In regard to the data we collect, CROATIAN MINT is a Data controller, that is, the one that determines the purposes, needs and means for which personal data is processed.
CROATIAN MINT as a provider of the website www.croatianmint.hr is committed to protecting the privacy of personal data.
If you wish to contact us regarding this Notice or regarding your personal data, please use the following contact information:
Company name: CROATIAN MINT d.o.o.
Adress: Svetonedeljska cesta 2, 10431 Sveta Nedelja
You can contact the Data Protection Officer at: firstname.lastname@example.org.
We collect your personal data when that is necessary for meeting your consumer needs or for our business needs:
CROATIAN MINT recommends to all customers or users of the website to take care of their login password for their user account. We recommend that when choosing a combination of characters for your password that you be sure to combine uppercase and lowercase letters and numbers, and be sure to use a password of at least six characters. We recommend that you periodically change your password (at least once a year).
We collect the above listed specific categories of your personal data either based on consent that was shown to you when you arrived on the www.croatianmint.hr webpage by the pop-up window, or it is based on legitimate interest. The latter for example in cases of cookies that are necessary for the functioning of the www.croatianmint.hr website or when we send you some interesting information and/or special offers after you have previously made a purchase from us.
If the processing is based on your consent, you have the right to withdraw your consent at any time. Controller must be notified of the withdrawal of the consent by e-mail: email@example.com or to the address Svetonedeljska cesta 2, 10431 Sveta Nedelja. Such withdrawal will not affect the legality of processing on the basis of consent before its withdrawal.
Please pay attention to the mandatory volume of data we ask you to provide, because in case the customer or user does not provide the required information which are specified as mandatory in order to perform an activity requested or expected by them, unfortunately they will not be allowed for enter into it, without the required data that activity will not be technically possible to carry out.
We do not collect data on children. If we find out that such information has been transferred to us without the consent of the parents or guardians of children under the age of 16, we will remove it without delay. Minors under the age of 16 may not use the www.croatianmint.hr website for the purpose of registering and / or ordering products.
Processing of personal data in payment processing
CROATIAN MINT at the time of payment on the webpage www.croatianmint.hr as a condition of paying for products and services by credit or debit cards asks from customers information for the activation of the payment process. When paying through contracted card processing and payment service providers (credit or debit) cards, CROATIAN MINT contractors as a Data Processor or Independent Dana Controllers, your data will be shared.
For the aforementioned purpose, your personal data as a customer (eg, name and surname, address, card information) is temporarily stored with the processing and billing service provider (MasterCard, Visa, Maestro, Pay Pal, KEKS Pay application, etc.), which stores this data in accordance with the highest level of protection and safe keeeping of confidential data.
Data processing during the payment is necessary in order to perform all actions that precede the purchase or conclusion of the contract with the Data controller. When we talk about the legal basis of data processing related to certain types of payments or legal entities that provide these services, payment data such as name, surname, code, amount, account number or other transaction codes are shared with the card company or bank or third party through which payment is made, all at the request of the data subject who independently chooses the method of payment.
CROATIAN MINT does not at any time access, collect, nor process personal data entered in for the purpose of card processing and payment
CROATIAN MINT cautions customers to keep data listed on the card safe so that this data would not be available to third parties and so that it would not be misused.
Therefore, to summarize all of the above, we mainly collect your personal data directly from you either in order for you to enter into a contract with us, to take action on your request, when you order specific products or services, or when you fill a specific form, or when you want to receive our newsletter or be our registered user.
We do not use your personal data for marketing purposes except in case you tell us that you agree with that. If you want us to send you details about our products, services, offers and promotions please subscribe to that when you give your consent when you subscribe to our newsletter.
We treat your personal data as confidential data, and it is properly protected by CROATIAN MINT and/or our trusted partners.
2. What data and for what purpose do we collect directly from you?
Typical categories of data that we collect from users are the following: name and surname, address, date of birth, preferred language, email, billing address, delivery address, financial information including information about credit, debit cards or other payment information that you provide when filling out forms on web pages, when paying CROATIAN MINT or when you communicate with us by phone or email.
We collect your personal data for:
• performance of a service, fulfilment of a contract or other way of ensuring provision of a requested service
• the use of all services on the webpage www.croatianmint.hr
• the most efficient response to your inquiry and processing of your requests
• statistical data processing
• sending materials, offers and contacting
• improving the quality of content, functionality, and services.
We may use your personal data in several different ways, mainly to perform our legal and other obligations to you, but sometimes to improve your experience of using the website and security reasons.
The purposes for which we use your data are described in these rules, and if your data is processed for other purposes, you will be notified before carrying out such (new) processing.
