Privacy policy Leaf

In accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016; hereinafter: GDPR), which has been in full force and effect since 25 May 2018 in the Republic of Croatia and all EU member States, as well as with the Act implementing the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), i.e. in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and the best European practice, PODRAVKA d.d., headquartered in Ulica Ante Starčevića 32, Koprivnica (City of Koprivnica), OIB: 18928523252 (hereinafter: PODRAVKA), as the controller in regard to personal data of users of its services and customers, has developed these Privacy Rules. 

This Privacy Policy (“Policy”) outlines how PODRAVKA collects, uses and manages your personal data located on and available through the use of the website: https://fant.podravka.hr/en/.

This Privacy Policy applies to all services offered by PODRAVKA and its objective is to inform our visitors, partners and users of our services (hereinafter: “data subjects”) in a clear and transparent manner about the operations of processing their personal data and about their rights. 

PODRAVKA is committed to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data and how we will use it. In regard to personal data we collect, PODRAVKA is the “controller” and as such determines the need for and means by which personal data are processed. 

As the provider of website services PODRAVKA is committed to protecting the privacy of personal data.

If you wish to contact us in connection with this Policy or your personal data, please use the following contact data: 
PODRAVKA d.d.
Ulica Ante Starčevića 32
48 000 Koprivnica

You can contact the Data Protection Officer at:dpo@podravka.hr

How and when do we collect your personal data? 

We collect your personal data when this is necessary to meet your needs and requests, and perform services or our business operations:

a) at the moment you access the website https://fant.podravka.hr/en/ we collect your IP address, which is also considered personal data;

b) at registration as a user or recipient of the newsletter or other notifications about our products and promotions. As the controller, we will request you to enter your personal data such as e-mail address, first name, last name and telephone number (part of the data is marked as optional). The legal basis for the processing of your data is your consent. A user who subscribes to notifications about our products and promotions by entering his/her data on the webpage https://fant.podravka.hr/en/ grants his/her consent to the processing of his/her personal data. A user may withdraw his/her consent at any time by notification to the e-mail address of the Data Protection Officer;

c) situations where we collect other types of data such as date and time of access to the page, information about the hardware, software or web browser you use, your computer operating system, app version and language settings. We can collect information about clicks and your access to the pages https://fant.podravka.hr/en/ shown to you;

d) when you contact our office and ask us for help or ask a question in order to exercise any of your rights guaranteed by applicable regulations;

e) when you contact us through social media, we collect data you have provided to us when making enquiries or requests; 

f) when you participate in our prize games, we process data depending on the type of the prize game, which we inform you about in the rules of the prize game. The data that can be processed are for example name, family name and address for prize delivery;

g) when you fill out a satisfaction survey, we process data such as your IP address;

h) when you send us any inquiry regarding our offer, we process your contact and/or other data you have provided when sending the inquiry;

i) when you send an application for an unadvertised job, we process data such as your first name, family name, age, vocation, occupation, work experience, contact phone and other data contained in your application;

j) when registering on a website, the date and time of the IP address assigned by the Internet Service provider (ISP) and used by the data subject are stored. Registration, with consent, enables us as the controller and organizer to offer contents or services that can only be offered to registered users due to the nature of their subject. Registered persons may at any time change personal data provided at registration or completely erase them from the records,

PODRAVKA recommends to all users of the site to carefully manage their registration password. When choosing characters, we recommend a combination of uppercase and lowercase letters and numbers. Use a password with at least six characters. We recommend changing your password periodically (at least once a year).

The aforementioned specific categories of your personal data are collected either on the basis of the consent shown to you upon arrival at https://fant.podravka.hr/en/ by means of a pop-up window, on the basis of legitimate interest (for example in cases where cookies are necessary for the functioning of https://fant.podravka.hr/en/, when we send you some interesting notifications and/or offers of promotions) or in order to fulfil our obligations arising from applicable regulations of the Republic of Croatia. 

When the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent should be notified to the controller by e-mail at dpo@podravka.hr or by post to PODRAVKA d.d, Ulica Ante Starčevića 32, 48 000 Koprivnica, specifying ˝Attn. Data Protection Officer˝. The withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.

Please note the obligatory data that we request from you; if you do not provide the requested information specified as obligatory because necessary for performing an activity you have requested or expect, you will not be allowed to access such activity or the activity will not be technically feasible. 

To summarize, we typically collect your personal data directly from you when you fill out a specific form or when you want to receive our newsletter.

We do not use your personal data for marketing purposes unless you tell us you agree. If you want us to send you details of our products, events, services, offers and promotions, please give us your consent for this by subscribing to our newsletter. 

Your personal data are treated as confidential and appropriately protected by PODRAVKA and/or its trusted partners.

What data do we collect directly from you and for what purposes?

Typical categories of data we collect from users are the following: e-mail address.

We collect your personal data in order to:

• perform a service, fulfil a contract or ensure the provision of a service requested
• enable the use of all services on the website https://fant.podravka.hr/en/
• respond as efficiently as possible to your query and process your requests
• process the data statistically
• send materials or offers or make contact 
• improve the quality of contents, functionalities and services.

