These privacy rules apply to anyone who, in accordance with the use of the website www.kucacaja-split.hr, is considered a user of the entire website, including its subpages.
User is any company or individual who uses or visits the website www.kucacaja-split.hr (hereinafter: user).
Personal data controller
The manager of personal data processed in accordance with these rules is Kuća čaja d.o.o., address: Kralja Tomislava 6, 21000 Split, e-mail: info@kucacaja-split. hr, phone number: 021/332-358, represented by Siniša Kaliterna.
Personal data protection
Purposes for which we process personal data
We process your personal data because legal regulations require us to take certain actions, i.e. because the processing is necessary for the execution of a contract, or in order to take actions before concluding a contract or based on our legitimate interests, except when these interests are stronger interests or the fundamental rights and freedoms of individuals who require the protection of personal data.
If we cannot process personal data based on the stated legal grounds, we will ask for your consent. If the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent must be notified to the processing manager by e-mail: firstname.lastname@example.org or at the address email@example.com, Kralja Tomislava 6, 21000 Split – “For the personal data protection officer Kuća čaja d.o.o.”. Such withdrawal will not affect the lawfulness of processing based on consent prior to its withdrawal.
We process your personal data when it is necessary to conclude and fulfill the rights and obligations arising from the sales contract, for marketing purposes, for the purposes of improving our business and your user experience (e.g. when you buy or order products and/or services from us, when you contact us by phone or e-mail, etc.).
We generally collect personal data directly from you, when you order certain products or services or fill out a certain form.
Categories of personal data
When entering into a sales contract, we need information such as name, surname and address in order to fulfill our contractual obligation to deliver products and services.
We sometimes ask you for additional personal information such as: contact number and e-mail address, shipping address, financial information including credit and debit card information or other payment information that you provide to us when filling out forms on our website or when you communicate with us by phone or email and additional information you choose to voluntarily share with us.
Your rights are as follows:
Right of access: You have the right to receive confirmation from us as to whether your personal data is being processed, and if such personal data is being processed, access to the personal data. Access information includes – among other things – purposes of processing, categories of personal data in question, recipients or categories of recipients to whom the personal data has been or will be disclosed. However, this is not an absolute right and the interests of other individuals may limit your right of access.
You have the right to receive a copy of the personal data being processed. For further copies requested by you, we may charge a reasonable fee based on administrative costs.
Right to rectification: You have the right to obtain from us the correction of your inaccurate personal data. Taking into account the purposes of the processing, you have the right to supplement incomplete personal data, including by providing an additional statement.
Right to deletion (“right to be forgotten”): Under certain conditions, you have the right to obtain from us the deletion of your personal data and we are obliged to delete such personal data.
Right to restriction of processing: Under certain conditions, you have the right to obtain from us the restriction of processing of your personal data. In this case, the corresponding data will be marked and can only be processed for specific purposes.
Right to object: Under certain conditions, you have the right to object to the processing of your personal data at any time, for reasons related to your specific situation or when personal data are processed for the purpose of direct marketing, and you can ask us to stop processing your personal data.
Right to data portability: Under certain conditions, you have the right to receive personal data relating to you, which you are provided to us in a structured, commonly usable and machine-readable format and you have the right to transfer that data to another controller, without our interference.
If you want to know more or want to use one or more of the above rights, please contact the data controller at the e-mail: firstname.lastname@example.org or to the address Kuća čaja d.o.o., Kralja Tomislava 6, 21000 Split – “For the personal data protection officer Kuća čaja d.o.o.”.
If you are not satisfied with how we process your personal data, you can contact the Personal Data Protection Agency.
An individual can also submit a complaint regarding the processing of their personal data directly to the competent supervisory body, or you can send your complaint to the body responsible for the protection of personal data – the Personal Data Protection Agency.
Contact information of the Personal Data Protection Agency:
Martićeva Street 14
HR – 10000 ZAGREB
Tel. 00385 (0)1 4609-000
Fax. 00385 (0)1 4609-099
Preservation of personal data
We store the personal data we collect about you in a secure environment. Your personal information is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
The collected data will be stored only for as long as it is necessary for the previously mentioned purposes.
Your personal data will not be stored in a form that allows you to be identified for longer than the controller reasonably considers necessary to achieve the purpose for which it was collected or processed. The data controller will store certain personal data for the period of time prescribed by the law or regulation that obliges the data controller to store data.
If you have given us your consent, we will process your personal data until you withdraw your consent.
In case you declare a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
Furthermore, if judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including the possible period for filing legal remedies. The data controller will store certain personal data for the period of time prescribed by the law or regulation that obliges the data controller to store data.
