1.1. PERSONAL DATA
Personal data are all information relating to an individual (i.e., data subject) whose identity has been established or can be established. Different information, which together can result in the identification of a particular person, also constitutes personal data.
1.2. DATA PROCESSING
Data processing is any process carried out with or without the aid of automated procedures or any such process involving personal data. The term is very broad and includes almost every data handling.
1.3. OTHER TERMS
Definitions of the terms Seller, Website, User and Customer are contained in the Conditions of Use and are also valid in this Privacy Policy.
This Privacy Policy will explain how THE PEARL OF PANNONIA collects, uses and manages your personal data contained on the Website and which is made available to THE PEARL OF PANNONIA by using the Website.
THE PEARL OF PANNONIA is committed to protecting and respecting your privacy. Read these policies carefully to understand why and how we collect your personal information and how it will be used.
2.1. PERSONAL DATA CONTROLLER
In regard to the personal data we collect, THE PEARL OF PANNONIA is the “controller”, i.e., the one who determines the needs for which and the means by which personal data are processed.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (Official Journal of the European Union L 119 , 4.5.2016, page 1, hereinafter: General Data Protection Regulation), which has been in full force since 25 May 2018 in the Republic of Croatia and all EU Member States, as well as the Law on Implementation of General Data Protection Regulation (Official Gazzete 42/18) or in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and European best practice, The Pearl of Pannonia Limited Liability Company for production and services, with its registered office in the Republic of Croatia, Nedelišće (Municipality of Nedelišće) Trg Republike 24, entered in the court register of the Commercial Court in Varaždin under the registration number of the entity (MBS): 070163690, personal identification number (OIB): 2097010 2715 (hereinafter: THE PEARL OF PANNONIA, Seller, we, us, etc.), as the controller for the processing of personal data of Users of its services and Customers, drafted the Privacy Policy.
2.2. PRINCIPLES AND APPLICATION OF THE PRIVACY POLICY
Our Privacy policy is based on the following principles of personal data processing: lawfulness, fairness and transparency, the principle of limited processing and reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of integrity and confidentiality, the principle of responsibility and accountability, trust and fair processing, the principle of processing in unnamed (anonymized) form.
The Privacy policy applies to all services offered by THE PEARL OF PANNONIA, and the aim of the policy is to inform Users and Customers in a clear and transparent manner about the processing of their personal data and their rights. Above all, Users and Customers can at any time contact THE PEARL OF PANNONIA with a request to amend and/or update the data relating to them, as well as with a request to comment on the purposes for which they want or do not want to their data to be processed.
THE PEARL OF PANNONIA as a provider of the Website is committed to protecting the privacy of personal data.
If you wish to contact us regarding these policies or about your personal data, please use the following contact information:
The Pearl of Pannonia d.o.o.
HR-40305 Nedelišće
Trg Republike 24
OIB: 20970102715
Or the e-mail address: info@the-pearl-of-pannonia.com
Typical categories of data we collect from the User and/or Customer are the following: name, billing address, delivery address, financial information including information about credit, debit cards or other payment information that you provide when filling out forms on the Website or when you communicate with us by phone or e-mail.
We collect your personal information for:
We may use your personal information in several different ways, mainly to perform our legal and other obligations to you, but sometimes to improve your experience of using the Website and security reasons.
The purposes for which we use your data are described in these rules, and if your data is processed for other purposes, you will be notified before carrying out such (new) processing.
We collect your personal data when necessary for meeting your consumer needs or for the purposes of our business needs:
We collect the above listed specific categories of your personal data either based on consent that was shown to you when you arrived on the Website by the pop-up window, or it is based on legitimate interest. The latter for example in cases of cookies that are necessary for the functioning of the Website or when we send you some interesting information and/or special offers after you have previously made a purchase from us or in order to fulfill our obligations arising from the applicable regulations of the Republic of Croatia.
If the processing is based on your consent, you have the right to withdraw your consent at any time. Controller must be notified of the withdrawal of the consent by e-mail at info@the-pearl-of-pannonia.com or to the address The Pearl of Pannonia d.o.o., Trg Republike 24, HR-40305 Nedelišće. Such withdrawal will not affect the legality of processing on the basis of consent before its withdrawal.
Please pay attention to the mandatory volume of data we ask you to provide (marked *), because in case the Customer or User does not provide the required information which are specified as mandatory in order to perform an activity requested or expected by them, unfortunately they will not be allowed to enter it. Without the required data that activity will not be technically possible to carry out.
We do not collect data on children. If we find out that such information has been transferred to us without the consent of the parents or guardians of children under the age of 16, we will remove it without delay. Minors under the age of 16 may not use the Website for the purpose of registering and/or ordering products.
