zm-logo

Privacy Policy

Contents:

Definitions used in this Policy

Data protection principles we follow

Your rights regarding your personal data

What personal data we collect about you

How we use your private data

Who else has access to your private data

How we protect your data

Information about cookies

Contact information

1. Definitions

Personal Data – any information relating to an identified or identifiable natural person.

Processing – any operation or set of operations performed on Personal Data or sets of personal data.

Data Subject – a natural person whose Personal Data is being processed.

Child – a natural person under the age of 16.

2. Data Protection Principles

We pledge to adhere to the following data protection principles:

Processing is lawful, fair, and transparent. Our processing activities have a lawful basis. We always consider your rights before processing personal data. We will provide you with information regarding the processing upon request.

Processing is limited to its purpose. Our processing activities align with the purpose for which the personal data was collected.

Processing is conducted with minimal data. We collect and process the minimum amount of your personal data required for any given purpose.

Processing is limited by a time interval. We will not store your personal data longer than necessary.

We will do our utmost to ensure the accuracy of the data.

We will do our utmost to ensure the integrity and confidentiality of the data.

3. Rights of the Data Subject

The Data Subject has the following rights:

Right to information – means you have the right to know whether your private data is being processed, what data is collected, where it is obtained from, and why and by whom it is processed.

Right to access – means you have the right to access the data collected about you and from you. This includes the right to request and obtain a copy of your collected personal data.

Right to rectification – means you have the right to request the rectification or erasure of your personal data that is inaccurate or incomplete.

Right to erasure – means that under certain circumstances, you can request the erasure of your private data from our records.

Right to restrict processing – means that if certain conditions are met, you have the right to restrict the processing of your personal data.

Right to object to processing – means that in certain cases, you have the right to object to the processing of your personal data, for example, in the case of direct marketing.

Right to object to automated processing – means you have the right to object to automated processing, including profiling, and not to be subject to a decision based solely on automated processing. You can exercise this right whenever there is an outcome of profiling that produces legal effects concerning you or significantly affects you.

Right to data portability – you have the right to obtain your personal data in a machine-readable format or, if feasible, request the direct transfer from one processor to another.

Right to lodge a complaint – in the event that we refuse your request under the right to access, we will provide you with the reason why. If you are not satisfied with how your request is handled, please contact us.

Right to the assistance of a supervisory authority – means you have the right to assistance from a supervisory authority and the right to other legal remedies, such as claiming damages.

Right to withdraw consent – you have the right to withdraw any consent given for the processing of personal data.

Are you obliged to provide us with personal data?

You are not obliged to do so. However, please note that in certain cases, if you withhold the requested data, Zagreb Montaža d.o.o. will not be able to enter into a contractual relationship with you or fulfil its legal and contractual obligations.

Period for which data will be stored

The personal data controller will keep your personal data only as long as necessary to fulfil its contractual or legal obligations or legitimate interest, except in the case of personal data processing based on consent, where processing ceases at the moment you withdraw your consent.

You can withdraw your consent at any time by sending a request:

Via email to: info@zagreb-montaza.hr

By post to: Zagreb Montaža d.o.o., Zagreb, Roberta Frangeša Mihanovića 9, for the attention of the Data Protection Officer.

Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If your personal data is no longer required to fulfil the aforementioned purposes, it will be destroyed, except when further retention is prescribed by law.

What are your rights related to the processing of personal data?

Depending on the legal basis of the processing, your rights may include the following:

To request access to personal data relating to you; specifically, you have the right to information regarding the scope of collected data, the purpose of processing, the category of personal data being processed, the recipients to whom the data is delivered, and the storage period;

To request the rectification of inaccurate or completion of incomplete personal data, in which case we are obliged to act upon your request without undue delay;

To object to the processing of personal data in the case of processing based on the legitimate interests of Zagreb Montaža d.o.o. or in the case of processing for direct marketing purposes;

To request the erasure of data when the purpose of processing has been fulfilled, when you withdraw consent as the sole basis for processing, when your interest in privacy protection overrides the legitimate interest of Zagreb Montaža d.o.o. for processing, when you object to the processing, and in the event of any unlawful processing. The right to erasure is not an absolute right and does not apply, for instance, in cases where processing is necessary to exercise the right to freedom of information and expression, to comply with legal obligations to which Zagreb Montaža d.o.o. is subject, or for the establishment, exercise, or defence of legal claims;

To restrict data processing, for example, when you contest the accuracy of the data, until we verify its accuracy;

To transfer data to another controller if the processing is based on consent or the execution of a contract to which you are a party, provided that the processing is carried out by automated means and is technically feasible;

To lodge a complaint with the national supervisory authority, namely the Croatian Personal Data Protection Agency (AZOP).

