FIRSTLINE GLOBAL EUROPA j.d.o.o., Glavani 49/2, 51221 Kostrena, Croatia, VAT: SI92596665, (hereinafter “we”) pays close attention to the protection of personal data. This document provides information on what data from our buyers are processed and for what purpose, if the data in our possession are based on the buyer’s consent or on a legal basis.
1. WHAT KIND OF PERSONAL DATA DO WE COLLECT?
If you use our services, we collect various types of data, such as contact information and other settings. We follow the type of items you are viewing in our online store, through which device and to which of our offers by email you have shown interest. Based on the data collected, we can develop more personalized offers, improve our services and our online sales. If you make a purchase from us, we also process the name and surname and other personal information that we need for the conclusion of the contract and the delivery of your orders. We collect the following personal information:
2. WHY DO WE COLLECT PERSONAL INFORMATION AND WHY DO WE HAVE THE RIGHT TO DO SO?
Within our activities, we process personal data for various purposes and to varying degrees, in particular:
What type of data processing can be performed without your consent depends on the purpose for which the related processing is related and in what relationship you are, if you are only a visitor to our online store or a buyer. Your data can be processed if you are the recipient of the goods or services that have been ordered by us, if you contact us or visit our online store.
If you visit our online store, we save and consequently read tiny files from your device, such as cookies. The so-called cookie is a small set of letters and numbers that we store on your browser or on your computer’s hard drive. Some cookies allow us to interact with your activities while you browse our pages from the moment you open the browser window until the moment you close it. The moment the browser window is closed, the associated cookies are deleted. Some cookies remain in the device for the set time and are activated every time they visit the sites created by the associated cookies.
We also use web signals (also known as web beacons). These are small images that have a similar function to cookies. Compared to cookies stored on your computer’s hard drive, web signals are an integral part of a site. For the sake of simplification in this document, all these technologies will be described later as cookies. Later in this document, we will only discuss storage space for simplification purposes.
Some cookies are stored directly on your device by our websites. These cookies help us to:
We also store cookies on our website on your device, which allow us to:
In order to display personalized offers and personalized advertisements in advertisements and social networks on other sites outside our domain, we also provide information on the online behavior of our social networks and advertisements. We do not provide these partners with your identification data. The list of social and advertising networks we use is listed in Who is managing your personal information and with whom do we share it?
How to monitor cookies?
Cookies can be managed and controlled in different ways. Keep in mind that the removal or blocking of cookies can adversely affect your user experience and accessibility to certain pages of our online store. Most browsers automatically accept cookies, but you can specify whether to accept cookies via the browser control that is normally found in the Tools or Browser settings menu. For more information on how to change your browser settings or how to block, manage or filter cookies, visit the website: www.allaboutcookies.org.
Use of personal information of website visitors
If you visit our online store, we process your information on your website based on our legitimate interest (i.e. without your consent) for the purpose of:
The information on your behavior on the web is not taken only through cooki but is completed with the following information:
For this purpose, we use personal data for a maximum period of 38 months. The data is stored in a pseudonymised form.
Data on user behavior on Web pages are also processed based on our legitimate interest (i.e. without your consent) in order to prepare personalized offers and personalized ads that we publish online. In this case, our legitimate interest is to offer promotions that suit you best. The collected data is then analyzed. Based on this data, we can classify our users into groups, preparing the offers that are closest to their interests. If then purchases are made, the data arrived together with the original they will be used for this purpose.
For this purpose, we use personal information for 1 month.
If a purchase is made from us
To make a purchase from us, you need to visit our online store, the operations described are in the section “If you visit our websites”. If the purchase is made on our site, the data processing will be extended as follows:
Treatment based on the implementation of the contract
If the purchase is made by a natural person, we process the information received only to process the order received. There is talk of identification, contact and information on the order.
If the purchase is made as a legal entity and the contract between us and a representative of the company is executed, we process the data in the same way, based on the conclusion and implementation of the contract with the person representing the company.