4.1. SUMMARY
We mainly collect your personal data directly from you either in order for you to enter into a contract with us, to take action on your request, when you order specific products or services or when you fill out a specific form or when you want to receive our newsletter or be our registered User.
We do not use your personal data for marketing purposes except in case you tell us that you agree with that. If you want us to send you details about our products, services, offers and promotions, please subscribe to that when you give your consent when you subscribe to our newsletter.
We treat your personal data as confidential data, and it is properly protected by THE PEARL OF PANNONIA and/or our trusted partners.
4.2. USER ACCOUNT PASSWORD
THE PEARL OF PANNONIA recommends to all Customers and Users of the Website to take care of their login password of their User account. We recommend that when choosing a combination of characters for your password that you be sure to combine uppercase and lowercase letters, numbers and special characters. Use a password of at least nine characters. We recommend that you periodically change your password (at least once a year).
THE PEARL OF PANNONIA at the time of payment on the Website as a condition of payment for products and services by credit or debit cards, asks from Customers information for the activation of the payment process. When paying through contracted card processing and payment service providers (credit or debit) cards, THE PEARL OF PANNONIA contractors as a data processor or independent data controllers, your data will be shared.
For the mentioned purpose, your personal data as a Customer (e.g., Customer name and surname, Customer address, Customer card information) is temporarily stored with the processing and billing service provider (MasterCard, Visa, Maestro, PayPal or KEKS Pay application, etc.), which stores this data in accordance with the highest level of protection and safe keeping of confidential data. The Customer activates the payment and card processing mechanism by clicking the button ”Continue to payment”.
PAYMENT VIA PAYPAL APPLICATION
When you use the payment option via the PayPal application, your personal data is also processed (e.g., name, surname, account number, transaction amount). THE PEARL OF PANNONIA does not have access to Customer card information and PayPal is considered the controller. The data forwarded to PayPal are name, surname, e-mail address, IP address, telephone / mobile number, purchase data. PayPal processes data in order to carry out the transaction, verify the identity of the Customer, prevent fraud and exchange data with credit agencies in accordance with their privacy policy:
https://www.paypal.com/en/webapps/mpp/ua/privacy-full
PAYMENT VIA KEKS PAY APPLICATION
When you use the payment option via the KEKS Pay application, your personal data is also processed (e.g., name, surname, account number, transaction amount). In that case, the head of the processing of your personal data is ERSTE&STEIERMÄRKISCHE BANK d.d. The provider of this service is considered an independent manager of the processing of personal data. You can see their privacy policy at:
https://www.kekspay.hr/privatnost-i-dokumenti/
Data processing during payment is necessary in order to perform all actions that precede the purchase or conclusion of a contract with the data controller. When we talk about the legal basis of data processing related to certain types of payments, or legal entities that provide these services, payment data such as name, surname, code, amount, account number or other transaction codes are shared with the card company or bank or third party through which payment is made, all at the request of the data subject who independently chooses the method of payment.
THE PEARL OF PANNONIA does not at any time access, collect nor process personal data entered in for the purpose of card processing and payment.
THE PEARL OF PANNONIA cautions Customers to keep data listed on the card safe so that this data would not be available to third parties and so that it would not be misused.
We store the personal data we collect about you in a secure environment. Your personal data is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual. The collected data is in electronic form and protected by an SSL certificate that encrypts the data and thus ensures that communication between the Customer’s computer or the User and THE PEARL OF PANNONIA takes place via a secure protocol. THE PEARL OF PANNONIA takes data protection seriously and takes various precautions to protect personal data.
The processed data is stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers located in the EU.
THE PEARL OF PANNONIA will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons. All authorized persons sign a declaration of confidentiality.
The data collected for the purposes specified in these policies will be stored only for as long as it is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than THE PEARL OF PANNONIA reasonably considers necessary to achieve the purpose for which it was collected or processed. THE PEARL OF PANNONIA will keep certain personal data for a period of time prescribed by law or a regulation that obliges THE PEARL OF PANNONIA to keep it.
THE PEARL OF PANNONIA will not retain your personal data for longer than the period for which the data is needed to fulfill the purpose of their use, and for a maximum period of 3 years, except in exceptional cases where the law prescribes a longer retention period (for example, data related to unilateral termination of contracts and consumer complaints will be kept for 1 year, data related to the exercise of your privacy rights will be kept permanently, data related to prize games will be kept for 5 years, while invoice data will be kept for 11 years).