3. What privacy rights do you have?
Please note that you have the right to request the following from CROATIAN MINT at any time:
|You can ask CROATIAN MINT what personal data about you does it use, and you can ask for access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we store, entities or categories of entities with which we share your personal data, the time period we retain your data, as well as the source of the data in case the data is indirectly collected.|
|You can contact us if you want a copy of some or all of the personal data about you that we store.|
|We want your personal data to be accurate and up to date. You can ask us to correct or remove data that you think is incorrect or outdated.|
|You can ask us to stop processing or even the erasure of personal data we store about you. If we need your personal data to perform a contractual obligation to you CROATIAN MINT could cease to be able to perform such contractual obligations. Also, if your personal data is required in order for CROATIAN MINT to be able to meet certain legal obligations (e.g., tax obligations), your request may not be able to be fulfilled.|
|If you want to challenge the accuracy of the data, or we no longer need your personal data for the purpose of the processing, but you need it to establish, enforce or defend legal claims, or you have objected to data processing on the basis that the Data controller considers legitimate, you have the right to ask for restriction of the processing of your personal data.|
|Remember that you have the right to object to the processing of personal data that is based on a legal basis that the Data controller considers legitimate.|
|request data transfer to another Data controller (transferability of rights)||If the processing is based on your consent or if it is carried out by automatic means, you have the right to ask the Data controller to transfer the data to another data controller.|
To exercise any of the above rights, please use the contact information from the “About this Notice” section.
If you are not satisfied with how we have collected or used your personal data, you can file a formal complaint to Croatian Personal Data Protection Agency.
4. Where is your personal data stored?
We store the personal data that we collect about you in a secure environment. Your personal data is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
Some data is still stored in paper form, but we tend to digitalize all the personal data we process. The processed data is stored in the Data processor ‘s premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.
CROATIAN MINT will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons. All authorized persons sign a declaration of confidentiality.
The data collected for the purposes specified in these policies will be stored only for as long as it is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than CROATIAN MINT reasonably considers necessary to achieve the purpose for which it was collected or processed. CROATIAN MINT will keep certain personal data for a period of time prescribed by law or a regulation that obliges CROATIAN MINT to keep data (more under ˝ How long will we keep your personal data? ˝).
In the event that you have given us consent (for example, you have subscribed to our newsletter, selected a certain category of cookies to use), we will process your personal data until the consent is withdrawn. If you make a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to point out the following; if judicial, administrative or out-of-court proceedings are instituted, personal data may be stored until the end of such proceedings, including a possible period for declaring remedies.
5. Does CROATIAN MINT exchange data with third parties?
Privacy protection is important to CROATIAN MINT, therefore we will never share your personal data with third parties except for the purposes described in this Notice. We will always inform you about the sharing and transfer of data.
CROATIAN MINT collaborates with other companies. This means that we sometimes share your personal data with our trusted partners, using secure IT systems. When we do so, the data is transferred to servers that are located in the EU or in a country that provides an adequate level of protection in accordance with EU law.
In some cases, our partners that provide services on behalf of or for CROATIAN MINT may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to manage your data by using special security measures in accordance with regulations in force in the Member States of the European Union. In the event of a transfer of data the United States, we will ask your permission in view of the consequences of the “Schrems II” judgement and declaring the Privacy Shield invalid.
The purposes for which we share data with our trusted partners are for example, marketing, maintenance of website www.croatianmint.hr, advertising, payment processing, delivery and other services in and outside of the store. These service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. Likewise, we oblige them to adequately protect your data and to consider it a business secret.
Once a year, we audit all our partners to make sure that the protection of your personal data is still at the required level and that it complies with applicable regulations.
6. Use of social networks and other tools
For statistical analysis and measurement, the website www.croatianmint.hr also uses some Google tools, specifically Google Analytics – a service for measuring traffic, Google+, Google eCommerce and Google remarketing/conversion.
These policies do not apply to services and third parties that have separate privacy policies, however, in accordance with the regulations related to the protection of personal data CROATIAN MINT is obligated to inform their users about the data collected by Google providing its services to other natural and legal persons.
The processing of data by Google and Facebook as part of your use of the listed social networks and tools can’t be fully influenced by CROATIAN MINT. Please read the sections of these policies carefully to know how Google processes your personal data.
The information that Google collects includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including operator name and phone number, and application version number.
In addition, Google collects information about the interaction of applications, browsers, and devices with Google services, including IP address, crash reports, system activity, and the date, time, and referral URL for the respondent’s request.
Google collects information when a Google service on your device contacts Google servers – for example, when you install an app from the Play Store or when the service checks for automatic updates. If you use an Android device with Google applications, your device periodically contacts Google servers to provide device information and connect to their services. This includes information such as device type, mobile operator name, crash reports, and applications you have installed.
For what purposes does Google collect your data
Google may use your information to ensure the proper functioning of services, for example by monitoring downtime or resolving issues you report.
Furthermore, Google uses the data for analytical and measurement purposes.
For example, Google analyzes information about your visits to Google sites and uses information about ads you interact with.
When you visit sites that use Google Analytics, Google and a Google Analytics user may associate information about your activity on that site with activity on other sites that use Google advertising services. The information we collect, such as your email address, is used by Google to interact directly with you. For example, it may send you a notification if it detects suspicious activity, such as an attempt to sign into your Google Account from an unusual location, or it may notify you of upcoming changes or improvements to services.
In the event that you contact Google, Google records a request record to help resolve your issue.
