Privacy policy
PRIVACY POLICY
ABOUT PRIVACY POLICY
We guarantee the security of all your data.
GJULAJ COMERCE is committed to protecting and respecting your privacy. Read this policy carefully to understand why and how we collect your personal information and how it will be used. With regard to the personal data we collect, GJULAJ COMERCE is the "controller", i.e. the one that determines the needs for which and the means by which personal data are processed.
GJULAJ COMERCE as the provider of the website www.dodirnik.com is committed to protecting the privacy of personal data.
This Privacy Policy (the "Policy") explains how GJULAJ COMERCE collects, uses and manages your personal information contained on the website and which is available to GJULAJ COMERCEu using the website: https://www.dodirnik.com/
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: The General Data Protection Regulation), which is in full application from 25 May 2018 in the Republic of Croatia and all Member States of the European Union, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), i.e. in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union and the best European practice, company GJULAJ COMERCE limited liability company for trade and services, with its registered office in the Republic of Croatia, Zagreb 10 000, Remetski kamenjak 1b, registered in the court register of the Commercial Court in Zagreb under the registration number of the subject of registration (MBS): MBS080089275, personal identification number (OIB): 79715381656 (hereinafter: GJULAJ COMERCE), as the personal data processing manager of users of its services and customers, It has created a privacy policy.
The privacy policy applies to all services offered by GJULAJ COMERCE, where the aim of the rules is to inform users and/or customers in a clear and transparent way about the processing operations of their personal data and their rights. First of all, users and/or customers can at any time contact GJULAJ COMERCE with a request to amend or update and/or update the data relating to them, as well as with a request to comment on the purposes for which they want or do not want their data to be processed.
The Privacy Policy is based on the following principles of personal data processing: the principle of lawfulness, transparency and best practices, the principle of limited processing and the reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of data integrity and confidentiality, the principle of responsibility, the principle of trust and fair processing, the principle of opportunity (processing purposes), the principle of processing in an unnamed (anonymized) form.
If you would like to contact us about this policy or your personal information, please use the following contact details:
GJULAJ COMERCE d.o.o.
Remetski kamenjak 1b, Zagreb
OIB: 79715381656
You can reach the Data Protection Officer at: info@dodirnik.com
How and when do we collect your personal data?
We collect your personal data when it is necessary to meet your consumer needs or for the purposes of our business:
when creating and managing a user account (registration) GJULAJ COMERCE will request the provision of certain information (personal data) such as name, surname, e-mail address, zip code, place, address, telephone number, date of birth, username and password, name and surname of the person for alternative delivery address, postal code, address and city for delivery to the alternative address and contact phone at the alternative delivery address at the time you access the site dodirnik.com we will collect your IP address, which is also considered personal data, the buyer or user of our site by entering his personal data after registration, and in the case of purchase concludes a contractual relationship that is the basis for the purchase of products and the order of services at the customer's choice at the dodirnik.com. The processing of your personal data in the latter case is necessary for the performance of a contract to which you as a customer or user are a party or in order to take action at the request of the data subject before entering into a contract. You can also shop at www.dodirnik.com without being our registered user, but we certainly need information about your name, surname, address (place of residence), country, phone number, e-mail address, payment method (IBAN), delivery address, when filling out the form for receiving notifications (newsletter) about our products and actions, as a processing manager, we will ask you to enter information about yourself (personal data) such as e-mail address, name, surname and phone number (the latter three types of data are marked as optional). The legal basis for the processing of your data is consent. Thus, the user who applies to receive notifications about our products and actions by entering his data on the site dodirnik.com gives consent to the processing of his personal data. The user can withdraw the consent at any time by notifying the e-mail address of the Personal Data Protection Officer info@dodirnik.com, when using the Website dodirnik.com we collect other types of data ("LOG Files") such as the date and time of access to the site, information about the hardware, software or internet browser you are using, as well as about your computer's operating system and application version and your language settings. We may collect information about clicks and your access to the site www.dodirnik.com, when you purchase our product, and for the purpose of performing the contract, we will share information about your name, surname and delivery address with our partners who perform delivery services on our behalf and on our account, when you contact customer service and ask us for help or ask us a question in order to exercise any of your rights guaranteed by applicable regulations, when you contact us through social networks, we collect the information you left available to us when making a query or request, when you request a return of the product or you want to unilaterally terminate the concluded contract, we collect your name, surname, personal identification number, address, account information and the amount of the purchase, all depending on the chosen payment method, when you participate in our sweepstakes, we will process data depending on the type of prize draw, which we will further inform you about in the rules of the prize draw. Data that can be processed are, for example, name, address for sending prizes, when you complete a satisfaction survey, we process data such as your IP address, when you evaluate our branches to improve the user experience (we collect the following information: first name, last name, nickname, e-mail, purchase experience), when you make us any inquiry related to our offer, we will process your contacts and/or other data that you provide to us when sending the inquiry, if you wish to send an open job application, we will process information such as your name, surname, age, vocation, occupation, work experience, contact phone and other information contained in your open application.
