Data protection and privacy policy
PLANET MIRIO J.D.O.O. respects the privacy and protects the personal data of its users, business partners or other persons with whom it establishes business cooperation, and whose personal data it collects and processes in its daily business. The Data Protection and Privacy Policy is a fundamental document that describes the purpose and objectives of the collection, processing and management of personal data, as well as ensuring an adequate level of data protection (hereinafter: the ‘Rules’). In order to ensure fair and transparent processing, PLANET MIRIO J.D.O.O. provides you with clear information on the processing and protection of personal data that it collects and processes, and allows easy control and management of personal data and consents. The rules are formed in accordance with applicable regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR and the Act Implementing the General Data Protection Regulation (OG 42/18 ). PLANET MIRIO J.D.O.O. has appointed a Data Protection Officer whom you can contact at e-mail address info@mirio-design.com or by mail at X Trokut 10, 10000 Zagreb.
DATA WE COLLECT
1.1. While visiting our website and web store
You can visit our website and store without providing information about yourself. In this case, we will collect technical access data that your browser will automatically transmit to our server (server) when browsing our website. Access data includes the following information: – Time and date of access. – The address of the website you have accessed and are accessing. – The content of the request (addresses and file names). – Information about the browser and operating system used (versions, language settings). – Online credentials (e.g. IP address, device ID, session IDs). – Error messages, where applicable (if the requested content cannot be displayed). – The last page you visited to link to our page via a link. When you visit our website, your access data will be automatically stored in the log files of our server and subsequently anonymized by shortening or deleting your IP address. After this process, it will no longer be possible to draw conclusions about your person based on server log files. Also, when you visit our web store, we will collect information that you provide directly using the available features. For example, we’ll find out which products you’re interested in when you use the search feature.
1.2. Cookies
The PLANET MIRIO J.D.O.O. website and store use cookies to improve your user experience. A cookie is a standardized text file that your web browser stores on your computer for a period of time specified by the cookie provider. Cookies allow local storage of information such as language settings, shopping cart content, and temporary identification features that may be invoked during subsequent site visits to reset the appropriate settings that the user selected during a previous visit. This information can only be saved if you as a user enable it. Websites and stores cannot access information without your permission and cannot access other files on your computer. When you first visit our website and web store, you will choose the level of cookies you want to store on your computer and thus fully manage the process of using cookies. You can view and delete cookies used in your browser’s security settings. You can configure your browser settings to your liking and, for example, refuse to accept third-party cookies or any cookies.
1.3. During the delivery of the order in the web store
We will collect information about the products you order, as well as information directly collected in connection with the execution of your orders. Order execution information is as follows: – Information about ordered products, such as item numbers and sizes. – name and surname – delivery address – e-mail address – mobile phone number for contact for delivery – payment details – returns and complaints data (eg reasons for return, notice of defects) – numbers order – shipment tracking numbers – company name and contact person, company address and OIB (if you requested an R1 invoice) Even if you make several orders as a guest and useIf you provide identical master data, our systems will keep your data in a single record of user data to make it easier to maintain our customer database.
1.4. When you contact us
We will collect the communication information you fill in when you contact us via the contact form on our website, by email, phone or otherwise. Depending on the channel you are using, this may include, for example, contact information (eg e-mail address or telephone number) and the content of your message. Phone conversations with PLANET MIRIO J.D.O.O. for customers are not recorded, nor are any other conversations made to PLANET MIRIO J.D.O.O. telephone numbers. opt-in mail from Mailchimp service to confirm and save this information in our contact database.
We will also use offers provided by social networks such as Facebook and Instagram to interact with our clients. Note that PLANET MIRIO J.D.O.O. there is no impact on the terms of service of the social networks or their data processing policies. So be sure to check the personal information you provide to us via social media.
1.5. When you sign up to receive the newsletter
If you applied for PLANET MIRIO J.D.O.O. newsletter, we will store your information (e-mail address) that you have provided for this purpose to send the newsletter. You can unsubscribe from our newsletter at any time. To unsubscribe, use the unsubscribe link at the bottom of each newsletter.
WAYS OF USING COLLECTED DATA
2.1. Visit the website and store
When visiting and browsing the website and store, we will process access data, server log files and cookies collected in this context in order to make our website available to you, its contents and functionalities you use, and ensure the stability and security of our information system and database data. The legal framework for the lawfulness of data processing when visiting websites and trade is Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent f – processing necessary for the needs of legitimate interests – technical availability of the website.
2.2. Ordering products and executing sales contracts
We process your information in order to execute the contracts we have entered into with you and to provide you with the services and products you have requested. The purpose of processing is based primarily on the specific content of the contract. Further details on the purpose of data processing can be found in the General Terms and Conditions of Use of the Web Store. The legal framework for the lawfulness of data processing when processing orders and executing sales contracts is Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent b – processing necessary for concluding and executing the contract.
