union L 119 , 4.5.2016, page 1, hereinafter: General Regulation on Data Protection), which is in full application from 25 May 2018 in the Republic of Croatia and all EU Member States, as well as the Law on Implementation General Regulations on Data Protection (Official Gazette No. 42/18, hereinafter: the Act), the Labor Act (Official Gazette nos. 93/14 and 127/17), the Occupational Safety and Health Act (Official Gazette no. 71/14, 118/14 and 154/14), i.e. in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and the best European practice, NIKSI, OBRT ZA TRGOVINU I USLUGE.

Registered in the Commercial Court in UPRAVNI ODJEL ZA TURIZAM, PODUZETNIŠTVO I RURALNI RAZVOJ OPATIJA (OPATIJA) (hereinafter: NIKSI), as the head of the processing of personal data of users of its services and customers, drafted a policy on the protection of personal data of users of services and customers. Privacy Policy is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates which user data are collected, how such data are processed, and for what purposes they are used. The privacy policy also informs service users and / or customers of their rights to collect and further process personal data, all for the purpose of protecting their privacy in a broader sense.

Privacy policy based on the following principles of personal data processing: procedures of legality, transparency and best practices, the possibility of reducing the processing and reduction of data, the way points and personal data work, the possibility of reducing access, integrity and confidential data, which should be taken into account calculate trust and fair processing, manner of performing opportunity (purposes of processing), manner of processing in unnamed (anonymized) form.

The Privacy Policy applies to all services NIKSI, OBRT ZA TRGOVINU I USLUGE offers, with the aim of the Policy being to inform users clearly and transparently about the processing of their personal data and their rights. First of all, users can at any time contact the Association with a request to amend, supplement and/or update the data relating to them, as well as to withdraw the given consent and request the cessation of further processing of personal data.

The following is responsible for the processing of personal data: [email protected]

Contact details for personal data protection:

e-mail: [email protected]

Methods of collection and types of personal data collected

Directly by the users themselves in a way that the users themselves submit the data to the NIKSI, OBRT ZA TRGOVINU I USLUGE as the processing manager in a certain range of data that is essential for the provision of appropriate services, sales or some other user link and naturegoddessgiftbox.com. In order to provide appropriate services, the user is obliged to provide the NIKSI, OBRT ZA TRGOVINU I USLUGE with the following information that he needs to establish a contractual relationship in order to provide a particular service and / or sell certain products. The customer-user can submit the data orally or in writing to the center of the NIKSI, OBRT ZA TRGOVINU I USLUGE, via e-mail sent to one of the e-mail addresses of the NIKSI, OBRT ZA TRGOVINU I USLUGE and via the website of the NIKSI, OBRT ZA TRGOVINU I USLUGE NATUREGODDESSGIFTBOX.COM.

From other publicly available sources of data on companies and physical persons in companies on internet portals, telephone directories that contain such data and other publicly available services only for the purposes for which they were initially collected.

Automatically by visiting NIKSI, OBRT ZA TRGOVINU I USLUGE internet (web) pages, applications and portal, which are data associated with network identifiers (Internet protocol addresses and cookie identifiers, such as Google Analytics to track user and / or customer interaction).

A cookie is a small data file that is stored on a computer or mobile device when you visit a particular website. Cookies are used to provide a better user experience to each user and/or customer, to store user and/or customer preferences, in order to make the website work more efficiently, as well as to monitor and test the use and traffic of the website NIKSI, OBRT ZA TRGOVINU I USLUGE.

By disabling and/or blocking the storage of cookies, the user and/or customer can still browse the website NIKSI, OBRT ZA TRGOVINU I USLUGE. However, it is likely that certain features and/or functionalities of the website will not be available to such users and/or customers, or that the time required to access certain features of the website will be longer than usual.

The network identifiers in question may leave traces which, in combination with other identifiers and information provided by Internet service providers, may be used to identify the user and/or customer.

The amount or scope of personal data that NIKSI, OBRT ZA TRGOVINU I USLUGE collects depends on the type of service that NIKSI, OBRT ZA TRGOVINU I USLUGE provides to its users and/or customers, as well as on the legal basis on which it collects data. NIKSI, OBRT ZA TRGOVINU I USLUGE constantly takes care of collecting only the necessary range of personal data that is necessary to achieve the legally established purpose for which the data is processed.

Data on potential users

NIKSI, OBRT ZA TRGOVINU I USLUGE also collects data on potential users and/or customers of its services and/or products. This information includes basic information (name and surname, e-mail address), but also the interests of potential Users and/or Customers who contact the association with the desire to be informed and/or offered certain products and services.

A cookie is a small data file that is stored on a computer or mobile device when you visit a particular website. Cookies are used to provide a better user experience to each user and/or customer, to store user and/or customer preferences, in order to make the website work more efficiently, as well as to monitor and test the use and traffic of the website NIKSI, OBRT ZA TRGOVINU I USLUGE.

