Privacy policy

WEB STUDIO d.o.o. za internet usluge (WEB STUDIO LLC for internet services)

Seat: Ćićarijska 10, 51000 Rijeka
PIN: 17859403608

Phone: +385 (0) 51 269 131
E-mail: dpo@webstudio.hr

E-mail: dpo@webstudio.hr

1. Inquiries and requests - Personal data may be collected on this website for the purpose of responding to a made inquiry or request.

For this purpose, a minimum set of contact information is collected:

• Name
• Contact data

Such processing is necessary in order to provide the requested service or to take steps prior to providing services at your request. The processing is lawful under Article 6 (1) (b) of the General Regulation.

The data are stored for as long as there is a purpose of the processing.

2. WSPay - Personal data may be collected for the purpose of realization of online requirements for WSPay authorization and billing of credit and debit cards online - in real time, for the eCommerce sales channel - sales in a web shop or at another online point of sale.

Categories of personal data collected:

• Data about the business entity and the authorized representative
• Contact data of the business entity
• Payment data (bank and account number)
• Administrative-technical shop data, including the basic contact data of the administrator
• Web shop data

The provision of the aforementioned data is necessary for the provision of the requested service.

Such processing is lawful pursuant to Article 6, paragraph 1 (b) of the General Regulation.

3. Payment of invoices - For the purpose of providing the service of electronic payment of invoices, the following data about the payer are collected:

• Basic data about the payer (name, surname)
• Contact data
• Basic data about the service to be paid (order number, amount)

The provision of the aforementioned data is necessary for the provision of the requested service.

Such processing is lawful pursuant to Article 6, paragraph 1 (b) of the General Regulation.

4. Application for an open position - Personal data may be collected for the purpose of applying for an open position. For this purpose, the following data may be collected:

• Basic data about the candidate
• Contact data
• Education data
• Data about the gained work experience
• Other data provided by the candidate themselves

Such processing is lawful pursuant to Article 6, paragraph 1 (b) of the General Regulation, and is processed for as long as the purpose of the processing exists.

5. Cookies - Personal data may be collected on this website for the purpose of improving the functioning of the features of this website and enabling a better user experience.

For this purpose, unobtrusive cookies are used, and the user's consent is required before they are used when these cookies are not necessary. The data collected are anonymous and do not contain any identifying data about the user.

The data are processed on the basis of consent, and the processing is lawful pursuant to Article 6 (1) (a) of the General Regulation.

In certain situations, personal data may be processed on the basis of an established legitimate interest. When the processing is based on such grounds, an objection to such processing may be raised. Processing shall not be restricted or suspended in case there are compelling legitimate grounds for such processing that goes beyond the interests, rights and freedoms of the data subject, or where such processing is necessary for the establishment, exercise or defence of legal claims.

The processing we carry out on the basis of our legitimate interest is as follows:

1. NEWSLETTER
Data processed: E-mail address.

Purpose of processing: Marketing. The newsletter gives notifications regarding the services we provide, which may include information about our special offers and benefits.

Method of collection: Directly from the data subject.

At any time, the objection to the processing of the e-mail address for marketing purposes may be raised, and the processing may be restricted or completely prohibited.

2. CV DATABASE
Data processed: Identification and contact data, education data, data about the gained experience and competence, and other data that candidates submit themselves.

Purpose of processing: Recruitment. CVs of non-selected candidates who meet the required conditions and have been shortlisted may be stored for the purpose of possible employment in the event that the selected candidate does not satisfy the requirements set during the probationary period.

Method of collection: Via a published job vacancy advertisement and/or via the submission of an open application.

Storage period: The data are stored for a period of up to six months from the date of publication of the tender or the submission of an open application.

Legal basis: Legitimate interest of the controller (Art. 6 para. 1 pt. (f) of the General Regulation).

Right to object: You have the right to restrict or prohibit such processing at any time and without specific justification, and this shall not affect the candidate's possible selection in the future.

The personal data collected may be forwarded for use to providers of information and communication solutions and services, acting as our processors.