The use of data for the purpose of processing your order means that we use the data separately for:
For this purpose, we use personal data over time which is essential for the processing of your order, or for resolve a complaint.
Treatment on a legitimate interest basis
If the purchase is made with us, we retain your identification and contact information and order information based on our legitimate interest (without your consent) for the purpose of protecting legal claims and our records and internal controls . Our legitimate interest in this case is the protection of legal claims and the supervision of the regular provision of our services.
In addition, based on our legitimate interest (i.e. without your consent), we process your identification and contact information, settings and order information (if a purchase is made later) for the purpose of :
In order to create personalized offers and personalized ads that we display on web pages, as described in “If you visit our websites”, we also use information about your orders.
Your satisfaction with our services is measured on the basis of NPS research, which we send you via e-mail as part of the Judge.me program. We send the questionnaire to random users who made a purchase in the previous month. The survey results are used only for our personal use.
In order to protect legal complaints and to retain data for internal controls, we process the data for a period of 3 years and another year compared to complaints that are applied by the end of the prescription period. In the case of legal, administrative or other proceedings, we process your personal data for the period necessary for the duration of these proceedings and for the rest of the limitation period after its termination.
For other purposes, we use personal data for up to 6 months. Against this type of treatment that is carried out on the basis of our legitimate interest, you can object.
Processing based on compliance with legal obligations
We too must fulfill certain legal obligations. If we process the data for the purposes indicated above, we do not need your consent. On this legal basis, we process your identification and contact information, order data, in order to take into account the laws in force at the time of writing the memorandum in question, in particular:
For this purpose, we use personal information for up to 10 years (plus the current year) based to the last document issued relating to your order.
If you are the recipient of the goods or services that have been ordered by us.
If you are the recipient of the goods or services that have been ordered by us, we process your identification and contact information:
For the preparation, conclusion and execution of a contract with our customer, we use personal data in the time strictly necessary for processing the order. At the end of this period, the data will continue to be maintained on the basis of our legitimate interest in order to protect the legal claims and our records and internal controls, for a limitation period of 5 years and, if necessary, another year later. its expiry in the case of an application at the end of the limitation period.
When we initiate a judicial, administrative or other procedure, we process your personal information for the time strictly necessary for the execution of these procedures and until the remaining part of the limitation period expires at the time of its termination. Our legitimate interest in this case is to protect legal claims and to monitor the smooth execution of our services. For the purposes of compliance with legal obligations, we use personal data for a maximum of 10 years for each order.
If you communicate with us through different channels
If you communicate with us through various channels, in particular through call centers, e-mails, chats and social networks, your identification and contact information and mutual communication records are processed on the basis of our legitimate interest (or without your consent) for the purpose of:
For this purpose, we store personal data for a period of 3 months. If an order is made through one of our channels, we can store the data for the protection of legal requests for the 5-year prescription period and for another year after the expiry date in relation to the requests made at the end of the prescription. In the case of legal, administrative or other procedures, we process your personal information to the extent necessary for the duration of these proceedings and the rest of the limitation period after its cessation.
3. WHO PROCESSES YOUR PERSONAL INFORMATION AND WITH WHOM DO WE SHARE IT?
In most cases, we process your data for our purposes as their manager. In this case, we will forward your information to our partners for the provision of payments, transportation and other matters related to your order. We also provide information to our analytics who process it in accordance with our instructions. With your consent, we may also provide information to advertisers and social networks to display personalized ads on other websites.
Personal information is processed by us as managers. This means that we define the purposes defined above for which we collect your personal information and processing methods and are responsible for the correct implementation of this information.
Your personal information may also be transmitted to other entities operating as a manager:
4. FROM WHAT SOURCES DO WE OBTAIN PERSONAL DATA?
Personal data is collected directly from you through our online store or in communication with you. Some other information may also be obtained from our partners, such as banks or transportation companies.