GJULAJ COMERCE recommends all customers or users of the site to take care of their input password for the user account. We recommend that you combine uppercase and lowercase letters and numbers when choosing a combination of password characters. Use a password of at least six characters. We recommend changing the password periodically (at least once a year).
We collect the above-mentioned categories of your personal data either on the basis of the consent shown to you when you arrive at the www.dodirnik.com via a pop-up window, or on the basis of legitimate interest (for example, in cases where cookies are necessary for the functioning of the www.dodirnik.com or when we already send you, as our customer, some interesting notifications or / and offers of actions) or in order to fulfill our obligations arising from the applicable regulations of the Republic of Croatia.
If the processing is based on your consent, you have the right to withdraw your consent at any time. It is necessary to notify the controller about the withdrawal of consent by e-mail: info@dodirnik.com Such withdrawal will not affect the lawfulness of processing on the basis of consent before its withdrawal.
Please pay attention to the mandatory volume of data we are looking for you (marked *) because in the event that the customer or user does not provide the requested information that is determined as mandatory to perform the requested or expected activity for you, unfortunately, you will not be allowed to engage in the same, without the requested data, the activity will not be technically feasible.
Processing of personal data in the payment process
GJULAJ COMERCE at the time of payment on the site www.dodirnik.com as a condition of payment of products and services by credit or debit cards asks the customer for the activation of the payment process. When paying through contracted processing and billing service providers (credit or debit) cards, contractual partners GJULAJ COMERCE as a Processor or Independent Personal Data Processing Managers, your data will be shared.
For the above purpose, your personal data as a customer (e.g., the name and surname of the customer, the address of the customer, data from the customer's card) are temporarily stored with the provider of processing and billing services (MasterCard, American, Diners Discover, Revolut, Keks Pay application, etc.), which stores this data in accordance with the highest level of protection and storage of confidential data. The buyer activates the process of processing and charging cards by confirming (clicking) on the link "Continue to pay".
When you use the payment option through PayPal system, your personal data (e.g., first name, last name, account number, transaction amount) is also processed. HEDONIST does not have access to customer card information and PayPal is considered the controller. The data that is forwarded to the PayPal are name, surname, e-mail address, IP address, phone/mobile phone number, purchase information. PayPal processes data for the purpose of conducting the transaction, verifying the identity of the customer, preventing fraud and exchanging data with credit agencies in accordance with its privacy policy.
Data processing when making payments is necessary in order to perform all actions that precede the purchase or conclusion of a contract with the controller. When we talk about the legal basis of data processing related to certain types of payments or legal entities that provide these services, payment data such as name, surname, code, amount, account number or other transaction codes are shared with the credit card company or bank or third party through which the payment is made, all at the request of the respondent who independently chooses the method of payment.
GJULAJ COMERCE does not at any time dispose of, collect or process personal data entered for the purpose of processing and charging cards.
GJULAJ COMERCE warns customers to take care of the data provided on the card so that this data is not available to third parties and is not misused.
So, to summarize all of the above, we generally collect your personal data directly from you either to enter into a contract with us, to perform an action at your request, when you order certain products or services or fill out a specific form or when you want to receive our newsletter and be our registered user.
We do not use your personal data for marketing purposes unless you tell us that you agree to do so. If you want us to send you details about our products, services, offers and promotions, please subscribe to this by giving us your consent when filling out the web form.
