PRIVACY POLICY
This Privacy Policy based on the General Data Protection Regulation (GDPR) explains what personal data is collected in connection with the provision of our services, how we process, use and protect that data, for what purposes we use it, as well as your rights related to your data.
OUR FUNDAMENTAL BUSINESS PRINCIPLE IS PRIVACY AND PROTECTION OF PERSONAL DATA
Privacy of individuals and protection of personal data are human rights. It is our duty to care for the people whose data we have collected and stored. Data is a responsibility and must be collected and processed only when absolutely necessary, ensuring security measures for their protection.
It is important to read this Privacy Policy, and we hope you will take the time and your attention. We have tried to make it as clear as possible and understandable to everyone, with the desire to maintain your full confidence in how we handle your personal data.
If, after reading them, you have further questions about the protection of personal data, feel free to contact our Data Protection Officer:
Igor Barlek, CIPP/E, Data Protection Officer
We regularly improve our Privacy Policy to enhance the protection of your data.
This Privacy Policy was updated on May 14, 2025.
WHO WE ARE
Ivančica d.d., Petra Preradovića 12, 42240 Ivanec, acts in relation to your personal data in the role of data controller, which determines the purposes and methods of processing your personal data and takes care of ensuring all security measures for your personal data.
WHAT DATA WE PROCESS, HOW, AND FOR HOW LONG
When receiving orders or selling our products
When visiting one of our stores and purchasing our products, we only need a necessary set of your personal data (first and last name).
If you visit our web shop and place an order, we will collect and process personal data necessary to process your order and deliver to your address, including payment data for ordered items.
We retain such collected data to the necessary extent and in accordance with accounting and tax regulations.
Video surveillance
Exclusively for the purposes of protecting the safety of our employees and business partners and all persons who are covered by lawful perimeters of recording, and for the purposes of protecting property and preventing unlawful acts directed at our property from theft, robbery, burglary, violence, destruction, etc., in accordance with our justified and documented legitimate interest, we monitor only acceptable space around and within the business premises whose recording perimeters are clearly marked with easily visible notices. We store video surveillance recordings for the necessary period, depending on the amount of recorded records on the storage medium, but no longer than 6 months.
Selection of candidates for job positions and employment
During the process of candidate selection and employment, we collect basic data about candidates with the intention of concluding an employment contract, first and last name, residential address, email address, telephone number, education and work experience, and other data that you provide us through your resume, as a set of your personal data important for conducting the selection and employment process. After completing the selection process, we employ selected candidates and collect all necessary data in accordance with legal obligations, while applications and personal data of non-selected candidates are returned upon request or permanently destroyed, and based on your consent, we retain them for the possibility of employment in the future.
Consumers right to complaint
Every customer is guaranteed the right to submit a complaint or reclamation for services provided, whereby we collect a necessary set of personal data of the complainant and retain it for a period of up to 12 months, in accordance with regulations in the area of consumer protection.
Use of your personal data for sending newsletters
We send news via newsletter exclusively based on your consent, when we collect the most necessary personal data (first name, last name, email address) and use them until the moment of withdrawal of consent for processing for direct marketing purposes, and after that, we permanently delete them.
Collection of your personal data on our website
Although you can use our website without providing personal data, when you contact us through publicly published email addresses or our contact form for the purposes of potential employment, establishing a business relationship, or inquiry, we collect your first and last name and email address, and the optional information about your telephone number is welcome so that we can determine your wishes and needs more accurately through our return phone call.
As long as we have open communication in terms of establishing business cooperation, we will collect your personal data and delete them upon cessation of further communication, upon cessation of the existence of legal bases from GDPR related to the processing of your personal data.
Our website is not intended to provide services to minors under 16 years of age, and for this purpose, it is necessary to attach the consent of a parent or holder of parental responsibility before providing personal data through our contact form.
Our website also contains links to other websites and social networks, and this Privacy Policy does not apply to them. We recommend that you read the privacy protection terms of each website and social network you visit, especially where you leave data.
Cookies
Our website uses small text files and places them on your computer or device for the purpose of adapting your web browser interface. Cookies necessary to ensure the functionality of our website cannot be disabled. They are typically set in response to your actions that include service requests, such as setting cookies, logging in, or filling out forms.
For the use of other (statistical, analytical, or marketing) cookies by which we would collect your personal data, your prior consent is necessary, and even in the absence of your free consent, you can still fully use our website and have unhindered access to all its contents.
The list of all cookies we use is located within the cookie bar, where we give you full freedom to choose whether you want to use them or not, and we ensure that you can change your cookie consent settings at any time.
WHO HAS ACCESS TO YOUR DATA
We cooperate exclusively with trusted business partners who help us provide and improve our services and make our direct communication with you more efficient. We provide access to your personal data to authorized external processors for the purpose of processing personal data on our behalf and based on our explicit instructions based on concluded data protection agreements. These partners are obliged to strictly respect the obligation of confidentiality in accordance with this Privacy Policy, with the contracts we have concluded with them, and in accordance with the obligations from GDPR.
Our selected external processors are business partners who provide IT services and business application maintenance services, as well as web and email hosting services for us, without which we would not be able to ensure the fulfillment of the highest quality of our services and communication with you.
YOUR RIGHTS
At any time, you are free to contact us for the purpose of exercising your rights in the area of protection of your personal data. Your rights are as follows:
Right of access to personal data
You have the right to access your personal data and to be informed about what data and how we process it, for what purpose and for what period. We provide you with the possibility to also obtain a copy of your personal data.
Right to rectification of personal data
You have the right to rectify or supplement inaccurate or incomplete personal data that we have collected.
Right to erasure of personal data
You have the right to request us to delete your personal data when the data is no longer necessary for the purpose for which it was collected, when you submit a justified objection, or your personal data is processed unlawfully.
Right to object
You have the right to object to certain handling of your personal data. For example, you can submit a request for us to stop processing your personal data for direct marketing purposes.
Right to restriction of processing
You can request us to restrict the processing of data, for example, when the deletion, rectification, or objection regarding your personal data is pending and/or when we do not have a valid basis for processing your data but you want us to retain it. When processing is restricted, your data will be stored and will not be further processed. For example, if you dispute the accuracy of your data, the processing of such data will be restricted until it is ensured that the data is accurate.
Right to data portability
When processing is carried out by automated means of processing based on a contract or consent, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transfer such data to third parties by your decision.
Right to withdraw consent
If you have previously given your free consent to a specific use of your personal data, you have the full right to withdraw your consent at any time, and we will stop using your personal data without delay.
If you wish to exercise any of the previously mentioned rights, feel free to submit a request:
We will respond to your request as soon as possible, and no later than one month from receiving your request. In case of inability to securely confirm your identity, we will be free to request additional verification of the identity of the requester.
If you believe that our handling of your personal data is not lawful, you can at any time file a complaint directly to the competent supervisory authority - the Croatian Personal Data Protection Agency (AZOP), Ulica grada Vukovara 54, 10 000 Zagreb, phone: 01 4609 000, email: azop@azop.hr.
IMPROVEMENT OF THIS PRIVACY POLICY
We reserve the right to occasionally adapt and improve the text of this Privacy Policy, primarily for the purpose of complying with legal changes, or in the case of changes in the purposes and methods of processing. However, we will not limit or diminish your rights arising from this Privacy Policy or from the corresponding legal regulations. In the event of changes that may affect your rights, we will notify you in a timely and direct manner in an appropriate way.
