PRIVACY NOTICE

 

INTRODUCTORY PROVISIONS

This privacy notice from Molvik d.o.o., Molvička 41, Molvice, 10430 Samobor, OIB:88965774094 (Data Controller) applies to all Data Subjects whose personal data is collected and processed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data (hereinafter: Regulation) and the repeal of Directive 95/46/EC (General Data Protection Regulation) and the applicable laws of the Republic of Croatia. Through this privacy notice, we aim to provide clear and transparent information to all Data Subjects about the processing and protection of their personal data, as well as the rights of Data Subjects to control and manage their personal data and consents. It is the responsibility and task of the Company to ensure the availability of this Notice to all Data Subjects whose personal data is collected before the actual collection, as well as the responsibility of each employee of the Company who collects personal data of Data Subjects to inform them of this Notice to ensure lawful obtaining of consent for the collection and processing of personal data. We commit to collecting only the data that is necessary to achieve the purpose and at the same time does not pose a threat to your privacy.

PROCESSING PRINCIPLES

Molvik processes the personal data of its business partners, employees, visitors, individuals, etc. (hereinafter: Data Subject) in accordance with the rules of the Regulation and the following principles of personal data collection:

  • Lawful, fair, and transparent - the processing of personal data is carried out in accordance with the law by providing the Data Subject with clear and understandable information about the processing of their data.
  • For specific, explicit, and lawful purposes - personal data is processed only for the purposes for which it was collected.
  • Adequate, relevant, accurate, and up-to-date - personal data must be accurate, complete, and up-to-date; inaccurate personal data is deleted or corrected without delay.
  • Limited storage only for as long as necessary for the specific purpose.
  • Data protection from any unauthorized or unlawful processing, accidental loss, destruction, or damage.

We process the personal data of individuals under the age of 16 based on the consent of parents or guardians. This privacy notice applies equally to personal data in digital or electronic records, as well as to personal data in paper form. The terms used in this notice, which have gender significance, apply equally to both male and female genders.

COLLECTION AND PROCESSING PURPOSES

According to the definition given in the General Data Protection Regulation, personal data is "any information relating to an identified or identifiable individual (data subject); an identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual."

Method of collecting personal data

Molvik collects personal data from Data Subjects in a lawful manner in accordance with the conditions and principles of the General Data Protection Regulation and the applicable laws of the Republic of Croatia, through the following methods:

Directly from the Data Subject during communication - personal communication, via email or written correspondence.
As part of business processes by executing contracts for the sale or other contracts in which the Data Subject is a party.
Publicly available data.

Explicit consent of the Data Subject.

Types of personal data we process

The types of personal data that Molvik may collect and process from the Data Subject depend on the type of contract or service we provide to the Data Subject:

  • Data necessary for specific legal processing purposes (sale and purchase agreement and other contracts between the Company and the Data Subject).
  • Identification data: name, surname, OIB (Personal Identification Number), date of birth, address of residence, email address, phone number, mobile device number, current or savings account number, educational qualifications.
  • We do not process special categories of personal data, except for special categories of employee personal data, for which employees give explicit consent.

Processing purposes

Molvik uses the collected personal data exclusively for the purpose stated at the time of collection:

  • For the purpose of establishing an employment relationship in accordance with regulations.
  • For the purpose of fulfilling contractual obligations.
  • For the purpose of fulfilling legal and regulatory obligations.
  • For the purpose of its legitimate interests - to protect individuals and property.
  • For the purpose of public interest.

Data retention

In accordance with the principles of this Privacy Notice, we keep your personal data for as long as necessary to achieve the processing purpose or as required by the relevant law or sublegal act, and once personal data is no longer needed, it is deleted or destroyed securely. Exceptionally, we may retain your personal data longer than stated if necessary to comply with a court order, for the purpose of fulfilling legal obligations.

Sharing personal data

Molvik will not share, transfer, or disclose your personal data to third parties under any circumstances, except when necessary to fulfill legal obligations (e.g., to competent state and public authorities). Molvik may share your personal data with third parties in accordance with contractual obligations it has with them for legitimate interests (e.g., IT service providers, auditors). Every third party is obligated to keep your personal data confidential and use it
only to fulfill contractual obligations. In all other cases, Molvik will seek your explicit consent to share your personal data with third parties.

