Privacy policy - Protection of personal data
RINZOL d.o.o. as the Controller of processing of personal data (further: controller) protects your privacy, made possible by the best and safest way of using the internet. This document refers to the website www.rinzol.com and the control of the way data is collected and used.
In order to help us protect your privacy, we ask you to read this text in its entirety to understand what data we collect and the way in which we use them. In the context of this document we use the legal term „Data subject“ when referring to you as the user of the website.
You can send all questions related to the confidentiality of data to the controller, by e-mail to the following address: info@rinzol.com
Collecting personal data
RINZOL d.o.o. collects data such as: name, surname and e-mail address, as well as data received with your inquiry in the column „CONTACT“.
Additionally, RINZOL d.o.o. automatically collects data about the hard-drive or the software of your computer. This data can include: your IP address, type of web-browser, domain name, time of access and website addresses. RINZOL d.o.o. uses this data in order to offer its services, maintain their quality, and receive general statistical information related to the use of the website.
RINZOL d.o.o. as the Controller of processing of personal data (further: controller) protects your privacy, made possible by the best and safest way of using the internet. This document refers to the website www.rinzol.com and the control of the way data is collected and used.
The use of your personal data
RINZOL d.o.o. collects your personal data and uses them in order to maintain the website and provide you with the services that you are looking for.
RINZOL d.o.o. will not forward the data to third parties.
RINZOL d.o.o. will not sell or lease user lists to third parties, unless you gave your permission.
RINZOL d.o.o. keeps your personal data for time periods prescribed by mandatory legal regulations. In instances in which the periods are not prescribed, we keep them for as long as it is necessary to realize the purpose for which they were collected, including the applicable periods of limitation. After the expiration of time periods we delete Personal data or destroy them in other appropriate ways.
We inform you that you will be notified about any security breaches in our system and theft of personal data within the timeframe of 72 hours.
We inform you that you have the right to consult your Personal data which we have collected, processed and which we keep.
Possibility of contact by website
Website RINZOL d.o.o. contains information which enable quick contact via the column „Contact“ as well as direct communication, including an e-mail adress where we can be reached.
If the data subject contacts the controller of personal data via e-mail or the contact form, the transmitted personal data is automatically stored.
The personal data transmitted voluntarily by the data subject to the controller are automatically stored with the purpose of processing or further communication with the data subject. There is no transmission of this type of personal data to a third party.
Routinely erasing or blocking personal data
The controller will process and keep personal data of a data subject exclusively during the time necessary to realize the objectives of keeping personal data, or during the timeframe allowed by EU legislature or other legislators who have jurisdiction over the controller.
If the objective which required storing personal data cannot be fulfilled or the timeframe for keeping personal data set by EU legislature or other competent legislators expires, the personal data of the data subject will be routinely erased or blocked in accordance with the legal prerequisites.
Rights of the data subject
THE RIGHT TO OBTAIN CONFIRMATION OF PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to obtain confirmation from the controller about whether their personal data are being used or processed. If the data subject wants to exercise this right to obtain confirmation, they can contact the controller at any time at the e-mail address: info@rinzol.com.
THE RIGHT OF ACCESS TO PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to obtain information from the controller about their stored personal data, as well as a copy of demanded personal data, free of charge and at any time. Furthermore, European regulations and directives allow the data subject to access the following information:
- the purpose of the processing;
- the categories of personal data concerned;
- the recipient or the category of recipients to whom the personal data have been or will be disclosed, especially the recipients from third countries or international organizations;
- when possible, the foreseen timeframe of keeping the personal data, or in case of impossibility, the criteria that determines the timeframe;
- the existence of the right to request rectification or erasure of personal data, restriction of processing, or the right to object to the processing of personal data;
- the existence of the right to submit a complaint to a supervisory authority;
- if the personal data are not collected directly from the data subject, available information about the source of the data;
- the existence of an automated decision-making process which is referred to by the article 22, paragraphs 1 and 4 of the General Data Protection Regulation, and in the specific case the available information about the logic of the automatism, as well as the importance and foreseeable consequences relative to the data subject.
Furthermore, the data subject has the right to be informed whether their personal data are transmitted to third countries or international organizations. In that case the data subject has the right to be informed about security measures taken in the data transmission.
If the data subject wants to use this right of access, they can contact the controller at any moment at the e-mail address: info@rinzol.com.
