Privacy Policy

We guarantee the security of all your data.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: General Data Protection Regulation), which has been in full application since 25 May 2018 in the Republic of Croatia and all member states of the European Union, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), i.e. in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union and best European practices, Pisinium d.o.o. (hereinafter: Pisinium), Heki, Žbrlini 103, 52000 Pazin, OIB: 87284666800, registered in the court register of the Commercial Court in Pazin under the registration number (MBS): 040071939, as the controller of personal data of its service users and customers, has prepared this Privacy Policy.

This Privacy Policy (“policy”) explains how Pisinium collects, uses and manages your personal data found on the website and accessible through the use of the website: www.pisinium.hr.

The Privacy Policy is based on the following principles of personal data processing: the principle of legality, transparency and best practice, the principle of limited processing and data minimisation, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of data integrity and confidentiality, the principle of accountability, the principle of trust and fair processing, the principle of purpose limitation, and the principle of processing in anonymised form.

The Privacy Policy applies to all services offered by Pisinium, with the aim of informing users and/or customers in a clear and transparent manner about the procedures for processing their personal data and their rights.

Pisinium is committed to protecting and respecting your privacy. Please read this policy carefully to understand why and how we collect your personal data and how it will be used. With regard to the personal data we collect, Pisinium is the “controller”, i.e. the entity that determines the purposes for which and the means by which personal data are processed.

If you wish to contact us regarding this policy or your personal data, please use the following contact details:

Pisinium d.o.o.
Heki, Žbrlini 103
52000 Pazin
OIB: 87284666800

You can contact the Data Protection Officer at email: pisinium@pisinium.hr or at the address Pisinium d.o.o., Heki, Žbrlini 103, 52000 Pazin.

How and when do we collect your personal data?

We collect your personal data when this is necessary for the realisation of your consumer needs or for our business purposes:

• during your registration, Pisinium will request the provision of certain information (personal data) such as first name, last name, email address, etc.
• when you access the website www.pisinium.hr, we will also collect your IP address, which is also considered personal data
• the buyer or user of our website, by entering their personal data after registration, and in the case of purchase, enters into a contractual relationship which is the basis for purchasing products and ordering services of the buyer’s choice at www.pisinium.hr

The processing of your personal data is necessary for the performance of a contract to which you as a buyer or user are a party, or in order to take steps at the request of the data subject prior to entering into a contract. For purchase purposes, data about your name, surname, address, country, telephone number, email address, payment method (IBAN), and delivery address are certainly necessary.

Pisinium recommends that all buyers or website users take care of their login password for their user account. We recommend that when choosing a combination of characters for a password, you combine upper and lower case letters and numbers. Use a password of at least eight characters. We recommend changing your password periodically (at least once every six months).

We process your personal data because legal regulations require certain actions from us, or because the processing is necessary for the performance of a contract or to take steps prior to entering into a contract, or based on our legitimate interests, except when such interests are overridden by the interests or fundamental rights and freedoms of individuals requiring the protection of personal data.

If we cannot process personal data based on the above legal bases, we will request your consent. If the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent should be communicated to the controller at email: pisinium@pisinium.hr or at the address Pisinium d.o.o., Heki, Žbrlini 103, 52000 Pazin.

Such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

Processing of personal data in the payment process

At the time of payment on the website www.pisinium.hr, Pisinium, as a condition for paying for products and services by credit or debit cards, requests data from the buyer to activate the payment process. When paying through contracted service providers for card processing and billing (credit or debit), contracted partners of Pisinium as processors or independent controllers of personal data, your data will be shared.

For the above purpose, your personal data as a buyer (e.g. buyer’s name and surname, buyer’s address, buyer’s card data) are temporarily stored with the processing and billing service providers (Visa, Maestro, MasterCard) who store this data in accordance with the highest level of protection and confidentiality.

Pisinium at no time possesses, collects or processes personal data entered for the purpose of card processing and billing.

What data do we collect directly from you and for what purpose?