Recipients of personal data
It is important to note that we may provide your personal data to our trusted partners who provide services on behalf of and for the account of the data controller. For example, for the delivery of ordered products or for sending emails and newsletters. The mentioned service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose that we have strictly determined. We also oblige them to adequately protect your data and to consider it a business secret.
Transfer to third countries
House of Tea d.o.o. uses tools and services of social networks based outside the EU. We are obliged to warn you that the third parties that manage these social networks may transfer your personal data to the USA where they are shared with the intelligence services in accordance with the regulations in force in the USA.
We care about the protection of your data, and that is precisely why we have launched mechanisms that will enable an even greater level of your protection.
We will inform you additionally about all the measures taken, and we will also change our policies after the completion of the ongoing procedures. If you are interested in how third parties change their data protection rules for Google LLC, read here.
Performance, efficiency and security of information systems and websites
Data collected in this way are processed based on the legitimate interest of the data controller, without their individual processing and connection with other data.
Social networks, web services and related plugins
House of Tea d.o.o. uses Facebook, Twitter and Google Maps plugins on www.kucacaja-split.hr to enable you to use the features of these social networks or content providers (such as liking; posting messages; connecting, sharing and publicly posting content; watching videos, viewing maps and determining the location of the company Kuća čaja d.o.o.).
If these plugins are used, a direct connection to the server is established and these social networks or service providers, and part of the data on the use of these services via the website managed by Kuća čaja d.o.o. is shared with the providers of these services and, depending on your preferences, may be processed for their further use, including for advertising and direct marketing purposes. Depending on your preferences for using these individual social networks, some of your personal data (such as your email address, your social network identity, IP address, your location, your friends list, etc.) is also transmitted to each social network.
More detailed information on the purposes and scope of personal data processing by the providers of these websites can be obtained directly from the providers of these services, operators of these social networks or directly within these social networks.
House of Tea d.o.o. assumes no responsibility for the protection of your personal data through the above-mentioned social networks, online services and all related websites.
Data protection provisions on the use and use of Facebook
On this website, components of the company Facebook are integrated.
A social network is a social meeting place on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for the exchange of opinions and experiences, or allow the Internet community to provide personal or business information. Facebook allows users of the social network to include creating private profiles, uploading photos, and networking through friend requests.
The company that operates Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If the person lives outside the United States of America or Canada, the controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each call to one of the individual pages of this website, which is managed by the data controller and on which the Facebook component (Facebook plug-in) is integrated, the Internet browser on the information system of the respondent is automatically prompted to send a display of the corresponding Facebook component from Facebook via the Facebook component. An overview of all Facebook plugins can be accessed under https://developers.facebook.com/docs/plugins/. During of this technical procedure, Facebook is aware of which specific sub-page of our website was visited by the respondent.
If the person is simultaneously logged on to Facebook, Facebook detects each call to our website by the subject and for the entire duration of their stay on our website – which specific subpages of our website were visited by the subject. This data is collected via the Facebook component and is linked to the respective Facebook account of the respondent. If the data subject clicks on one of the Facebook buttons integrated on our website, e.g. the “Like” button, or if the data subject comments, then Facebook associates this data with the data subject’s personal Facebook user account and stores the personal data.
Facebook always receives, via the Facebook component, information about the visit of our website by the subject, whenever the person is simultaneously logged on to Facebook during the call to our website. This happens regardless of whether the respondent launches the Facebook component or not. If such a transfer of information to Facebook is not desirable for the data subject, he or she can prevent this by logging out of the Facebook account before calling up our website.
The data protection guideline published by Facebook, available at https://facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. In addition, it explained which settings Facebook offers to protect the privacy of respondents. In addition, various settings options are available to prevent the transfer of data to Facebook. These applications can be used by the respondent to disable data transfer to Facebook.
All data collected on the above legal basis will be used in accordance with the purpose for which it was collected and will not be disclosed to third parties without your consent.
As part of their responsibilities and tasks, your personal data will be disclosed to the following data users:
employees of Kuća čaja d.o.o.;
postal service provider, e-mail service provider,
shipping service providers, destruction service providers and the media;
providers of information technology services within the management and maintenance of software and hardware;
administrator of the website, Facebook or other social networks;
national authorities that supervise our operations in accordance with their legal competences.
House of Tea d.o.o. posesbnu pays attention to the selection and control of contractual partners who act as processors of personal data in cases where access to personal data is required for the performance of their service. Contractors are required to follow our instructions and their suitability to perform treatments is subject to our periodic review. Contractors may process your personal data for other purposes, and after the fulfillment of the processing purpose or after termination of the contractual relationship, all data is deleted.
Questions about the confidentiality of your data, the way we collect and process your data, or your requests to exercise your rights to your data will be answered by the responsible person at Kuća čaja d.o.o.:
House of Tea d.o.o.
Kralja Tomislava 6 (end of Kino Tesla)
HR – 21000 Split