Privacy Policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: the General Data Protection Regulation), which has been fully applicable since 25 May 2018 in the Republic of Croatia and all European Union Member States, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), the Labour Act (Official Gazette Nos. 93/14 and 127/17), and the Occupational Safety and Health Act (Official Gazette Nos. 71/14, 118/14 and 154/14), and in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and the best European practice, DIJANA NEKIĆ,

registered with the Commercial Court in Zadar (hereinafter: ARTEMIDA, ACCOUNTING SERVICES), as the controller of personal data of users of its services and customers, has adopted this Privacy Policy. The Privacy Policy is a unilaterally binding legal document based on the fundamental principles of personal data processing, which regulates which user data is collected, how such data is processed, and for what purposes it is used. The Privacy Policy also informs users and/or customers of their rights regarding the collection and further processing of personal data, all with the purpose of protecting their privacy in a broader sense.

The Privacy Policy is based on the following principles of personal data processing: the principle of lawfulness, transparency and best practice; the principle of limited processing and data minimisation; the principle of accuracy and completeness; the principle of limited storage; the principle of data integrity and confidentiality; the principle of accountability; the principle of trust and fair processing; the principle of purpose limitation; and the principle of anonymised processing.

The Privacy Policy applies to all services provided by ARTEMIDA, ACCOUNTING SERVICES, with the aim of clearly and transparently informing users about the processing of their personal data and their rights. At any time, users may contact the company to request modification, completion, and/or updating of their data, as well as withdraw consent and request the cessation of further processing of their personal data.

The person responsible for personal data processing is: DIJANA NEKIĆ

Contact information for data protection:

e-mail: INFO@ARTEMIDABIOGRAD.HR

Methods of collection and types of personal data collected

Data is collected directly from users when they voluntarily provide it to ARTEMIDA, ACCOUNTING SERVICES as the data controller, within the scope necessary for providing appropriate services, sales, or any other user interaction with HTTPS://ARTEMIDABIOGRAD.HR/
.
For the purpose of providing services, users are required to provide ARTEMIDA, ACCOUNTING SERVICES with the following data necessary for establishing a contractual relationship to deliver a specific service and/or sell particular products. Customers may provide data verbally or in writing at the premises of ARTEMIDA, ACCOUNTING SERVICES, via e-mail sent to one of the company’s addresses, or through the ARTEMIDA, ACCOUNTING SERVICES website HTTPS://ARTEMIDABIOGRAD.HR/
.

Data is also collected from other publicly available sources about companies and individuals, from online portals, business directories, and other publicly accessible services, solely for the purposes for which such data was originally collected.

Automatically, by visiting the ARTEMIDA, ACCOUNTING SERVICES website, applications or portal, certain data related to network identifiers (such as IP addresses and cookie identifiers, e.g. Google Analytics) is collected for the purpose of monitoring user interaction.

A cookie is a small data file stored on a computer or mobile device when visiting a website. Cookies are used to provide a better user experience, store user preferences, improve website efficiency, and analyse the use and traffic of the ARTEMIDA, ACCOUNTING SERVICES website.

By disabling or blocking cookies, users may still access the ARTEMIDA, ACCOUNTING SERVICES website, but certain features or functionalities may not be available, or access time to specific functions may be longer than usual.

Such network identifiers may leave traces which, combined with other identifiers and information provided by internet service providers, can serve to identify users and/or customers.

The amount and scope of personal data collected by ARTEMIDA, ACCOUNTING SERVICES depend on the type of service provided and the legal basis on which the data is collected. ARTEMIDA continuously ensures that only the minimum amount of data necessary for the lawful purpose of processing is collected.

Data on potential users

ARTEMIDA also collects data about potential users and/or customers of its services and/or products. This includes basic information (name, surname, e-mail address) and interests of potential users and/or customers who contact the company seeking information and/or offers for certain products and services.

A cookie is a small data file stored on a computer or mobile device when visiting a website. Cookies are used to provide a better user experience, store preferences, improve website efficiency, and analyse usage and traffic on the ARTEMIDA, ACCOUNTING SERVICES website.

By disabling or blocking cookies, users can still browse the website, although some features or functions may not be available, and access times may be slower than usual.

Network identifiers may leave traces which, in combination with other identifiers and information provided by internet service providers, can be used to identify users and/or customers.

The amount of data collected by ARTEMIDA, ACCOUNTING SERVICES depends on the type of service and the legal basis for collection. ARTEMIDA ensures that only the necessary amount of data required to achieve the lawful purpose is processed.

Types of personal data collected

The data most commonly provided by customers includes:

name and surname
address
personal identification number (OIB)
telephone and/or mobile number
e-mail address
identity card data
bank account and card number (for payment purposes)

Where is personal data processed?

Personal data of users and customers is processed within the Republic of Croatia.

Where is the collected data stored?

Data is processed so that all or part of the information on customers is stored in the data controller’s databases.

Obligations of the data controller regarding data security

TECHNICAL AND ORGANISATIONAL DATA PROTECTION

The data controller implements technical and organisational measures to ensure an appropriate level of security.

The controller also ensures that any individual acting under its authority who has access to personal data does not process such data except in accordance with the controller’s instructions.

Taking into account the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of individuals, the controller applies appropriate technical and organisational measures in accordance with Security Policies to ensure and demonstrate compliance with the General Regulation.

Purpose of data collection and further processing

ARTEMIDA collects and processes personal data of users and/or customers for the purpose of concluding and executing contracts, completing purchases or service interventions, delivering ordered products, providing advice and assistance with product use, granting product warranties, resolving user complaints, and other actions related to contractual performance in accordance with applicable regulations.

Processing personal data for these purposes is necessary for contract execution. If the user or customer refuses to provide essential information, the company will not be able to conclude or execute the contract or perform certain related actions.

Organisation of prize contests

ARTEMIDA may occasionally organise prize contests, and data may be used for prize notifications.

Direct marketing

User and/or customer contact details may be used to send promotional messages about ARTEMIDA’s products and services if the user or customer has given consent.

Video recordings

ARTEMIDA, ACCOUNTING SERVICES uses surveillance cameras to protect persons and property.

Duration of personal data storage

Depending on the purpose and legal basis for which data is collected, ARTEMIDA is required in certain cases to retain personal data for a period prescribed by applicable law or until the purpose for which the data was collected ceases to exist. After the expiry of the statutory period or once the purpose ends, the data is deleted.

When the processing is based on user consent, data is stored for 10 years.

Data collected based on user consent may be deleted before this period if requested by the user or if the user objects to such processing by written request sent via e-mail to INFO@ARTEMIDABIOGRAD.HR
.

Methods of exercising rights

Users may exercise their rights if they believe there has been any irregularity in the processing of their personal data by contacting us via the provided contact details or e-mail INFO@ARTEMIDABIOGRAD.HR
. They also have the right to lodge a complaint with the national supervisory authority.

Conditions and reasons for sharing personal data with third parties

Personal data of customers may be disclosed to third parties (including competent authorities) in the following cases:

to fulfil legal obligations of ARTEMIDA, ACCOUNTING SERVICES when such processing is necessary for the protection of key interests of customers;

to fulfil contractual obligations or perform work on behalf of customers requiring third-party processors.

Processing of personal data in the context of employment

Personal data of employees may be collected, processed, used, and disclosed to third parties only if provided by law or necessary for exercising rights and obligations arising from the employment relationship.

To ensure the lawful exercise of employment rights and obligations, the controller will collect, process, use, and disclose only the data necessary for such purposes and provide it only at the request of courts or other state or public authorities.