MEASURES TO PROTECT PERSONAL DATA

Molvik implements strict technical, organizational, and security measures to protect your personal data from unauthorized access, use, disclosure, and destruction. Personal data in paper form is kept in a locked cabinet in a room accessible only to authorized personnel. Authorized persons with access to personal data have committed to maintaining the confidentiality of all data they learn in the course of their work. Personal data in electronic form is protected against unauthorized access, alteration, and deletion by using strong passwords known only to authorized personnel. All computers containing personal data are protected by appropriate technical measures such as antivirus programs and firewalls. Data backups are regularly performed to ensure the accuracy and integrity of the data, and they are stored on network devices for data storage in a cabinet with IT equipment that is locked. Data is protected by a username and password and is only accessible to authorized personnel.

DATA SUBJECT RIGHTS

In accordance with applicable personal data protection rules, we are obliged to inform you about your rights. At any time, you have the right to:
Right of access - at any time, you have the right to obtain confirmation of whether your data is being processed. If your data is processed, you can request access to your data, specifying the purpose of the processing, and request a copy of all your data, as well as insight into how we process and store your data.
Right to rectification - at any time, you can request the correction of inaccurate data and their supplementation.
Right to erasure - in certain circumstances, you can request the deletion of your personal data from the records.
Right to restriction of processing - in certain circumstances, you have the right to request the restriction of the processing of your personal data.
Right to data portability - you have the right to transfer your processed data to another data controller.
Right to object - you have the right to object to certain types of processing of your personal data (e.g., direct marketing). However, if the processing is based on legitimate interest, processing will still be possible if the existence of compelling legitimate interests that exceed the interests, rights, and freedoms of the Data Subject or the defense of legal claims are proven. If personal data is processed based on the consent of the Data Subject, it is possible to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before it is withdrawn.
Right to object to automated processing, including profiling - you have the right to object to the legal effects of automated processing of your personal data.
Information and requests to achieving rights are provided in electronic form via email molvik@molvik.hr or to the address of the data controller Molvik d.o.o., Molvička 41, Molvice, 10430 Samobor, attn. Data Controller. Molvik will respond to all requests within one month of receiving the request, and if you are not satisfied or have general complaints about our services and how we process your personal data, you have the right to file a complaint with the Croatian Personal Data Protection Agency as the competent supervisory authority for the protection of personal data at Selska cesta 136, 10000 Zagreb or via email azop@azop.hr, tel. 00385 (0)1 4609 000 www.azop.hr

COOKIE NOTICE

What is a cookie?

We inform you that Molvik uses cookies on its website. A cookie is a short text that is stored on a visitor's computer or mobile device when visiting our website. Cookies usually save your settings (such as login, preferred language, font size, and other desired settings). Later, when you revisit the website, stored cookies allow the display of information tailored to your needs.

Use of cookies

For proper, efficient, and secure operation, the website must store a small amount of information (Cookies) on your computer, but before storing, we are obliged to ask for your consent. By blocking cookies, you can still browse the site, but some of its features may not be available to you. There are several types of cookies, and they differ depending on the purpose for which they are used. The website www.molvik.hr uses first-party cookies (first party cookies come from the site you are viewing and can store data that will be reused during your next visit to that site). These cookies do not serve for your identification and do not store any personal data but only technical data necessary for the proper functioning of the website.

Social networks

Social networks can also store cookies on your computers or devices. The impact on your privacy will vary from one social network to another, depending on the privacy settings you have chosen on those networks. You can find out how to manage these cookies on their websites.

How to control cookies?

You can control and/or block cookies. You can delete all cookies that are already stored on your computer, and the settings of most browsers allow you to block the storage of cookies. If you block cookies, you may need to manually adjust some desired settings each time you
visit the website, and certain features may not be available. For more information, visit: AllAboutCookies.org

CHANGES TO THE PRIVACY NOTICE

Molvik reserves the right to change this Privacy Notice at any time and for any reason. The purpose of the changes is not to diminish your rights but to ensure the compliance of this Notice with the applicable legal framework for the protection of personal data. Users will be informed about any changes to this Privacy Notice on the website www.molvik.hr

This Privacy Notice was last updated on November 2, 2023, and is effective.