These processors offer reasonable guarantees and have taken appropriate technical and organizational safeguards to adequately ensure the data protection and compliance with the requirements of the General Regulation. An agreement/contract on the processing of personal data has been concluded with such processors, pursuant to Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors, as a separate part of the contract. The aforementioned agreement/contract prescribes in detail the handling of personal data, and therefore they are not able to process personal data and forward it to third parties without our order.

Personal data shall not be passed on to third parties for direct marketing purposes.

When we are provided with personal data when contacted, they are processed only until the purpose for which the personal data was provided is fulfilled. Upon termination of the purpose, the personal data are no longer processed.

Certain personal data (e-mail address) may continue to be processed on the basis of an established legitimate interest (for marketing purposes in order to send notifications regarding our services) for as long as there is a purpose for the processing, or until such processing is restricted or completely prohibited by raising an objection or by unsubscribing from the list of recipients.

The data collected on the basis of an online request are processed during the provision of the requested service. After fulfilling the purpose, the data are stored for a period of five years, except in the case of exercising legal claims, when the period may be longer.

The pages and profiles we manage on social networks (Facebook, Instagram, etc.) contain the exact and full name of this Company.

We will use the personal data of our contacts that we collect through usage only in case of responding to an inquiry or a comment, and that data shall not be processed for any other purpose.

Technical cookies are used on this website. These cookies are necessary for the functioning of the website and cannot be turned off. We may also use non-essential cookies for the purpose of improving the operation of the system and of improving your user experience, but in such a case, we will ask for your consent beforehand. At any time, you may withdraw your consent and stop further processing without any negative effects. Detailed information about the cookies we use can be found in the Cookie Policy.

We collect and process personal data in a way that ensures appropriate security and confidentiality while they are being processed and enables an effective application of the principles of data protection, the reduction of the amount of data, the extent of their processing, the period of storage, and their availability. To this end, we have implemented appropriate technical and organizational safeguards that ensure a level of security that corresponds to the risks posed by the data processing and to the nature of the personal data being protected, bearing in mind the characteristics and costs of their implementation.

We regularly review the processing that may pose a risk to the rights and freedoms of the individual, and we have implemented appropriate safeguards to protect personal data from accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure of, or access to, especially in cases where the processing involves the transmission of personal data over the network, and from all other unlawful forms of processing.

Right of access
You can request confirmation at any time as to whether or not your personal data are being processed, as well as detailed information about the processing, in particular regarding the purpose, the type/categories of personal data being processed, as well being able to access your personal data, the data about the recipients or categories of recipients, and the envisaged period during which the personal data will be stored.

Right to rectification
You have the right to obtain the correction of inaccurate and incomplete personal data without delay.

Right to erasure
You have the right to make a request to erase your personal data. In case of justification of the request, and if the legislation does not oblige us to store the data, the data will be erased without undue delay.

Right to restriction of processing
You have the right to request a restriction on the processing of your personal data in the cases provided for by the General Regulation. In particular, we point out that you may restrict the processing of your personal data based on a legitimate interest as a legitimate basis for the processing.

Right to object
You have the right to object to the processing of your personal data in all cases provided for by the General Regulation. In particular, we point out that you may object to the processing based on a legitimate interest as a legitimate basis for processing, as well as to restrict or completely prohibit the processing.

Right to lodge a complaint
In the event that you believe that the processing has violated your personal data and the provisions of the General Regulation, you can lodge a complaint to the supervisory authority of the Croatian Personal Data Protection Agency, Zagreb, Selska ulica 136.

For further information regarding the processing of your personal data, access to the data, or in case you want to object to the processing, you can contact us by e-mail: dpo@webstudio.hr.

After your identification, we provide the answer in the usual electronic form, unless otherwise requested, within 30 days.

This privacy policy is regularly reviewed, supplemented and amended so as to always reflect the actual state of collection and processing of personal data on this website. Please, check such changes regularly.

Last amended: 9 October 2019