If you have given us consent (for example, you have subscribed to our newsletter, selected a certain category of cookies to use), we will process your personal data until the consent is withdrawn. If you make a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
In addition to all the above, it is important to point out the following; if judicial, administrative or out-of-court proceedings are instituted, personal data may be stored until the end of such proceedings, including a possible period for declaring remedies.
You can find out more about data retention periods by contacting the personal data controller.
Privacy protection is extremely important to us. Therefore, we will never share your personal data with third parties except for the purposes described in this policy. We will always inform you about the sharing and transfer of data.
THE PEARL OF PANNONIA collaborates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers that are located in the EU or in a country that provides an adequate level of protection in accordance with EU law.
In some cases, our partners that provide services on behalf of or for THE PEARL OF PANNONIA may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to treat your data by using special security measures in accordance with the regulations in force in the Member States of the European Union. In the event of a transfer of data to the United States, we will ask for your permission in view of the consequences of the “Schrems II” judgment and declaring the Privacy Shield invalid. Also, if our contract partner is based in the US, we will review existing contracts and check the security standards that our partner guarantees to ensure the protection of all our subjects with the latest standards approved and suggested by the relevant institutions.
The purposes in which we share information with our trusted partners are, for example, marketing, maintenance of the Website, advertising, payment processing, delivery and other services in and outside of the store. These service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your information and to consider it a business secret.
Once a year, we audit all our partners to make sure that the protection of your personal data is still at the required level and that it complies with applicable regulations.
Please note that you have the right to request the following from THE PEARL OF PANNONIA at any time:
To exercise any of the above rights, please use the contact information provided at the beginning of the Privacy Policy.
If you believe that your rights are not being respected, you can file a formal complaint to Croatian Personal Data Protection Agency: https://azop.hr/data-subject-rights/
THE PEARL OF PANNONIA would like to send you information about our activities and news that you may be interested in. Please note that you may opt out of receiving them at any time by exercising your rights set forth in these policies. To subscribe to the newsletter THE PEARL OF PANNONIA collects and processes your e-mail address.
To maintain the Website and ensure its functionality, THE PEARL OF PANNONIA uses a technology commonly known as “cookies”.
A cookie is a small text file that we send to your computer and can be accessed later. They can be temporary or permanent. Thanks to cookies, you can easily search our site. Cookies show us what interests you and other visitors to our Website, which helps us to improve it.
You can find more information about cookies in the Cookie Policy.
This Privacy Policy applies only to the use of data collected by THE PEARL OF PANNONIA from Users (data subjects). Other websites that can be accessed through the Website have their own statements of confidentiality and data collection and the ways in which they are used and published.
THE PEARL OF PANNONIA is not responsible for the ways and conditions of work of third parties.
THE PEARL OF PANNONIA collects and processes personal data through User interactions on social networks such as Facebook, Instagram and YouTube. THE PEARL OF PANNONIA or responsible persons appointed by THE PEARL OF PANNONIA have access to messages and/or posts on the mentioned social networks, however personal data collected through them, especially those contained in the messages, THE PEARL OF PANNONIA does not store and further process except for purposes specified in these Rules.
THE PEARL OF PANNONIA uses a business profile using the services of the companies Meta (Facebook, Instagram and WhatsApp) and Google (YouTube). You can view their Privacy Policy and Privacy Notice as well as the way they use your personal data at:
META
https://www.facebook.com/privacy/policy
https://policies.google.com/privacy
In case you have questions regarding the collection and processing of your personal data by Meta or Google, or you want to exercise any of your rights guaranteed by the General Data Protection Regulation, contact:
META:
Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
Contact of the Data Protection Officer:
https://help.meta.com/support/privacy
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Meta, the Irish Data Protection Commission or the Croatian Personal Data Protection Agency.
GOOGLE:
Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Irska
Contact of the Data Protection Officer:
https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Google, the Irish Data Protection Commission or the Croatian Personal Data Protection Agency.
You can also opt out of the collection and processing of personal data by Google Analytics by installing the necessary add-on to your internet browser, which you can download at:
https://tools.google.com/dlpage/gaoptout
THE PEARL OF PANNONIA reserves the right to change the Privacy Policy at any time without prior notice to the User or Customer. Accordingly, THE PEARL OF PANNONIA invites Users and Customers to periodically review the Privacy Policy in the event of such changes. The Privacy Policy is effective upon posting on the Website.
If the User, i.e., the Customer in accordance with the mentioned changes continues to use the Website, it will be assumed that he is familiar with and agrees with the above and that he accepts them as such.
If the User or the Customer does not agree and does not accept the Privacy Policy, then he has no right to use the Seller’s Website for the purpose of purchasing products and/or services or to obtain information about them.