Requesting access to personal data relating to you or requesting the rectification of your personal data

If you wish to access your personal data or believe that an irregularity has occurred in the processing of personal data, please contact the Data Protection Officer.

Lodging an objection to the processing of personal data

If you believe that Zagreb Montaža d.o.o. does not have a legal basis to process your personal data, you can lodge an objection with the Data Protection Officer at any time. In this case, we will no longer process your personal data, nor will we be able to provide you with our services or maintain a business relationship with you.

KEY INFORMATION

Controller and Data Protection Officer

The personal data controller is Zagreb Montaža d.o.o., Zagreb, Roberta Frangeša Mihanovića 9.

The contact details of the Data Protection Officer, to whom you can send your inquiries, are:

Address: Zagreb, Roberta Frangeša Mihanovića 9, for the attention of the Data Protection Officer

Email address:

4. Data We Collect

Information you have provided to us: We store information so that you can comment or perform other activities on the website. This information includes, for example, your name and email address.

Information automatically collected about you: This includes information that is automatically stored via cookies or other session tools. For example, your IP address, browsing history, etc. This information is used to improve the user experience.

Publicly available information: We may collect information about you that is publicly available.

5. How We Use Your Personal Data

We use your personal data in order to: inform you about updates in the field of EU funds, improve your user experience, and fulfil legal or contractual obligations.

We process your personal data based on legitimate grounds and/or with your consent.

We process your personal data for the following purposes: to send newsletters, informational notifications, and promotional materials regarding benefits and current offers for informational purposes, as well as for other purposes.

We process your personal data to fulfil obligations arising from the law and/or utilise your personal data for options provided by law. We reserve the right to anonymise collected personal data and use such data. We will only use data outside the scope of this Policy when it is anonymised.

We may process your personal data for additional purposes, provided they are compatible with the original purpose for which the data was collected. To do this, we ensure that: the connection between the purpose, context, and nature of the personal data is suitable for further processing; further processing will in no way harm your interests; and appropriate safeguards for processing are always in place.

We will notify you of any further processing and its purpose.

6. Who Else Can Access Your Personal Data

We do not share your personal data with unknown parties.

We may disclose your personal data to third parties if you have given your consent or if there is another legal basis for doing so.

7. How We Protect Your Data

We do our utmost to keep your personal data secure. We use secure protocols for communication and data transfer (such as HTTPS). We employ anonymisation and pseudonymisation where appropriate. We monitor our systems for potential vulnerabilities and attacks.

Although we do our best, we cannot guarantee the absolute security of information. However, we pledge to notify the competent authorities in the event of a data breach. We will also notify you if there is a threat to your rights or interests. We will take all reasonable steps to prevent security breaches and assist the competent authorities should any breach occur.

8. Cookies and Other Technologies We Use

We use cookies and/or similar technologies to analyse user behaviour, administer the website, track users’ movements, and collect information about other users. This is done to personalise and improve the user experience.

A cookie is a small text document stored on your computer. Cookies store information that helps websites function. Only we have access to the cookies from our website. You can control your cookies at the browser level. Choosing to disable cookies may interfere with the use of certain functions. We use cookies for the following purposes:

Necessary cookies – these cookies are required for you to use important features on our website, such as logging in. These cookies do not collect any personal information.

Analytical cookies – we use these cookies to monitor the usage and performance of our website.

You can remove cookies stored on your computer through your browser settings. Alternatively, you can control third-party cookies using privacy enhancement platforms such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, please visit allaboutcookies.org.

We use Google Analytics to measure traffic on our website. Google has its own privacy policy, which you can read here. If you wish to opt out of tracking by Google Analytics, please visit the Google Analytics opt-out page.

The Disclaimer can be read here.