What privacy rights do you have? 

Please note that you have the right to request the following from PODRAVKA at any time: 

• to give you access to your personal data

You can ask PODRAVKA what personal data it uses and ask for access to them. You have the right to know the purpose of processing, which categories of your personal data we hold, authorities or categories of authorities we share your personal data with, retention period and the source of the data if they are indirectly collected.

You can contact us if you want a copy of some or all of the personal data we hold about you.

• rectification of inaccurate data

We want your personal data to be accurate and up to date. You may request us to rectify or remove data that you think are inaccurate or outdated. 

• erasure of personal data

You can request PODRAVKA to stop processing or even erase your personal data. If we need your personal data for fulfilling a contractual obligation to you, PODRAVKA may cease to be capable for fulfilling it. Further, if your personal data are required for a specific legal obligation (e.g. tax obligation), we may not be able to fulfil your request.

• Restriction of access to your data (by us and/or third parties) in certain processes or entirely

If you wish to contest the accuracy of any data, or if we no longer need them for the purpose of processing, but you need them to pursue, exercise or process any legal claims, or you have objected to the processing on any grounds we consider legitimate, you have the right to request restriction of the processing of your personal data.

• lodge a complaint about the manner in which we use your data

Remember that your have the right to object to the processing of personal data on a legal basis which PODRAVKA considers legitimate. 

• request transfer of data to another controller (right to portability)

If the processing is based on your consent or carried out automatically, you have the right to request transfer of data to another controller.

In order to exercise any of the above rights please use the contact data provided at the beginning of this Privacy Policy.

If you feel that your rights have been breached, you have the right to lodge a complaint to the Croatian Personal Data Protection Agency, Selska cesta 136, HR – 10 000 Zagreb, e-mail: azop@azop.hr.

Where are your personal data stored?

We keep the personal data we collect about you in a safe environment. Your personal data are protected from unauthorised access, disclosure, use, alteration or destruction by any organisation or individual. 

The processed data are stored on our premises and in safe IT systems, however, sometimes we store them on the servers of our trusted service providers in the EU. 

PODRAVKA ensures that personal data are kept in a secure place (including reasonable administrative, technical and physical safeguards against unauthorised utilization, access, disclosure, copying or alteration), which can only be accessed by authorised persons. All authorised persons sign a confidentiality declaration.

Data collected for the purposes set out in this Policy will only be stored for as long as necessary for the fulfilment of the mentioned purposes. Your personal data will not be kept in any form that permits identification longer than PODRAVKA reasonably considers necessary for the purpose for which they have been collected or processed. PODRAVKA will keep certain personal data for the period prescribed by the law or regulation obliging PODRAVKA to retain data (more info under “For how long will PODRAVKA store your personal data”).

If you have given us your consent (for example, you have subscribed to our newsletter or selected a certain category of cookies), we will process your personal data until you withdraw your consent. If you make a legitimate objection to the processing of personal data which is based on a legitimate interest, we will not process your personal data in the future. 

In addition, please note: if a judicial, administrative or extrajudicial procedure is initiated, personal data may be stored until the end of such procedure, including any period for enforcing a judicial remedy. 

Does PODRAVKA exchange data with third parties?

Privacy protection is important to us and we will never share your personal data with any third party except for the purposes described in this Policy. We will always notify you of sharing and transferring your data.

PODRAVKA cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do, such data are transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with the EU legislation.

In some cases, our partners providing services on behalf of or for PODRAVKA may process your data outside the EU. However, contracts we conclude with such entities oblige them to treat your data with special security measures in accordance with legislation in force in EU Member States. 

On 10 July 2023, the European Commission adopted a new adequacy decision allowing personal data to be freely transferred from the European Union to companies in the United States participating in the Privacy Shield Framework.
The adequacy decision is based on Article 45 of GDPR and constitutes a mechanism ensuring secure and lawful transfer of data to third countries. Companies in the United States that want to participate in the Privacy Shield Framework have to self-certify and join the Data Privacy Framework List. 

Besides, if our contractual partner is based in the United States, we will review the existing contracts and check the security standards our partner guarantees in order to ensure the protection of all our data subjects in accordance with the latest standards approved and recommended by the competent institutions.

The purposes for which we share data with our trusted partners are, for example, marketing, maintenance of the website https://fant.podravka.hr/en/, advertising, payment processing, shipment (delivery) and other services within and outside https://fant.podravka.hr/en/. These service providers are obliged, under the relevant contracts, to use the data entrusted to them strictly in accordance with our guidelines and solely for the purposes precisely determined by us. We also oblige them to adequately protect your data and to treat them as a business secret.

Once a year we audit all our partners to assure that the protection of your personal data remains at the required level and complies with applicable regulations.

For how long will PODRAVKA store your personal data? 

PODRAVKA will not store your personal data longer than necessary to fulfil their purpose and in any case no longer than 3 years, except where the law prescribes a longer retention period (for example, data related to unilateral contract termination and complaints will be kept for 1 year, data related to the exercise of your privacy rights permanently, data related to prize games for 5 years, e-mail addresses for the purpose of sending newsletters until consent withdrawal, data on invoices for 11 years).