We mainly process personal information provided by the user directly when purchasing items and services, during the creation and use of the account or when communicating with us, for example through a call center. We also collect personal information directly from you by following your online habits while browsing our online store or reading our messages.
If the purchase is made at our shop, we can receive further information on the orders from the banks, our partners who manage the payment systems and the transport partners, for example with the implementation of the sales contract concluded. account number information, payments made and delivery of goods.
5. TRANSMISSION OF DATA OUTSIDE THE EU
In some cases, we may also transfer your personal information to countries that are not members of the European Economic Area.
In the context of the transmission of data to the recipients listed in Who can manage your personal information and with whom we share it, we may also forward your information to third countries outside the European Economic Area, which does not necessarily provide an adequate level of protection of personal data.
These interventions will be carried out only if the recipient concerned undertakes to comply with the standard contractual provisions issued by the European Commission, accessible at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L: 2004: 385: 0074: 0084: CS: PDF
6. WHAT ARE YOUR RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA?
In connection with your personal information you have many rights. These include the right of access, review, cancellation and limitation of processing, transfer, opposition and appeal. Just like we have the rights and duties regarding the processing of your personal data in relation to the processing of your personal data. These rights include:
Right to know
In a nutshell, you have the right to know what information we collect, for what purposes and for how long, from where we collect your personal information, to whom we provide it, who processes it in addition to us and what your rights are in relation to processing of your personal information. You can read it all in the “Protection of customers’ personal information” section. However, if you are not completely sure of the personal information we collect about you, you can ask us to confirm whether or not we collect personal information in relation to you and, in that case, you have the right to know this information. Based on the right of knowledge, a copy of the data processed may be requested, providing you with the first free copy.
Right to correct data
The errors are human. If you see that your personal information is incorrect or incomplete, you have the right to ask to coreggerle as soon as possible.
Right to erasure
In some cases, you have the right to request the deletion of your personal information. The data will be merged in the shortest possible time if one of the following conditions occurs:
Keep in mind that even if one of the reasons described is satisfied, this does not mean that all your personal information will be immediately deleted. However, this right cannot be exercised if the processing of personal data continues to be necessary for the fulfillment of our legal obligations or for the determination, execution or defense of our legal claims (see “Why do we treat personal data and why are we entitled? “).
Right to limit the processing of data
In some cases, it is possible to exercise the right to limit the processing of personal data in addition to the right to erasure. This right allows you to request in some cases that your personal information is specifically marked and excluded from any processing operation – in this case the effect is limited in time (and not lasting as in the case of the right of cancellation). We must limit the processing of personal data:
Right to data transferability
You have the right to obtain from us all your personal information that you have provided to us and which is processed based on the contract entered into. Your personal data is provided in a structured, coherent and readable format. The simple transfer of data which is automatically processed in our electronic databases.
Right to object to data processing
For reasons relating to your particular situation, you have the right to object to the processing of personal data based on Article 6, paragraph 1, letter (e) or (f) of Regulation (EU) 2016/679 and to object to the processing data for direct marketing purposes (see “Why we process personal data and why we have the right”). The processing of your data for commercial activities will be stopped immediately. Also in other cases it will come used the same procedure.
Right to appeal
The exercise of the rights listed above, will in no way affect your right to lodge a complaint with the competent authorities. You can exercise this right when you believe that your personal data is treated in an unjustified way or in violation of generally binding legal rules.
7. HOW CAN CERTAIN RIGHTS BE EXERCISED?
To exercise the rights communicated in this document, you can contact us by e-mail firstname.lastname@example.org.
Your request will be taken into consideration as soon as possible, within a maximum time of one month. In special cases, especially when it comes to more complex procedures, we have the right to extend this deadline for another two months. Of course, if such an extension is necessary, and the reasons for it, a written communication will be sent.
FIRSTLINE GLOBAL EUROPA d.o.o. Glavani 49/2, 51221 Kostrena, Croatia