Privacy Policy

PRIVACY POLICY
This privacy policy provides information on the collection and processing of personal data through this website: www.grobnik.hr
CONTROLLER
AUTOMOTODROM GROBNIK d.o.o.,
Automotodrom 1, Čavle 51219
OIB:04061380249
Contact details: +385 51 259 222
DATA PROTECTION OFFICER
DPO: Feralis Group d.o.o. – Ines Krečak Data Protection Professional CIPP/E
– CIPP/E – Certified Information Privacy Professional/Europe
– European Association of Data Protection Professionals, member
– International Association of Privacy Professionals, Member
– European Federation of Data Protection Officers, representative for the Republic of Croatia
Contact: feralis@feralis.hr

DATA COLLECTED AND PROCESSED – PURPOSE AND LEGAL BASIS

We may collect personal data through this website for the following purposes:

1) sales of our services in the web shop,

2) responding to your inquiry/request,

3) implementation of your request and applications for published tenders,

4) for the better functioning of the features of the internet pages of this website and to enable a better user experience.

Categories of personal dataThe following categories of personal data can be collected through this website:- identification data (e.g. user’s name), – contact information (e.g. user’s e-mail),- payment data (e.g. payment card number),- other data (e.g. data you provide to us via messages)- information about the use of this website (cookies).

Legal basis for processing personal dataThis website uses the following lawful bases to collect personal data:

1) Execution of the contract/service: Data is processed to enable the execution of the requested service or to take measures before providing the requested service, based on your request (for example, selling our services in the web shop and responding to your inquiry/request). Data processing for the purpose of selling our services in the web shop and responding to the inquiry/request is necessary for the execution of the requested service. Therefore, the data collected for this purpose is considered necessary data. Please note that if you do not provide the necessary information, we will not be able to fulfill your request.

2) Legitimate interests: Data is processed on the basis of our legitimate interests or the legitimate interests of third parties, except when the interests, rights and freedoms of the data subject prevail over these interests (for example, video surveillance).

3) Consent: Data is processed on the basis of prior consent (for example, cookies). In order to improve the functionality of the website and provide a better user experience, we use a specific set of cookies. However, we only collect those cookies that you previously consent to. During the entire period of using the website, you have control over cookies and can turn them on or off according to your preferences. It is important to note that the withdrawal of consent to the collection of cookies does not affect the legality of data processing that has already been carried out up to the time of withdrawal of consent.

The collected data are not processed for other purposes.

LEGITIMATE INTEREST

In certain situations, we may process your personal data based on our legitimate interest. Then when we do the processing on that basis, based on your particular situation, you can send us an objection to such processing. We will not be able to limit or suspend the processing in the case when there are convincing legitimate reasons for such processing that exceed the interests, rights and freedoms of the data subject or when such processing is necessary for the establishment, realization or defense of claims. Processing we carry out based on our legitimate interest:

1. VIDEO SURVEILLANCEPurpose of processing: we conduct video surveillance for the purpose of protecting persons and people.  Record storage period: we keep videos for up to 48 hours. A longer storage period is also possible if they are evidence in court, administrative, arbitration or other proceedings.  Other recipients: we can deliver video recordings only upon request to competent authorities (police, court) when it is necessary to carry out an official procedure and cannot be delivered to other persons.

The collected data is not processed for any purpose.

RECIPIENTS OF PERSONAL DATA

Collected personal data can be forwarded for use by providers of IT and communication solutions and services who act as our processors. The aforementioned executors provide reasonable guarantees and have taken appropriate technical and organizational protection measures in order to adequately ensure data protection and conduct in accordance with the requirements of the General Regulation.  An agreement/agreement on the processing of personal data was concluded with such processors based on Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between managers and processors as a separate part of the contract. The aforementioned agreement/contract prescribes the handling of personal data in detail, therefore they are not able to process personal data without our order and pass them on to third parties. Personal data is not passed on to third parties for direct marketing purposes.

DATA STORAGE PERIODPersonal data collected through this website is processed until the purpose for which the data was collected is fulfilled. After the termination of the purpose, personal data are no longer processed, unless we are obliged to do so by legal regulations or the processing is based on our legitimate interest. In the case of processing based on legitimate interest, it is carried out as long as such interest exists, unless the user limits it or completely suspends it based on a complaint. We store data that we process on the basis of consent until the purpose of processing is fulfilled or until you withdraw your consent. Your privacy and trust are extremely important to us, which is why we make sure that your personal data is treated with care and responsibility.

DATA COLLECTED THROUGH SOCIAL NETWORKS

The pages and profiles we manage on social networks (Facebook, Instagram, etc.) are always under the correct and full name of the data controller. We only use the personal data about our contacts that we collect by using them in the case of responding to an inquiry or comment, and the data is not processed or stored for any other purpose.

PAYMENT BY CREDIT AND DEBIT CARDS

If you choose to pay by credit card among the offered payment options when making a purchase in our web shop, you will be redirected to the WSPay platform. WSPay is a virtual POS system that represents an independent online authorization and payment service with maximum security of online payment and authorization of credit and debit cards for online sales points. We do not have access to your card information. We only receive information from the WSPay system whether your purchase has been approved by the Cardholder or not.  In accordance with PCI DSS standards, WSPay protects the transfer of your data and your privacy, and therefore uses SSL certificate 256 bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection when entering and transferring data. WSPay does not process or use personal data for purposes other than for the purposes of performing the requested authorization and billing service.

