Rules on personal data protection on websites

We emphasize that when you visit this website, your personal information will remain confidential, unless you want to make a voluntarily disclosure. We only collect personal information that you voluntarily provide to us, and only for the purposes outlined in these Rules. When collecting personal data, we are committed to comply with the provisions of positive regulations on personal data protection.

The above-mentioned rules describe what type of personal data we may collect from you and for what purposes we process your personal data, as well as what are your rights regarding that processing. Please read them carefully before continuing to use the website. If you do not agree to these terms and conditions, please do not use this website.

Processing of your personal data

“Personal Data” means any information relating to an identified or identifiable natural person („data subject”).

We will collect personal information in compliance with applicable laws, so that we could, for example, send you e-mail newsletters and updates, include you in our contests, giveaways and surveys, send you our publications, brochures and other promotional material or answer to your questions, remarks and comments.

We will process your personal data only with your consent. In certain cases, the collection of your personal information may be necessary for the proper execution of the contract between you and Cresanka d.d., for example when you shop our products or services online.

We may process the following categories of data about you:

1. Contact and identification data required when you shop our products or services online;
2. Purchase history from your online shopping, such as products or services you purchased, invoice amount, payment method, purchase frequency;
3. Data and information collected from users’ online interaction with the website.

We will not knowingly collect, use or disclose personal data from a minor (within reasonable limits, if it is possible for us to detect the age of the user), without prior written consent of the parent or legal guardian. If you are a minor, please do not provide us with any personal data (first name, last name, address, telephone number, e-mail address, or other identifying information), because we will refuse to process such information. If despite this, the contact should be made at the request of a minor, and in cases when the transfer of personal data of minors takes place, Cresanka d.d. does not accept any claim relating to damages of a material or non-material nature that could arise from processing such information.

Purpose(s) of processing your personal data

Cresanka d.d. will process the personal data that you have provided to us for the following purposes:

1. To process purchase orders placed online;
2. To forward commercial communications via electronic mail, mobile telephony or traditional mail (within the limits of your consent);
3. To include you in polls, questionnaires, contests and giveaways organized by Cresanka d.d.;
4. To answer to your questions or your tips, comments, complaints, etc.;
5. To create different reports/statistics about the use of the website and offered services
6. To settle any dispute or complaint relating to or arising from the activities of Cresanka d.d.

Sharing your personal data with third-parties

We do not sell, transfer or disclose information that we collect on our websites to anyone outside Cresanka d.d. without your consent, except if processing (1) is prescribed by law and is necessary to comply with our legal obligations, (2) is necessary to protect your life or physical integrity, and you are incapable of giving consent, (3) is necessary for the fulfilment of the tasks carried out in the public interest, (4) if you have disclosed that data yourself, and (5) is necessary for the purposes of our legitimate interests. Your personal information will be stored only for as long as is necessary and for the purposes specified in this notice.

Cresanka d.d. may disclose some or all of your personal information to the following recipients:

1. To persons authorized to process personal data on behalf of and for the account of Cresanka d.d., or to partners that provide support and maintenance services on this website (for example, website designers and developers, partners or service providers that can respond promptly to your questions, etc.).
2. To legal successor (s) in case of changes in legal status due to divisions, mergers, restructuring, or other transfer of control in the company.
3. To other recipients to whom Cresanka d.d. is obliged or authorized to disclose personal information of individuals according to applicable regulations.

Secure credit card transactions

Cresanka d.d. is committed to implement the highest standard of data security to protect customers’ interest and to prevent any misuse of information. We sell our products or services available online using PayWay online payment solution provided by T-com.
The confidentiality of your data is protected and secured through SSL encryption. Payment pages via Internet are secured by Secure Socket Layer (SSL) Protocol with 128-bit data encryption. SSL encryption is the process of encoding data in order to prevent unauthorized access during transmission of data. This enables a secure data transfer and prevents unauthorized data access during the communication between the user’s computer and T-com service, and vice versa. PayWay service and financial institutions (credit card companies) exchange information using a virtual private network (VPN), which is protected from unauthorized access. Credit card numbers are not stored and therefore not accessible to unauthorized persons. Cresanka d.d. cannot be held responsible for misuses which can not be identified as a result of technical and security breaches of the web shop system or as omission of employees of Cresanka d.d.

E-mail messages

When you send us an email (by sending an email message with question, comment, complaint, advice or similar, or filling in the contact form on a website) with personal information that may in some way identify you, we will use this information only to fulfill your request. Furthermore, we may forward your email address, as well as the message/request you sent us, to other partners who will be able to best answer to your question.

All employees of Cresanka d.d. have a duty to ensure compliance with the principles of Data protection rules.

Surveys, questionnaires and competitions

We periodically administer surveys and questionnaires on our websites. Data collected for that purpose are used only for internal purposes of Cresanka d.d.

Data subject rights

Consent to the processing of personal data is not obligatory, but your refusal to give consent to process personal data as stated above, may make it impossible to use all or some of the contents offered by the website, or prevent to receive information on products or services offered by Cresanka d.d.

By sending personal data to Cresanka d.d. you do not waive your rights guaranteed by positive regulations of the Republic of Croatia that protect personal data, and in particular the right to request a rectification or erasure of your personal data if they are not complete, correct or updated or their processing has not been made in accordance with the above mentioned provisions.

Whereas the processing of your personal data is based exclusively on your consent, you have a number of rights, including:

a) Right to access: the data subject whose data are being processed have the right to obtain information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored and other rights.
b) Right to rectification: the data subject shall have the right to obtain the rectification of inaccurate personal data or to have incomplete personal data completed.
c) Right to erasure: in certain circumstances, the data subject shall have the right to obtain the erasure of personal data concerning him.
d) Right to withdrawal: the data subject shall have the right to withdraw his or her consent at any time.
e) Right to lodge a complaint with a supervisory authority: If you believe that your rights have been violated, you have the right to lodge a complaint to the Agency for the protection of personal data (AZOP).

Depending on the request of users/data subjects, Cresanka undertakes to:

1. Confirm the user as to whether or not personal data concerning him or her are being processed.
2. Rectify or delete the personal data concerning him or her free of charge and without undue delay.
3. Restrict or stop the processing of personal data relating to him or her.