By disabling and/or blocking the storage of cookies, the user and/or customer can still browse the website NIKSI, OBRT ZA TRGOVINU I USLUGE. However, it is likely that certain features and/or functionalities of the website will not be available to such users and/or customers, or that the time required to access certain features of the website will be longer than usual.

The network identifiers in question may leave traces which, in combination with other identifiers and information provided by Internet service providers, may be used to identify the user and/or customer.

The amount or scope of personal data that it NIKSI collects depends on the type of service that NIKSI, OBRT ZA TRGOVINU I USLUGE provides to its users and/or customers, as well as on the legal basis on which it collects data. NIKSI, OBRT ZA TRGOVINU I USLUGE constantly takes care of collecting only the necessary range of personal data that is necessary to achieve the legally established purpose for which the data is processed.

Types of personal data collected?

The data that the Customer – User most often provides are:

name and surname

address

personal identification number (OIB)

contact phone and/or mobile phone number

contact details of e-mail (e-mail address)

identity card data

bank account and card number data for the purpose of regulating the payment obligation

Where is personal data processed?

Personal data of Users – Customers NIKSI processes in the Republic of Croatia.

Where is the collected data stored?

Data is processed in such a way that all or part of the information about Customers – Users – Respondents is stored in the databases of the processing manager.

Obligations of the processing manager regarding the security of processing

TECHNICAL DATA PROTECTION

The processing manager implements technical and organizational measures to ensure an appropriate level of security.

The processing manager shall also take measures to ensure that any individual acting under the responsibility of the controller who has access to personal data does not process that data if this is not in accordance with the instructions of the processing manager.

Taking into account the nature, scope, context and purposes of processing, as well as risks of different levels of probability and severity for risks to the rights and freedoms of individuals, the Processing Manager implements appropriate technical and organizational measures in accordance with Security Policies to ensure and prove processing implemented in accordance with the General Regulation.

Purpose of data collection and further processing

NIKSI, OBRT ZA TRGOVINU I USLUGE collects and further processes personal data of users and/or customers for the purpose of concluding and executing contracts, making purchases or service interventions on equipment, delivery of ordered products, advice and assistance in using products, providing appropriate additional and/or extended product warranties, resolving complaints of users and/or customers and other actions related to the conclusion and execution of the contract in accordance with applicable regulations.

The processing of personal data of users and/or customers for the above purposes is a necessity and legal basis for concluding a contract, ie, in case the user and/or customer refuses to provide relevant data, the service will not be able to enter into a contract and/or take certain actions. with the execution of the concluded contract.

Organization of prize games

NIKSI, OBRT ZA TRGOVINU I USLUGE occasionally organizes prize games, so the data is used to notify about the prize won.

Direct marketing

Contact details of users and/or customers can be used to send promotional notices about products and services NIKSI if the Customer – User has given consent.

Time duration of personal data storage

Depending on the purpose and legal basis on which the personal data of users and/or customers are collected, NIKSI, OBRT ZA TRGOVINU I USLUGE is in some cases mandatory to keep personal data for a period of time prescribed by the relevant regulations or termination of the purpose for which they were collected. Upon the expiration of the legal deadline which obliges NIKSI, OBRT ZA TRGOVINU I USLUGE on the storage of certain personal data or the termination of the purpose, they are deleted.

In cases where the basis for data collection and processing is the consent of the user and/or customer, personal data is stored for 10 years.

Data processed with the consent of the user and/or customer may be deleted before the expiration of the period specified in this Policy, in the event that such deletion is requested by the user and/or customer or when the user and/or customer objects to such processing via the Internet. e-mail address: [email protected].

Ways of exercising rights

The customer can exercise his rights if he considers that there has been an irregularity in the processing of his personal data, via contact information or by e-mail [email protected]. Also, the user and / or the buyer has the right to lodge a complaint with the national supervisory authority.

Under what conditions and for what reason personal data is passed on to third parties

The personal data of the Customer-User NIKSI, OBRT ZA TRGOVINU I USLUGE forwards to third parties (including competent authorities) in the following cases:

to fulfill the legal obligations of NIKSI, OBRT ZA TRGOVINU I USLUGE

when such processing is necessary to protect the key interests of Customers – Users

for the purpose of fulfilling the contractual obligation, performing the work for the account of the Buyer – User

for which it is necessary to hire a third person – the processor manager

Processing of personal data in the context of employment

Personal data of employees may be collected, processed, used and delivered to third parties only if it is determined by law or if it is necessary for the exercise of rights and obligations arising from the employment relationship, or in connection with the employment relationship.

In order to exercise the rights and obligations arising from the employment relationship, the controller will collect, process, use and deliver to third parties only those personal data that are necessary for the stated purpose, and will provide such data only at the request of courts and other state or public bodies.