2.3. Customer support and communication within the relationship with existing customers
We process your data in order to provide customer support in the use of websites and web stores. This may include the following, for example: – processing of your requests to our customer service – non-commercial service communication (eg security information and technical support) < br class = "" /> The legal framework for the lawfulness of data processing when processing orders and executing sales contracts is Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent b – processing necessary for concluding and executing the contract.
2.4. Payment Processing
Depending on the payment method chosen, the information required for payment will be forwarded to the contractual partner making the payment. The billing service provider collects data within its own application, in which case the service provider’s privacy information applies. PLANET MIRIO J.D.O.O. does not have access to the data required for payment, nor does it store them.
The transfer of your data to external payment service providers is based on Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent b – processing necessary for the conclusion and execution of contracts.
2.5. Internal marketing research, optimization and bid improvement
We will use the data you enter (eg data on ordered products, returns) for internal statistical purposes and for market research purposes. Prior to use, we will make the data anonymous by removing all personal information, such as replacing your name and other data suitable for identification with random data. This way we can measure which pages of our web store and products are popular, which devicesour users generally use and from which regions our website is accessed. The collected data helps us to continuously optimize the existing offer and develop new functionalities and services. The legal framework for the lawfulness of this type of data is Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent f – processing necessary for needs of legitimate interests – improving the functionality of the website and the quality of the offer.
WEB ANALYSIS
3.1. Google Analytics
Our website uses the Google Analytics web analytics feature provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses cookies valid for 14 months to collect your access data when visiting our website. Google combines access data for this purpose into pseudonymous user profiles and transfers it to a Google server located in the United States after the first anonymization of your IP address. Therefore, we cannot determine which user profiles are associated with a particular user. This means that we can neither determine nor determine how you use our website based on data collected by Google. In addition, Google uses the EU-US Privacy Shield (LINK: https://www.privacyshield.gov/) in the event that personal information is sent to the United States in exceptional cases. Google therefore guarantees European data privacy principles when processing data in the United States. Google will use the information we collect from cookies on our behalf so that we can analyze the use of our website and web store and generate reports on the activity and usage of our website. See the Google Analytics Privacy Policy for more information. (LINK: https://support.google.com/analytics/answer/6004245?hl=en) You can opt out of Google Web Analytics at any time using one of the following options: – You can set your browser to block Google Analytics cookies – You can adjust Google Ad settings in Google – You can install the opt-out plugin at the following link: opt out of Google Analytics (LINK: https://tools.google.com/dlpage/gaoptout/) Legal framework for the lawfulness of this type of data processing is Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR, Article 6, paragraph 1, indent f – processing necessary for legitimate interests – analysis of how users use the website.
3.2. Facebook
For marketing purposes, our websites use the so-called conversion and retargeting tags (Facebook pixels) of the social network Facebook, Facebook Inc, 1601 Willow Road, Menlo Park, California 94025, USA (‘Facebook’). We use Facebook pixels to analyze the overall usage of our websites and the effectiveness of Facebook ads (‘conversions’). We also use Facebook pixels to show you customized ads based on your interest in our products (‘re-targeting’). To this end, Facebook processes the data collected on our websites through cookies and similar technologies. Facebook may send data collected in this context for analysis to a server located in the U.S. where the data is stored. Facebook uses privacy protection for the EU-US area in the event that personal data is sent to the US, the so-called Privacy Shield (LINK: https://www.privacyshield.gov/) If you have registered on Facebook and set Facebook account privacy settings, Facebook may additionally link the data collected about your visit to our website to your Facebook account and use it to place targeted Facebook ads. You can review and change the privacy settings of your Facebook profile at any time. If you opt out of processing data via Facebook, Facebook will only show general Facebook ads that are not selected based on data collected about you. See Facebook’s privacy policy for more information on how Facebook handles it. (LINK: https://www.facebook.com/about/privacy/)
3.3. Google AdWords and AdWords remarketing
Our website uses Google’s ‘AdWords Conversion Tracking’ and ‘AdWords Remarketing’ services. User actions defined by PLANET MIRIO J.D.O.O. (such as ad clicks, pageviews, file downloads) are recorded and analyzed using ‘AdWords Conversion Tracking’. We use ‘AdWords remarketing’ to present you with customized ads for our products on Google’s partner sites. Both of these services use cookies and similar technologies for this purpose. Google may submit data collected in this context for analysis on a server located in the United States where the data is then storedjuju. Google uses the EU-US Privacy Shield (LINK: https://www.privacyshield.gov/) in the event that personal information is sent to the United States and guarantees European data privacy principles in the United States. If you have a Google Account, Google may, depending on your Google Account settings, associate your web browser and app history with your Google Account and use your Google Account information to personalize your ads. If you do not want this link to your Google Account, you must sign out of your Google Account before accessing our website. You can opt out of personal data processing for custom online ads on the Google advertising network at any time using one of the following options: – Google Ad Customization Settings (LINK: https: // www.support.google.com/ads/answer/7029158) – You can install Google’s free opt-out plugin (LINK: http://www.google.com/settings/ads/plugin) for Firefox, Internet Explorer, or Chrome (does not work for mobile browsers) – You can opt out of customized Google ads and ads provided by a number of other providers participating in the ‘Your Online Choices’ initiative on the website http://www.youronlinechoices.eu Please note that if you turn off custom advertising, Google will only show general ads that aren’t selected based on your collected access data.