We treat your personal data as confidential data and are properly protected by GJULAJ COMERCE and/or our trusted partners.
What data and for what purpose do we collect directly from you?
Typical categories of information we collect from users are as follows: name, payment address, shipping address, financial information including credit, debit card or other payment information you provide when filling out forms on websites or when you communicate with us by phone or email.
We collect your personal data to:
the performance of a service, fulfillment of a contract or other means of ensuring the provision of the requested service
use of all services on the website www.dodirnik.com
responding to your inquiry as effectively as possible and processing your requests
statistical data processing
sending materials, offers and contacts
improving the quality of content, functionality and services.
What rights of privacy do you have?
Please note that at any time you have the right to request from GJULAJ COMERCE the following:
- to allow you access to your personal data
GJULAJ COMERCE you can ask what personal data you use, and you can also ask for access to this personal data. You have the right to know the purpose of the processing, which categories of your personal data we hold, the bodies or categories of bodies with whom we share your personal data, the period of data retention, as well as the source of the data in the case where the data is indirectly collected.
You can contact us if you would like a copy of some or all of the personal data we hold about you.
- request correction of erroneous data
We want your personal information to be accurate and up to date. You may ask us to correct or remove information that you think is inaccurate or outdated.
- request the deletion of personal data
You can ask GJULAJ COMERCE to stop processing or even request the deletion of your personal data. If we need your personal data to perform a contractual obligation towards you, GJULAJ COMERCE may cease to be capable of performing such contractual obligations. Also, if your personal data is necessary in order to fulfill certain legal obligations (e.g. tax obligations), your request may not be able to be fulfilled.
- Restricting access to your data (to us and/or third parties) in certain processes or entirely
If you wish to contest the accuracy of the data, or if we no longer need the personal data for the purpose of the processing, but they are necessary for the establishment, exercise or processing of legal claims by you or you have objected to processing on grounds that we consider legitimate, you have the right to request restriction of the processing of personal data.
- file a complaint about how we use your data
Remember that you have the right to object to the processing of personal data based on a legal basis that GJULAJ COMERCE considers legitimate.
- request the transfer of data to another processing operator (transfer ability to rights)
If the processing is based on your consent or is carried out by automated means, you have the right to request from GJULAJ COMERCE the transfer of data to another processing processor.
In order to exercise any of the above rights, please use the contact details provided at the beginning of the Privacy Policy.
If you believe that your rights are not being respected, you have the right to file a complaint with the Personal Data Protection Agency.
Where is your personal data kept?
We keep the personal information we collect about you in a secure environment. Your personal information is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
The processed data is stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providerlocated in the EU.
GJULAJ COMERCE will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons. All authorized persons sign a confidentiality statement.
The data collected for the purposes specified in this policy will only be stored for as long as necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than GJULAJ COMERCE reasonably considers necessary to achieve the purpose for which it was collected or processed. GJULAJ COMERCE will keep certain personal data for a period prescribed by the law or regulation that obliges GJULAJ COMERCE to keep the data (more under "How long will GJULAJ COMERCE keep your personal data?" ).
In the event that you have given us your consent (for example, you subscribed to our newsletter, selected a certain category of cookies for use), we will process your personal data until the withdrawal of consent. If you declare a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to highlight the following; where judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including a possible period for declaring remedies.
Does GJULAJ COMERCE exchange data with third parties?
Privacy protection is important to us, so we will never share your personal information with third parties except for the purposes described in this policy. We will always notify you of the sharing and transfer of data through the privacy policy.
GJULAJ COMERCE cooperates with other societies. This means that we sometimes share your personal information, using secure IT systems. When we do this, the data is transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with EU legislation.
In some cases, our partners who provide services on behalf of or for GJULAJ COMERCE may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to treat your data with special security measures in accordance with the regulations in force in the Member States of the European Union. In the event of a transfer of data to the United States, we will ask your permission in view of the consequences of the "Schrems II" judgment and the declaration of invalidity of the Privacy Shield. Also, if our contractual partner is based in the USA, we will revise the existing contracts and check the safety standards that our partner guarantees to ensure the protection of all our respondents with the latest standards approved and suggested by the relevant institutions.