You can find out more about data storage periods by contacting our Data Protection Officer.

To what purposes will we use your data?

We can use your personal data in several different ways, mostly to perform our legal and other obligations to you, but sometimes also to improve your user experience of the website and for security reasons. 

The purposes to which we use your data are described in this Policy. If your data is processed for any other purposes, you will be notified thereof prior to such (new) processing. 

Cookies

In order to maintain the website and ensure that its functionalities are at the expected level, PODRAVKA uses a technology known as “cookies”. 

Cookies are small files that we send to your computer and can access them later. They can be temporary or permanent. Thanks to cookies, you can easily search our website. Cookies show us your interests and those of other visitors to our website, which helps us improve it.

Learn more about cookies in the Cookie Policy.

Other websites

Other websites that can be accessed via the website https://fant.podravka.hr/en/ have their own confidentiality statements and data privacy policies and manners of data use and disclosure. 

PODRAVKA is not responsible for the manner and terms of operation of third parties. 

PODRAVKA collects and processes personal data through user interactions on social networks such as Facebook, Instagram, LinkedIn and YouTube. PODRAVKA or the responsible persons appointed by PODRAVKA can see messages and/or posts on the said social networks, but do not store or further process personal data collected through them, especially those contained in messages, except for the purposes stated in this Policy. 

PODRAVKA uses a business profile using Facebook, YouTube, LinkedIn and Instagram services. You can view their privacy policies or confidentiality statements and find out how they use your personal data at:

YOUTUBE ONLINE – https://policies.google.com/privacy?hl=hr

In case you have questions regarding the collection and processing of data by Facebook, YouTube, LinkedIn and/or Instagram or wish to exercise one of your rights guaranteed by GDPR, please contact:

FOR FACEBOOK:

META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska
Data Protection Officer contact data: https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the way your personal data are collected and processed, you can contact the leading supervisory authority for Facebook, Irish Data Protection Commission or the Croatian Personal Data Protection Agency.

On the website https://fant.podravka.hr/en/, https://fant.podravka.hr/en/ as the controller has embedded Facebook features. Facebook is a social network.

A social network is a place of social networking on the Internet, an online community that typically allows users to communicate with each other in a virtual space. A social network serves as a platform for exchanging views and experiences, or providing personal or job-related information to the Internet community. Facebook allows its users to create private profiles, upload images and connect through a friend request.

Facebook is owned by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a Facebook user lives outside the United States or Canada, the controller is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA is an independent controller.

By opening https://fant.podravka.hr/en/ the data subject’s browser will display the corresponding Facebook feature resulting from the use of Facebook plugin. You can find a list of all Facebook plugins at https://developers.facebook.com/docs/plugins/. This technical procedure provides Facebook with information about a specific subpage visited by the data subject.

If you are logged into Facebook as data subject, Facebook can detect your every visit to the website https://fant.podravka.hr/en/. This information is collected via the Facebook feature and transferred to the data subject’s Facebook account. If the data subject clicks on any Facebook button embedded in the website https://fant.podravka.hr/en/, e.g. “like” button, or sends a comment, Facebook will send this information to the data subject’s personal Facebook account and thus store personal data.

Each time a data subject is logged into Facebook and at the same time accesses the website https://fant.podravka.hr/en/, Facebook will receive information about this via the Facebook feature. This will happen whether the respondent clicks on the Facebook feature or not. If the data subject does not wish the transfer of this type of information, he or she may prevent it by logging out of the Facebook account before accessing the website https://fant.podravka.hr/en/

FOR YOUTUBE:

Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland 

Data Protection Officer contact data: https://support.google.com/policies/contact/general_privacy_form

If you are not satisfied with the way your personal data are collected and processed, you can contact the leading supervisory authority for YouTube, Irish Data Protection Commission or the Croatian Personal Data Protection Agency.

On the website https://fant.podravka.hr/en/, the controller has embedded the components of YouTube service. YouTube is an Internet video platform that enables free uploading, viewing, rating and commenting on videos. YouTube enables you to upload all types of videos, so you can watch entire films, TV broadcasts, music videos, trailers and videos created by users of the platform.

YouTube is owned by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC, a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC, a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, is considered an independent controller.

If you are logged on to YouTube as a site user (data subject), YouTube will recognize each visit to a subpage containing a YouTube video. This information will be collected by YouTube and Google and will be transferred to the data subject’s YouTube account.

YouTube or Google will receive information via the YouTube component that the data subject has visited the website https://fant.podravka.hr/en/ if he/she was logged on to YouTube at the time of the visit; this will happen whether the data subject has clicked on a YouTube video or not. If you do not wish to allow transfer of such information, you can prevent it by logging out of your YouTube account before opening the website https://fant.podravka.hr/en/

Entry into force of and amendments to this Privacy Policy 

This Policy shall enter into force on the day of its publication on this website.

PODRAVKA reserves the right to amend this Privacy Policy and shall publish it on its website.