Google uses automated systems that analyze your content to provide customized search results, customized ads, or other features tailored to your use of our services.
Google also analyzes your content to detect abuse, such as unwanted, malicious, or illegal content. Algorithms are also used to identify patterns in Google data.
For example, Google Translate helps people communicate in different languages by revealing common language patterns in the phrases you are looking for translation.
For the purposes described above, Google may combine the data collected from its services and all of your devices. Depending on your account settings, your activity on other sites and applications may be linked to your personal information in order to improve Google services and the ads that Google displays.
If other users already have your email address or other credentials, Google may show them your publicly visible Google Account information, such as your name and photo. For example, they can more easily recognize the email you send them.
In case you have questions regarding the collection and processing of your personal data by Facebook or you want to exercise any of your rights guaranteed by the General Data Protection Regulation, contact:
|Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland|
|Data protection officer contact:||https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970|
|If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Facebook, the Irish Data Protection Commission or the Croatian Personal Data Protection Agency.|
|FOR INSTAGRAM: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland|
|Contact of the Data Protection Officer:||https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970|
|If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Instagram, the Irish Data Protection Commission or the Croatian Personal Data Protection Agency.|
|FOR LINKEDIN: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland|
|Contact of the Data Protection Officer:||https://www.linkedin.com/help/linkedin/ask/TSO-DPO https://www.linkedin.com/help/linkedin/ask/PPQ?lang=en|
|If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for LinkedIn, the Irish Data Protection Commission or the Croatian Personal Data Protection Agency.|
7. How long will we keep your personal data?
CROATIAN MINT will not retain your personal data for longer than the period for which the data is needed to fulfill the purpose of their use, and for a maximum period of 3 years, except in exceptional cases where the law prescribes a longer retention period (for example, data related to unilateral termination of contracts and consumer complaints will be kept for 1 year, data related to the exercise of your privacy rights will be kept permanently, data related to prize games will be kept for 5 years, while invoice data will be kept for 11 years).
You can find out more about data retention periods by contacting our data protection officer.
8. What we will use your data for?
As stated earlier, we may use your personal data in several different ways, mainly to perform our contractual obligations to you, but sometimes to improve your shopping experience, for direct marketing or for security reasons.
When you make a purchase through the website www.croatianmint.hr, depending on the case, we may ask you to provide certain personal data that is necessary for the proper processing of your purchase. This situation will happen especially if with the purchase of our products you decide to use one of the services, such as delivery. Also, to process your order and ensure that your personal and financial information is accurate, we use trusted third-party payment systems to ensure that your payment is secure and that your data is not used for fraud. If you wish to pay for goods and services online, the Data controller will request payment-related information, including credit or debit card number, card expiration date, CVV number, and billing address.
To ensure that the products and services you purchase from us are delivered to the correct address, we share your personal data required to provide certain services with trusted external partners (e.g. your name, shipping address and delivery messages you specify – such as age days when you want to receive delivery).
In order to perform the action from the contract you have entered into with us, your personal data is shared with the delivery service.
If you contact our customer office (request a product return or are not satisfied with the service, etc.), directly at CROATIAN MINT or through any other means of communication available to you, we need your contact information to resolve the issue you are contacting us with. The information you provide to us will only be used for this purpose. In certain cases, we will use the services of other manufacturers to whom we entrust your data only to the extent necessary to resolve your case (eg authorized repair services, etc.). In this case, they can be IT system vendors that the Data controller works with and can be part of the technical support.
www.croatianmint.hr Your data may also be collected when you visit the Data controller page. The data will only be processed for specific purposes, which we will inform you about when you visit the Data processor’s website (eg to conduct online sales, to save the shopping list you have created, etc.). In case you do not want your data, all or some, to be collected for this purpose, you can restrict their use or completely disable their use.
CROATIAN MINT would like to send you information about our activities and news that you may be interested in. Please note that you may opt out of receiving them at any time by exercising your rights set forth in these policies. To subscribe to the newsletter CROATIAN MINT collects and processes: e-mail address.
To maintain the website and ensure its functionality, the data controller uses a technology commonly known as “cookies”.
You can find more information about cookies in the Cookies Policy.
10. Other websites
www.croatianmint.hr websites may contain links to third party websites.
These policies only apply to this website, so when linking to other websites, we encourage you to read their privacy policies.
CROATIAN MINT would like to send you information about our products and services that you may be interested in. However, we are only allowed to send you marketing material if you choose to do so and give us your consent. Please note that even if you have agreed to receive our marketing messages, you may opt out of receiving marketing messages at any time. If you no longer wish to be contacted for marketing purposes, please select the corresponding option at the end of our marketing message (e-mail/newsletter) or send us an email at firstname.lastname@example.org.
12. Entry into force and changes to the Privacy Notice
These rules shall enter into force upon publication on the website.
CROATIAN MINT reserves the right to change this Privacy Notice at any time by publishing the amended text on the website www.croatianmint.hr.
Changes to this Privacy Notice take effect immediately upon publication on www.croatianmint.hr