THE RIGHT OF ACCESS TO PERSONAL DATA
Every data subject has the right guaranteed by EU legislature to receive a rectification of inaccurate personal data from the controller at any moment. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If the data subject wants to use this right of access, they can contact the controller at any moment at the e-mail address: info@rinzol.com.
THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN)
Every data subject has the right guaranteed by EU legislature to demand from the controller the erasure of personal data connected to them without delay, at any moment. The controller has the obligation to erase all personal data without delay, where at least one of these condition is applicable, as long as the processing is not necessary:
- The personal data are no longer necessary in relation to the purpose for which they were collected or processed.
- The data subject withdrew consent for the processing of personal data on which the processing is based according to article 6, paragraph 1, or article 9, paragraph 2 of the General Data Protection Regulation, and where there is no other legal ground for the processing.
- The data subject objects to the processing in accordance to article 21, paragraph 1 of the General Data Protection Regulation, and there are no legitimate grounds for the processing, or the data subject objects to the processing in accordance to article 21, paragraph 2 of the General Data Protection Regulation.
- The personal data have been unlawfully processed.
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;.
- The personal data have been collected in relation to the offer of information society services referred to in article 8, paragraph 1 of the General Data Protection Regulation.
If at least one of the listed reasons is applicable, and the data subject requests the erasure of personal data which are collected by the website RINZOL d.o.o., they can contact the controller at the e-mail address: info@rinzol.com.
The controller will make sure that the erasure gets carried out without delay.
Where the controller has made the personal data public and is obliged according to article 17, paragraph 1 of the General Dara Protection Regulation to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data. The controller will implement the mentioned measures in each individual case on the RINZOL d.o.o. website.
THE RIGHT TO RESTRICTION OF PROCESSING
Every data subject has the right guaranteed by the EU legislature to obtain from the controller the restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
- The data subject has objected to processing pursuant to article 21, paragraph 1 of the General Data Protection Regulation, pending the verification whether the legitimate grounds of the controller override those of the data subject.
If at least one of the reasons listed above applies, and the data subject requests the restriction of processing of the personal data which get collected by the website RINZOL d.o.o, they can contact the controller at the e-mail address: info@rinzol.com. The controller will provide the restriction of processing.
THE RIGHT TO DATA PORTABILITY
Every data subject has the right guaranteed by the EU legislature to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to article 6, paragraph 1, point a, or article 9, paragraph 2, point a of the General Data Protection Regulation or on a contract pursuant to article 6, paragraph 1, point b of the same Regulation; and the processing is carried out by automated means, for as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to article 20, paragraph 1 of the General Data Protection Regulation, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and where it does not adversely affect the rights and freedoms of other data subjects.
In order to exercise their right to portability of personal data, the data subject can contact the controller of the website RINZOL d.o.o. at any moment at the e-mail address: info@rinzol.com.
THE RIGHT TO OBJECT
Every data subject has the right guaranteed by the EU legislature to object based on their individual situation, at any moment, to the processing of personal data which relate to the data subject, which is based on article 6, paragraph 1, points E and F of the General Data Protection Regulation. It can also be applied to profiling based on the same Regulation.
In case of an objection, the RINZOL d.o.o. website will not continue the processing of the personal data unless a compelling legitimate grounds exist for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the RINZOL d.o.o. website will not continue processing the personal data of the data subject for direct marketing purposes.
Additionally, the data subject has the right to object to processing of personal data by the RINZOL d.o.o. website, on grounds relating to their particular situation, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to article 89, paragraph 1 of the General Data Protection Regulation, unless the processing is necessary for reasons of public interest.
Additionally, in the context of the use of information society services, despite Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING
Every data subject has the right not to be subject to decisions based solely on automated processing, including profiling, which can produce legal effects concerning them or similarly significantly affect them, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller; or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or (3) is based on the explicit consent of the data subject.
If the decision (1) is necessary and (c) of paragraph 2, the data controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the decision (1) is necessary for a contract between the data subject and the controller; or (3) is based on the explicit consent of the data subject, the RINZOL d.o.o. website will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wants to exercise their rights relative to the automated individual decision-making, they can contact the controller of the RINZOL d.o.o. website at any moment, at the e-mail address: info@rinzol.com.
THE RIGHT TO WITHDRAW CONSENT
Every data subject has the right guaranteed by EU legislature to withdraw their consent for processing of personal data at any time.
If the data subject wants to exercise their right to withdraw their consent, they can contact the controller at any time at the e-mail address: info@rinzol.com.