Processing of personal data
PAVETA d.o.o., in carrying out its activities, collects and processes personal data of website users, hereinafter referred to as Service Users, respecting all relevant laws and regulations.
In order to provide you with the best experience when using our sites, we use technologies such as cookies that store and/or access device information. By accepting these technologies, or by giving your consent to their use, you allow the processing of data such as your browser behavior or unique IDs on this site. Refusing or withdrawing consent may negatively affect certain functionalities or features of the website when using it.
Personal data processing manager
The service provider is the controller of personal data processing in accordance with the law and regulations on personal data protection.
The service provider, as the controller of personal data, determines the purpose and means of personal data processing and is responsible for the storage and use of personal data in paper and/or electronic form.
The service provider may also be a personal data processor in its business operations if it processes personal data in accordance with the written instructions of the personal data processor.
Officials for the protection of personal data
The service provider has appointed a personal data protection officer in accordance with legal and regulatory requirements, whom you can contact regarding all issues related to the processing of personal data or the exercise of your rights to the protection of personal data.
Contact: marko@paveta.hr
Personal data we collect
The personal data collected depends on: the type of service provided, users and clients, the user’s intention to use the services, the type of contract concluded with clients, as well as the intention of the Service User to exercise their rights based on legal and regulatory provisions on the protection of personal data.
Your data is not used for other purposes, nor is it transferred to a third party, unless the law requires otherwise, and it will be deleted as soon as it is no longer needed. Although no online service is 100% secure, we make every effort to protect your information from unauthorized access, use, alteration or destruction and take reasonable measures to do so.
We use appropriate business systems and procedures to protect the personal information you provide to us. We also use security procedures and technical and physical restrictions on access to and use of personal information on our servers.
In the event of potential collaboration with external collaborators on certain projects, the Service Provider may disclose information about you without which the entire process is not feasible for the external collaborator. External collaborators must comply with the Website’s Data Privacy Policy and specific work parameters as agreed upon in the cooperation agreement.
Remark
In case of legal obligation: where required by law or necessary for the prevention, detection or punishment of criminal offences and fraud, your personal data will be shared with competent authorities. We may disclose your data in response to a court order or other legitimate request by the government.
Personal data that is primarily collected during the service provision process, and without which it is not possible to perform the service, includes at least:
- basic personal information (name and/or surname)
- basic contact information (e-mail address)
- data related to the use of the website, for example when using the contact form
- data necessary for concluding a contract, offer or invoice
- other personal data necessary for the exercise of the client’s rights based on legal provisions on consumer protection.
Collection for the purpose of sales relationship
If the Service Provider is required by relevant legal regulations, for certain reasons, it will additionally request the Service User’s express consent.
The reasons for processing personal data for the purpose of concluding and fulfilling contractual obligations are:
- providing a service
- sales and marketing activities of the Service Provider
- administration of the contractual relationship, invoices, offers and calendar of appointments
- management and receipt of complaints, grievances and claims
- collection procedure or forced collection of debts.
The reasons why your personal data is processed based on legitimate business interests are:
- notification of changes related to the terms of cooperation
- prevention and detection of fraud.
Remark
For all other activities not covered by the above reasons, the Service Provider will request additional consent. The Service User has the right to withdraw the given consent at any time.
Collection and use of personal data
The service provider takes technical and organizational measures to ensure that the collected personal data is processed only in a manner consistent with the stated purpose.
If necessary for the purpose of carrying out our business activities, access to personal data will be provided to third parties, namely: state bodies and public authorities that have the right to access personal data for the purpose of implementing legal obligations; lawyers, service providers, printers, financial institutions and other business partners.
Everyone, except state bodies and public authorities, processes personal data exclusively according to the instructions of the Service Provider.
Processing of personal data
User personal data will be processed within the European Economic Area (EEA) by the processors listed in the Access to Personal Data section, whose responsibility and obligation to protect personal data and maintain its confidentiality is defined by the contractual relationship and in accordance with all technical and organizational measures and legal regulations governing data protection.
Your personal data collected by the Service Provider for the purposes specified in the chapter Collection and use of personal data will not be available to anyone who is not authorized to do so by the Service Provider.
Exercising rights
When legally required, the Service User has the right to information about the processing of his/her personal data; to withdraw his/her consent at any time, if we process personal data with the given consent; to correct or supplement personal data so that it is always accurate; to delete personal data when it is no longer necessary for the above purposes; to file a complaint with the Service Provider or the competent state body.
The service provider provides all interested parties with communication channels to exercise their rights related to the protection of personal data by requesting:
- personally
- via email at marko@paveta.hr
Remark
Regardless of the chosen communication channel, the request must be submitted in person and in a way that allows the Service Provider to identify the applicant.
Right to complain to the supervisory authority
In addition to the complaint about the processing of personal data submitted to the Service Provider, a complaint about the processing of personal data can also be submitted to the Personal Data Protection Agency, Martićeva 14, Zagreb, 00385 (0)1 4609 999, azop@azop.hr , www.azop.hr
Personal data storage
The period of time for which we retain users’ personal data depends on the purpose for which we process it:
- Data collected solely for the purpose of providing sales transactions or providing other services is retained for 12 months from the date of the last transaction in which it was used
- Data collected for processing based on a legal basis are kept in accordance with the time limits set out in the relevant law
Updating information on personal data processing
The Service Provider regularly revises and updates the Information on the Processing of Personal Data, in accordance with changes in its own business processes or based on legal and regulatory obligations. The current version of the Information on the Processing of Personal Data is available on the website vtm.hr. If there are significant changes that significantly affect the processing of personal data, we will publish the information on the website without delay and inform you directly.
Cookies and tracking of internet activity
A cookie is a text file that the website that the Service User visits saves on his device (computer, tablet, smartphone). The Service Provider uses cookies to facilitate and improve visitors’ access to the functions provided by the website.
You can find out more about cookies at the following link: https://paveta.hr/en/privacy-policy/
For communication to exercise rights related to the protection of personal data, it is necessary to use the communication channels defined in the chapter “Exercise of rights” so that each request is registered and the user as the initiator is identified.