 INTERNET COOKIES

1) COOKIES COLLECTED THROUGH THIS WEBSITE We may use necessary and non-intrusive cookies for the purpose of functioning of website features to collect anonymous data that does not contain personally identifiable information. Please note that we do not collect your consent for the use of necessary cookies. This is in accordance with Directive 2009/136/EC and the Electronic Communications Act, which stipulate that for cookies that are technically necessary for the communication between the user’s terminal equipment and the Internet site he is visiting or for providing services on the Internet at the user’s request do not require the user’s consent.

2) GENERAL TERMS

What are cookies?A cookie, also known as HTTP cookies, are small text files that websites store on the user’s device (such as a computer, mobile phone or tablet) when you visit a particular website. These cookies allow the website to remember the user’s actions and settings over time. When the user visits the same website again, cookies are sent back to the web server allowing the website to recognize the user and provide a personalized experience. What information can cookies store? Internet cookies can store different types of information related to the user and the way the user uses a particular website. This includes identification information, user preferences, shopping cart contents on e-commerce websites, user account login information, information about user activities on the website, user interests in personalizing content and ads, duration of visits (sessions), and data on user security and authentication. Cookies are a tool that allows websites to improve user experience and provide personalized services. What is the purpose of cookies?The purpose of cookies is to optimize and improve the user experience when visiting websites.Cookies by function: And Technical cookies(always active) – necessary for the website to function and cannot be turned off. These cookies do not store information that could identify you.II Functional cookies (can be turned off) – enable the website to provide improved functionality and personalization.  III Statistical cookies (can be turned off) – enable recording of visits and sources of traffic for the purpose of measuring and improving the efficiency of the Internet site.IV Marketing cookies (can be turned off) – serve to track users through websites and display targeted ads.

HOW TO DISABLE COOKIES

You can manage cookies that are not necessary on this website in the control window. By turning off cookies, the user decides whether to allow cookies to be stored on his computer. Additionally, you can accept or reject some or all cookies by adjusting your browser settings. Cookie settings can also be controlled and configured in the Internet browser. The following links provide information on how to change settings for some of the most commonly used Internet browsers:

• Chrome

• Firefox

• Internet Explorer 9

• Internet Explorer 7 i 8

• Opera

• Safari

ADDITIONAL INFORMATION ON DISABLED COOKIES

Some browsers allow you to browse the Internet in “anonymous” mode, limiting the amount of data placed on your computer and automatically deleting persistent cookies placed on your computer or mobile device when you end your browsing session. There are also many third-party applications that you can add to your browser to block or manage cookies. You can also delete cookies that were previously placed in your browser by selecting the option to delete browsing history and turning on the option to delete cookies. You can find more detailed information about cookies and adjusting your browser settings at the following links:

• http://www.allaboutcookies.org/

• http://www.youronlinechoices.eu/

• http://www.aboutads.info/choices/

SECURITY OF PERSONAL DATA PROCESSING

We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables effective application of data protection principles, reduction of the amount of data, scope of their processing, storage period and their availability. For this purpose, we have introduced appropriate technical and organizational protection measures that ensure a level of security that corresponds to the risks posed by data processing and the nature of the personal data being protected, bearing in mind the characteristics and costs of their introduction.   We regularly review processing that may pose a risk to the rights and freedoms of individuals and have taken adequate measures to protect personal data from accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, especially in cases where processing involves the transfer of personal data via networks, and from all other illegal forms of processing.

ACHIEVING RIGHTS

Right of accessAt any time, you can request confirmation of whether your personal data is being processed and detailed information about the processing, in particular about the purpose of the processing, about the type/categories of personal data being processed, including insight into your personal data, about the recipients or categories of recipients, and about the intended period in which personal data will be stored.  Right to rectificationWe guarantee the right to correction, and you can obtain the correction of incorrect and incomplete personal data without delay. Right to erasureYou have the right to request the deletion of your personal data. If the request is justified and if the law does not oblige us to store data, the data will be deleted without undue delay.  The right to restriction of processingYou have the right to request the restriction of the processing of your personal data in the cases provided for in the General Regulation. In particular, we emphasize that you can limit the processing of personal data based on legitimate interest as a lawful basis for processing. Right to withdraw consentYou have the right to withdraw your consent at any time. It is important to note that withdrawal of consent does not affect the legality of personal data processing carried out up to the moment of its withdrawal. The right to objectYou have the right to object to the processing of your personal data in all cases provided for in the General Regulation. We especially point out that you can raise an objection to processing based on legitimate interest as a legal basis for processing and limit or completely prohibit processing.

OBJECTION TO THE SUPERVISORY AUTHORITY

In the event that you believe that the processing has resulted in a violation of your personal data and a violation of the provisions of the General Regulation, you can submit a complaint to the supervisory authority:

Agency for the Protection of Personal Data

Selska street 136, Zagreb

CONTACT INFORMATION

For additional information about the processing of your personal data, access to data or in case you have a complaint or objection, you can contact us:

e-mail: feralis@feralis.hr

After identification, we deliver the answer in the usual electronic form, unless otherwise requested.

We try to process each of your inquiries within a month. If we are unable to provide a response within one month, we will inform you of the reasons for the delay and the time frame in which we are expected to respond (no longer than 2 months from the receipt of the inquiry).

OTHER INFORMATION

This privacy policy is regularly reviewed, supplemented and changed in order to always reflect the actual state of collection and processing of personal data through this website. Please check regularly for such changes. In the event of changes that may affect the rights of the data subject or significantly change the previous processing notification, especially in the case of a change in the purpose of processing, disclosure of data and transfer to third countries, the notification will be displayed in a pop-up window upon arrival at this website.

Last update: July/2024. years