CASES IN WHICH WE WILL SHARE PERSONAL DATA
Basically, we will only share your information if: – you have expressly agreed to it in accordance with Article 6 (1) (a), Regulation (EU) 2016/679 of the European Parliament and of the Council – General Regulation on data protection – GDPR – sharing is necessary under Article 6 (1) (f) in order to establish, enforce or defend legal claims, and there is no reason to assume that you have a overriding legitimate interest in your data do not share – sharing is necessary to comply with the legal obligation under Article 6 (1) (c) or (e) of the General Data Protection Regulation GDPR, especially if we are required to provide information to a public body
– Sharing is permitted by law and is necessary under Article 6 (1) (b) of the General Data Protection Regulation, GDPR to execute the contract with you or to take action on your request before concluding the contract. Some of the data processing described here may be performed by external service providers acting on our behalf. The service providers listed in this document may include, computer centers that store and maintain our websites and databases, IT service providers that maintain our business systems, as well as consulting firms. If and to the extent that we share information with our service providers, that information may only be used for the purpose of performing their services. The processing of your data by contracted service providers will take place as part of the processing and execution of your order in accordance with Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation – GDPR. Contractual service providers are carefully selected business partners. They are contractually bound by our instructions, implement appropriate technical and organizational measures to protect the rights of data subjects and are subject to regular inspections.
HOW LONG WILL YOUR DATA BE STORED
Unless otherwise stated herein, your data will only be stored for as long as is necessary to fulfill our contractual or legal obligations or the purposes for which the data was originally collected or as long as we have a legitimate interest in storing such data. In all other cases, your personal data will be deleted, except for data that we must retain in accordance with legal retention periods. However, in such cases we will limit the processing of data, ie your data will be used only in accordance with legal obligations. Normally, your orders and payment information and other information, if applicable, are subject to legal retention obligations, so we are required to retain such information for up to ten years. Even if the data is not subject to legal retention obligations, we may refrain from deleting your data in cases permitted by law and limit its processing instead. This may apply in particular in those cases where such information may be requested for further processing of the contract or for the exercise of rights or for the purpose of legal defense. The duration of the processing restriction will depend on the legal deadlines of the restriction.
YOUR RIGHT TO DATA PROTECTION
You can contact our Data Protection Officer at any time to exercise your legal right to data protection described below (contacts above). You always have the right to receive information about our processing of your personal data. In providing such information, I will explainemo the data processing process and provide you with an overview of your personal data that we store. If any of the information we have stored is inaccurate or out of date, you have the right to request a correction of the information. You can also request deletion. If deletion is not possible in exceptional cases due to other legal provisions, the data will be blocked so that they are available only for the stated legal purpose. You can also restrict the processing of data, for example, if you feel that the data we store is inaccurate. You have the right to transfer data, ie at your request we will provide you with a digital copy of the personal data you have given us. You also have the right to file a complaint with the Data Protection Supervisor. The competent supervisory body is the Agency for Personal Data Protection, Martićeva 14, 10000 Zagreb, e-mail: azop@azop.hr.
RIGHT OF WITHDRAWAL OF CONSENT AND RIGHT OF COMPLAINT
If you wish to exercise your right of withdrawal or objection below, please send a notice to the Data Protection Officer at the contact details provided in the introductory part of the text.
7.1. Withdrawal of consent
Article 7 (3) of the General Data Protection Regulation GDPR (EU) 2016/679 gives you the right to withdraw any consent you have previously given. This means that in the future we will no longer continue to process data based on your consent. Withdrawal of your consent will not affect the lawfulness of processing based on consent prior to its withdrawal.
7.2. Objection to the processing of your data
If we process your data on the basis of legitimate interests in accordance with Article 6 (1), indent f of the General Data Protection Regulation GDPR (EU) 2016/679, you have the right to object to the processing of your data under Article 21 if there are reasons arise from the specifics of your situation or if the complaint is directed against direct advertising.
DATA SECURITY
We use all appropriate technical measures to ensure data security, and in particular to protect your data from risks during data transfer, as well as from unauthorized access by third parties. These measures will be adjusted from time to time in line with the latest developments. To secure the personal information you enter on our website, we use a secure transport protocol (SSL) that encrypts your information during transmission.
CHANGES TO THE DATA PROTECTION AND PRIVACY RULES (GDPR)
We will update the data protection and privacy rules from time to time, when adapting to new versions of the website and web store or when changes in legislation. Material changes will be documented in this document, and we will ensure the consent of our users if necessary. Last modified: 04.10.2021.
