Information on the processing of personal data

Rudan d.o.o., hereinafter referred to as the Service Provider, in conducting its activities, collects and processes personal data of website users, hereinafter referred to as the Service Recipients, in compliance with all relevant laws and regulations.

In order to provide you with the best experience when using our website, we use technologies such as cookies that store and/or access device information. By accepting these technologies, or by giving consent to their use, you allow the processing of data such as your browser's behavior or unique IDs on this website. Refusal or withdrawal of consent may negatively affect certain functionalities or features of the website during its use.

The data controller for personal data is Rudan d.o.o.

The service provider is the data controller in accordance with the laws and regulations on the protection of personal data.

As the data controller, the service provider determines the purpose and means of processing personal data and is responsible for the storage and use of personal data in paper and/or electronic form.

The service provider may also act as a data processor in its business operations when processing personal data according to the written instructions of the data controller.

Data Protection Officer

The service provider has appointed a Data Protection Officer in accordance with legal and regulatory requirements, whom you can contact regarding any questions related to the processing of personal data or exercising your rights regarding personal data protection.

Personal data we collect

The personal data we collect depends on: the type of service provided, users and clients, the customer's intention to use the services, the type of contract concluded with clients, as well as the customer's intention to exercise their rights based on legal and regulatory provisions on personal data protection.

Your data is not used for any other purpose, nor is it disclosed to any third party, unless required by law, and will be deleted when no longer necessary. Although no online service is 100% secure, we make every effort to protect your data from unauthorized access, use, alteration, or destruction, and take reasonable measures to do so.

We use appropriate business systems and procedures to protect the personal data you provide us. Additionally, we employ security procedures and technical and physical restrictions to access and use personal data on our servers.

In the event of potential collaboration with external partners on specific projects, the Service Provider may disclose information about you without which the entire process would not be feasible to the external partner. External partners must adhere to the Data Privacy Policy of the website and specific parameters of operation as agreed upon in the collaboration contract.

Personal data primarily collected during the ordering process and service provision, without which the service cannot be executed, include at least:

• basic personal information (first name and last name)
• basic contact information (email address)
• data related to website usage, such as when using the contact form
• data necessary for contract, offer, or invoice creation
• other personal data necessary to fulfill the client's rights based on consumer protection laws.

Note

In case of legal obligation: in situations where it is required by law or necessary for the prevention, detection, or punishment of crimes and fraud, your personal data will be shared with the competent authorities. We may disclose your information in response to a court order or other legitimate request from the government.

Collecting for the purpose of sales relationship

If requested by the relevant legal regulations from the Service Provider, for specific reasons, they will additionally seek explicit consent from the Service Recipient.

The reasons for processing personal data for the purpose of concluding and fulfilling contractual obligations are:

• sale or provision of services
• sales and marketing activities of the Service Provider
• administration of contractual relationship, invoices, offers, and appointment calendars
• management and receipt of objections, complaints, and claims
• debt collection process or forced debt collection.

The reasons for processing your personal data based on legitimate business interests are:

• informing about changes related to business terms
• prevention and detection of fraud.

Note

For all other activities not covered by the reasons mentioned above, the Service Provider will request additional consent. The Service Recipient, at any time, has the right to withdraw the given consent.

Collection and Use of Personal Data

Processing of Personal Data

User personal data will be processed within the European Economic Area (EEA) by data processors listed in the Access to Personal Data section, whose responsibility and obligation to protect personal data and maintain their confidentiality are defined by the contractual relationship and in accordance with all technical and organizational measures and legal regulations governing data protection.

Your personal data collected by the Service Provider for the purposes stated in the Collection and Use of Personal Data section will not be accessible to anyone unauthorized by the Service Provider.

Exercise of rights

When legally provided, the Service Recipient has the right to information about the processing of their personal data; withdraw their consent at any time if we process personal data with consent given; correct or supplement personal data to ensure accuracy; delete personal data when they are no longer needed for the purposes stated above; lodge a complaint with the Service Provider or the competent state authority.

The service provider provides all interested parties with communication channels for exercising their rights related to personal data protection by submitting requests:

• in person
• via email at info@rudan.com

Note

Regardless of the chosen communication channel, the request is submitted in person and in a way that the Service Provider can identify the requester.

The right to lodge a complaint with a supervisory authority

In addition to lodging a complaint about the processing of personal data with the Service Provider, a complaint about the processing of personal data can also be filed with the Croatian Personal Data Protection Agency, located at Martićeva 14, Zagreb, 00385 (0)1 4609 999, azop@azop.hr , www.azop.hr

Storage of personal data

The retention period of user personal data depends on the purpose for which we process them:

• Data collected solely for sales transactions or other services are stored for an additional 12 months from the date of the last transaction in which they were used (e.g., quotes, etc.)
• Data collected for processing based on legal grounds are kept in accordance with the time limits specified in the relevant law provisions (e.g., Accounting Act, etc.)

Updating information on the processing of personal data

The service provider regularly reviews and updates the Information on the Processing of Personal Data in accordance with changes in its own business processes or based on legal and regulatory obligations. The valid version of the Information on the Processing of Personal Data is available on the rudan.com website.

If there are significant changes that substantially affect the processing of personal data, we will promptly publish the information on the website and directly inform you.

Cookies (kolačići) and internet activity tracking

A cookie is a text file that websites, visited by the Service User, store on their device (computer, tablet, smartphone). The Service Provider uses cookies to make it easier for visitors to access and improve the features provided by the website.

You can find out more about cookies at the following link: rudan.com/en/privacy-policy/

Note

The company Rudan d.o.o. reserves the right to change the content on this page at any time and update it according to the needs of the business and technological innovations that may be introduced.