Privacy | Sarmenta

Last updated: July 25, 2023

Data Controller:

Sarmenta d.o.o., Strojarska 4, 10000 Zagreb, OIB: 23681555580.

All information regarding data processing and usage is available through the following contacts:

• via post: Sarmenta d.o.o., Strojarska cesta 4, 10000 Zagreb, Croatia

Introduction

Sarmenta d.o.o. ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This privacy policy aims to inform you about the types of personal data we collect, how we use them, with whom we share them, and your rights regarding your data, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Implementation of the General Data Protection Regulation Act (NN 42/2018).

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact information: Name, email address, phone number, postal address, etc.;

• Communication data: Any data you voluntarily send us (e.g., emails, inquiries, etc.);

• Usage data: Information on how you use our website;

• Marketing data: Your preferences for receiving marketing materials from us.

The personal data you provide will be stored securely to prevent unauthorized access or disclosure. Access to your personal data will be limited to authorized employees of Sarmenta d.o.o. or trusted partners who are obligated to adhere to strict data protection rules.

3. Legal Basis for Data Processing

The legal basis for processing personal data is the legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR) (EU) 2016/679) and/or the consent that is freely given. The data subject shall have the right to withdraw his or her consent at any time.

4. Purpose, Processing and Storage of Personal Data

We will use your personal data for the following purposes:

• Responding to your inquiries and providing customer support;

• Improving our website and enhancing user experience during your web-site visit (e.g., cookies);

• The temporary storage of the IP address by the system is necessary to enable the provision of the website to the user's computer.. For this purpose, the user's IP address must remain stored during the session.

• Sending marketing an PR communications, where processing is based on the data subject's consent.

All personal data will be used only for the purposes for which they were collected and for which there is a valid legal basis, and they will not be made available to third parties in any way, except for legally prescribed purposes.

Data will be deleted when they are no longer needed to achieve the purpose for which they were collected. Session cookies contain information that is stored in a temporary memory location which is deleted after the session ends.

5. Cookies

To provide you with a better user experience during your visit to our website, Sarmenta d.o.o. uses technology known as "cookies." Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit our website. They help us understand your preferences and track how you use our site.

By using our website, you agree to the use of cookies in accordance with this Policy. However, you have the option to control cookie settings in your web browser. You can refuse cookies or request notification before storing cookies on your device. Please note that blocking cookies may affect website functionality.

Our website may contain links to third-party websites that have their own cookie policies. We recommend that you read their policies to better understand how they use cookies.

Some cookies remain stored on your device only for the duration of your visit to our website, while others are "persistent" and remain stored even after you leave our site. The duration of cookies may vary, but we will always store them only for as long as necessary to achieve the purpose for which they were set.

6. User Rights related to Personal Data

The user has the following rights at any time:

• Rights to be informed regarding the processing of personal data;

• Right to withdraw consent to the processing of personal data. Withdrawing consent will result in the cessation of processing personal data.

• Right to rectification in cases where personal data being processed is incomplete or inaccurate;

• Right to erasure in cases such as the cessation of the purpose of processing, withdrawal of consent in cases of objections to data processing, or in cases of data processing contrary to personal data protection regulations;

• Right to restriction of processing in cases where the accuracy of the data is contested during the verification period, if the processing was unlawful but deletion was refused, and instead, the restriction of data usage is requested, if the data is no longer necessary for the intended purposes but is still needed to fulfill legal requirements, or if an objection is submitted due to the distribution of that data;

• Right to data portability to another data controller when technically feasible;

• Right to lodge a complaint regarding the processing of personal data by Sarmenta or the Croatian Personal Data Protection Agency if the processing is performed for the execution of tasks of public interest, for the exercise of public authority, or if Sarmenta relies on its legitimate interests when processing data.

In the event that you use any of the above rights excessively and with an obvious intention of misuse, Sarmenta reserves the right to charge you a reasonable fee for handling the request or to refuse your request.

If you have any questions or requests regarding your personal data, please contact us:

• via email: info@sarmenta.hr

• via post: Sarmenta d.o.o., Strojarska cesta 4, 10000 Zagreb, Croatia

7. Right to Lodge a Complaint with the Personal Data Protection Agency

If you have objections regarding the way we use your data, you can contact the Personal Data Protection Agency through:

• the agency's website www.azop.hr or

• via post: Personal Data Protection Agency, Martićeva ulica 14, 10000 Zagreb, Croatia

We regularly review and, when appropriate, update this Privacy Statement as our services and the use of personal data evolve. We will occasionally update this Statement to reflect changes in our services and customer feedback. We encourage you to regularly review this Statement to stay informed about how we process your personal data.

8. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. All changes will be posted on this page, and the "Last Updated" date will be revised accordingly.