Personal data protection

Privacy Policy for the Website

We would like to emphasize that by visiting our website, all your personal data remain confidential unless you choose to disclose them voluntarily. We collect only the personal data that you voluntarily provide to us and solely for the purposes stated in this Privacy Policy. When collecting personal data, we undertake to comply with the applicable regulations relating to personal data protection.

This Privacy Policy describes the types of data processed, the purposes of processing, and your rights related to such processing. Please read this Privacy Policy carefully before continuing to use the website. If you do not agree with its provisions, please do not use the website.

Personal Data We Process

“Personal data” means any information relating to an identified or identifiable individual (“data subject”).

We collect personal data in accordance with applicable regulations, for example, to send you updates and news via email, include you in prize contests and surveys, send publications, brochures and other promotional materials, or respond to your questions, comments and feedback.

We process your personal data solely on the basis of your consent. In certain cases, collecting your personal data will be necessary for the performance of a contract between you and Cresanka d.d., for example when purchasing products/services in our online store. We process the following categories of personal data:

1. Contact and identification data necessary for ordering products/services in the online store;
2. Data related to purchases via the online store, such as purchased products/services, invoice amount, selected payment method, purchase frequency;
3. Data on user interaction with the website collected through cookies.

We do not collect or use personal data of minors (within reasonable limits where we can determine the user’s age), except with the explicit consent of a parent or guardian. If you are a minor, please do not send us your personal data (name, surname, address, telephone number, email or other data that could identify you), as we will have to refuse to process such communication. Should contact nevertheless be established at the request of a minor and personal data be transmitted by a minor, Cresanka d.d. expressly rejects any material or non-material claims arising from the processing of such contact.

Purpose of Processing Personal Data

Cresanka d.d. processes personal data for the following purposes:

1. Processing orders via the online store;
2. Sending commercial communications via email, mobile phone or traditional mail (within the limits of your consent);
3. Participation in surveys, questionnaires and prize contests organized by Cresanka d.d.;
4. Providing responses to your questions, suggestions, comments, complaints, etc.;
5. Preparing reports/statistics on the use of the website and services offered;
6. Resolving disputes or complaints related to or arising from the activities of Cresanka d.d.

Disclosure of Data to Third Parties

We do not sell, transfer or disclose the data collected on our website to anyone outside Cresanka d.d. without your consent, except: (1) When required by law and necessary to fulfill our legal obligations; (2) When necessary to protect your life or physical integrity and you are unable to give consent; (3) When necessary for tasks carried out in the public interest; (4) When you have made the data public yourself; (5) When necessary to protect our legitimate interests. Your personal data will be retained only for as long as necessary to achieve the above-mentioned purposes of processing. Cresanka d.d. may disclose some or all of your personal data to:

1. Persons authorized to process personal data on behalf of Cresanka d.d., i.e. partners necessary for providing and maintaining services offered via the website (e.g. website development and maintenance providers, service providers best suited to respond to your inquiries);
2. Legal successors in the event of mergers, acquisitions, restructuring or other transfers of control;
3. Other recipients to whom Cresanka d.d. is authorized or obliged to disclose personal data pursuant to applicable regulations.

Credit Card Payment Security

Cresanka d.d. undertakes to apply maximum security standards to protect customers’ interests and prevent possible misuse of information. Products/services available in the online store are sold via the PayWay online card payment solution provided by T-com. The confidentiality of your data is protected and secured using SSL encryption. Online payment pages are secured using the Secure Socket Layer (SSL) protocol with 128-bit data encryption. SSL encryption is a data encoding process that prevents unauthorized access during data transfer. This enables secure information transfer and prevents unauthorized access during communication between the user’s computer and the T-com service, and vice versa. The PayWay service and financial institutions (card companies) exchange data via a virtual private network (VPN), protected from unauthorized access. Credit card numbers are not stored and are not available to unauthorized persons. Cresanka d.d. cannot be held responsible for misuse that cannot be proven to have resulted from a technical-security failure of the web store system or negligence by Cresanka d.d. employees.

Email Messages

When you send us an email (with a question, comment, complaint, suggestion, etc., or via the contact form on the website) containing personal data by which you can be identified, we will use that data solely for the purpose of fulfilling your request. We may forward your email and request to other partners who are best suited to respond to your inquiry. All employees of Cresanka d.d. are responsible for complying with this Privacy Policy.

Surveys, Questionnaires and Contests

We occasionally conduct surveys and questionnaires on our website. The collected data are used exclusively for the needs of Cresanka d.d.

Cookie Policy

Ova web stranica koristi kolačiće.
Pohranjuju određene informacije (npr. željene postavke jezika ili web stranice, status registracije na korisnički račun i sl.) koje Vaš preglednik može reproducirati kada se vratite na web stranicu (ovisno o trajanju kolačića). This website uses cookies. Cookies are small text files generated by a web server and stored on the user’s device via a web browser to provide higher quality service and content.
They store certain information (e.g. preferred language or website settings, user account registration status, etc.) that your browser can reproduce when you return to the website (depending on cookie duration). Certain cookies are necessary for the use of the website and its core services and features.
Cookie information helps us understand how users use the website in order to improve content quality and browsing experience. Optional cookies include Google Analytics cookies (which track visits and analyze website performance, available to us as statistical data without personal identification of individual users) and social media cookies enabling users to share content via their social media accounts.
By continuing to browse the website, you accept the use of cookies. By using this website, users are deemed to be familiar with and agree to the terms of use, including provisions on data processing and protection and cookie options.

Data Subject Rights

Providing consent for personal data processing is not mandatory; however, refusing consent as described above may prevent the user from accessing some or all website content or receiving information about products/services offered by Cresanka d.d.
By submitting personal data to Cresanka d.d., the data subject does not waive any rights guaranteed under the laws of the Republic of Croatia concerning personal data protection, particularly the right to request correction or deletion of personal data if incomplete, inaccurate, outdated, or processed unlawfully. Where processing is based solely on your consent, you have the following rights:

a) Right of access – to obtain information about the purpose of processing, categories of data, recipients, retention period, and other rights.
b) Right to rectification – to request correction of inaccurate or completion of incomplete data.
c) Right to erasure – to request deletion of personal data under certain circumstances.
d) Right to withdraw consent – to withdraw previously given consent at any time.
e) Right to lodge a complaint with a supervisory authority – if you believe your rights have been violated, you may file a complaint with the Croatian Personal Data Protection Agency (AZOP).

Depending on the request of the user/data subject, Cresanka undertakes to:
 

1. Confirm whether it processes personal data relating to that user/data subject;
2. Correct or delete personal data without charge and without delay;
3. Restrict or cease the processing of personal data.