The purposes for which we share information with our trusted partners are for example, the needs of marketing, site maintenance www.dodirnik.com advertising, payment processing, delivery and other services in and out of the store. These service providers are obliged, under the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and solely for the purpose strictly determined by us. We also oblige them to adequately protect your data and to consider it a trade secret.
Once a year, we audit all our partners to know that the protection of your personal data is still at the required level and that it complies with applicable regulations.
How long will GJULAJ COMERCE keep your personal data?
GJULAJ COMERCE will not retain your personal data for longer than the period for which the data is necessary to fulfill the purpose of their use, and for a maximum period of 3 years, except in exceptional cases where the law stipulates a longer retention period (for example, we will keep data related to unilateral termination of contracts and consumer complaints for 1 year, we will keep data related to the exercise of your privacy rights permanently, we will keep the information related to the prize games for 5 years, while we will keep the account information for 11 years).
You can find out more about data retention deadlines by contacting our Data Protection Officer.
What will we use your data for?
We may use your personal information in several different ways, mainly to perform our legal and other obligations to you, but sometimes to improve your experience of using the website and security reasons.
The purposes for which we use your data are described in this policy, and if your data is processed for other purposes, you will be notified before carrying out such (new) processing.
Newsletter
GJULAJ COMERCE would like to send you notifications about our activities and news that you may be interested in. Please note that you may at any time opt out of receiving them by exercising your rights set forth in this policy. To subscribe to the newsletter GJULAJ COMERCE collects and processes: e-mail address.
Video surveillance
GJULAJ COMERCE uses a video surveillance system in its branches, warehouses and at the address of the company's headquarters. At the entrance to the perimeter of the recording as a processing manager GJULAJ COMERCE will inform you about the recording. The video surveillance system processes data such as your physiognomy, movement, hair color, eye color. The video surveillance system is used to protect the property and safety of both workers and others who visit our branches, and the footage is kept for 30 days. The legal basis of processing in relation to visitors is a legitimate interest, while in relation to our employees the execution of obligations arising from labor protection regulations.
Cookies
In order to maintain the website and ensure that its functionalities are at the expected level, GJULAJ COMERCE uses a technology known as "cookies".
Cookies are small files that we send to your computer and we can access them later. They can be temporary or permanent. Thanks to cookies, you can easily browse our site. Cookies show us what interests you and other visitors to our website, which helps us improve it.
Read more about cookies in the Cookie Policy.
Other websites
This Privacy Policy applies only to the use and use of data collected by GJULAJ COMERCE from users (data subjects). Other websites that can be accessed through the website www.dodirnik.com have their own confidentiality and data collection statements and ways of using and publishing them.
GJULAJ COMERCE is not responsible for the ways and conditions of operation of third parties.
GJULAJ COMERCE collects and processes personal data through user interactions on social networks such as Facebook, Instagram and YouTube. GJULAJ COMERCE, i.e. responsible persons appointed by GJULAJ COMERCE, have access to messages and/or posts on the mentioned social networks, however, personal data collected through them, especially those contained in the messages, are not stored by GJULAJ COMERCE and additionally processed except for the purposes specified in these Rules.
GJULAJ COMERCE uses a business profile using the services of Facebook, YouTube and Instagram, and you can see about their Privacy Policy or confidentiality statements as well as the way they use your personal information at:
FACEBOOK ONLINE
https://www.facebook.com/policy.php
YOUTUBE ONLINE
https://policies.google.com/privacy?hl=hr
INSTAGRAM ONLINE
https://help.instagram.com/519522125107875
In case you have questions regarding the collection and processing of data by Facebook, YouTube and/or Instagram or wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:
PER FACEBOOK:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska
Contact of the Data Protection Officer:
https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority of Facebook, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
SAT YOUTUBE:
Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Irska
Contact of the Data Protection Officer:
https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Youtube, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
PER INSTAGRAM:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska
Contact of the Data Protection Officer:
https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the Lead Supervisory Authority for Instagram, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
Effective of this privacy policy change
These Rules shall enter into force upon publication on the Website.
GJULAJ COMERCE reserves the right to amend the Privacy Policy and it will be published on the website.