Typical categories of data we collect from users are: first name, last name and address for the purpose of fulfilling our obligation to deliver products and services.

We collect your personal data for the purpose of:

• performing a service, fulfilling a contract or otherwise ensuring the provision of the requested service
• using all services on the website www.pisinium.hr
• responding as efficiently as possible to your enquiry and processing your requests
• sending materials, offers and contacting you
• improving the quality of content, functionality and services

What privacy rights do you have?

Please note that at any time you have the right to request the following from Pisinium:

• Access to personal data: you have the right to obtain from Pisinium confirmation as to whether your personal data is being processed and, if so, access to that personal data. You have the right to obtain a copy of the personal data being processed.
• Rectification of inaccurate data: you have the right to obtain from Pisinium the rectification of your inaccurate personal data. Taking into account the purposes of processing, you have the right to supplement incomplete personal data.
• Erasure of personal data: under certain conditions, you have the right to obtain from us the erasure of your personal data and we are obliged to erase such personal data.
• Restriction of data access: under certain conditions, you have the right to obtain from Pisinium restriction of processing of your personal data.
• Objection to data processing: under certain conditions, you have the right to object at any time to the processing of your personal data.
• Data portability: under certain conditions, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

If you would like to learn more or wish to exercise one or more of the above rights, please contact pisinium@pisinium.hr or at the address Pisinium d.o.o., Heki, Žbrlini 103, 52000 Pazin. If you believe that your rights are not being respected, you have the right to file a complaint with the Personal Data Protection Agency.

Where is your personal data stored?

The personal data we collect about you is stored in a secure environment. Your personal data is protected from unauthorised access, disclosure, use, alteration or destruction by any organisation or individual.

The collected data will be stored only for as long as necessary for the above-mentioned purposes.

Does Pisinium share data with third parties?

Privacy protection is important to us, so we will never share your personal data with third parties except for the purposes described in this policy. We will always inform you about the sharing and transfer of data.

Pisinium cooperates with other companies. It is important to note that we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of and for the account of Pisinium.

How long will Pisinium retain your personal data?

Pisinium will not retain your personal data longer than the period for which the data is needed to fulfil the purpose of its use, except in cases where a data retention period is prescribed by law (for example, data related to unilateral contract termination and consumer complaints will be kept for 1 year, data related to exercising your privacy rights will be kept permanently, data related to prize games will be kept for 5 years, while invoice data will be kept for 11 years).

To determine the data retention period, we are guided by the following criteria:

• If you purchase products and services, we store your personal data for the duration of the contractual relationship
• If you participate in a promotional offer, we store your personal data for the duration of the promotional offer
• If you contact us with an enquiry, we store your personal data for the period needed to process the enquiry
• If you create a user account, we store your personal data until you request deletion of the account or after a period of inactivity
• If you have consented to direct marketing, we store your personal data until you cancel your subscription or request deletion
• When cookies are stored on your computer, we store them as long as they serve their purpose or for the duration specified in local regulations and guidelines

When your personal data is no longer needed, we remove it from our systems and archives or convert it into anonymous data so that we can no longer identify you.

You can learn more about data retention periods by contacting our Data Protection Officer.

Cookies

To maintain the website and ensure that its functionalities are at the expected level, Pisinium uses technology known as “cookies”. Cookies are small files that we send to your computer and can later access. For more information about cookies, please read our Cookie Policy.

Other websites

This Privacy Policy applies only to the use and utilisation of data that Pisinium collects from users (data subjects). Other websites that can be accessed through the website www.pisinium.hr have their own privacy statements and data collection practices.

Pisinium is not responsible for the methods and operating conditions of third parties.

Pisinium uses a business profile using the services of Facebook and Instagram. You can view their Privacy Policies at:

• Facebook
• Instagram

If you have questions regarding the collection and processing of data by Facebook and/or Instagram, contact:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Entry into force

This Policy enters into force upon publication on the website.
Pisinium reserves the right to amend and supplement the Privacy Policy, which will be published on the website.