CRO-TEX d.o.o. for wholesale and retail trade, import-export (hereinafter referred to as the "Seller") collects and processes your data in the capacity of the so-called manager of personal data processing.
The Seller's behavior when collecting and processing your data is in accordance with the General Data Protection Regulation (EU Regulation 2016/679, hereinafter "General Regulation") and the Act on the Implementation of the General Data Protection Regulation.
With this notification, we inform you about how we process your data and what your rights are in relation to this processing.

Data processing manager

Name: CRO-TEX d.o.o. for wholesale trade and small, import-export
Head office: Ulica Matije Gupca 98, Malino, 35250 Oriovac
Court register: Commercial court in Osijek - permanent service in Slavonski Brod
MBS: 050003661
OIB: 01543225683
Business bank: Zagrebačka banka, Zagreb, IBAN: HR1023600001102962164, SWIFT: ZABAHR2X
Address email: info@cro-tex.hr

Categories of data processed, purposes and legal bases of processing

Personal data categories:

• Name and surname
• Address
• Phone number, e-mail address and other contact information
• Data required for making payments
• Data required for accessing and securely managing the user account
• Data required for use of the Seller's website (IP address from which you visit the Seller's website, data about the web browser, data about the operating system of the computer or other device you are using, other technical data)

Purposes of processing:

• Answers to inquiries of potential users/customers.
• Conclusion of contracts, providing services and delivery of goods and all communication related to this contractual relationship.
• Issuance of invoices and implementation of payments.
• Storage of documentation on inquiries and services/deliveries, complaints, responses to them in accordance with regulations, in order to comply with legal obligations, for inspection by competent authorities in the event of an inspection or in the event of a dispute.
• Opening a user account and managing it.
• Possibly sending periodic notifications (newsletter).
• If the user consents to the publication of his data along with his review of the service or product.

The data is not processed for any purpose other than for which they were collected, unless you subsequently give your consent for new purposes.
Data is processed only to the extent necessary in accordance with the purposes of processing.

Legal bases of processing:

• Taking actions at your request before establishing a contractual relationship and fulfilling mutual rights and obligations from the contract.
• Fulfillment of legal obligations established by mandatory regulations of the European Union or Croatian regulations (keeping documentation related to services for a certain period of time in order to comply with accounting regulations, e.g. invoices and orders, identity verification before giving notice about the processing of personal data, etc. .).
• Legitimate interest when processing is necessary to set legal claims or defend against legal claims in the event of a dispute regarding services or delivered products.
• Consent - e.g. to receive newsletters , the publication of a review with a mention of your name

Withdrawal of consent

When the Seller processes your data on the basis of consent, you have the right to withdraw consent at any time . Withdrawal of consent does not affect the lawfulness of processing that was based on consent before it was withdrawn.

Who has access to the data

Only the Seller or external partners who process them on the basis of our orders (e.g. bookkeeping in in connection with the account and payment, IT support when, for example, fixing malfunctions of websites) and only to the extent necessary.
The seller will always act in accordance with all the requirements of the General Regulation regarding the obligation of employees and service providers to keep your data confidential and to apply appropriate protection measures.

Competent authorities may also have access to the data. of its prescribed public powers, e.g. in the case of inspection supervision of the Seller's work.

Retention period

Your personal data will be kept by the Seller only as long as necessary. in order to achieve the purposes for which they were collected, which include the legally determined shortest data retention period, and/or as much as is necessary for the pursuit of the Seller's legitimate interests (e.g. setting legal claims or defending against legal claims, i.e. until the completion of the initiated proceedings) or until withdraw your consent.

Cookies

Only temporary and permanent mandatory (technical) cookies are used on the Seller's website, which are necessary for the website to function. and I cannot opt out.

Your rights

Right to access data

You have the right to receive information from the Seller about whether the Seller processes your personal data, which, for what purpose, until when, whether it exports it to third countries, etc. .

Right to rectification

You have the right to request the correction of incorrect personal data, to complete incomplete personal data taking into account the purpose of processing.

Right to deletion

You have the right to request that the Seller delete your personal data if, for example, personal data are no longer necessary for the purpose of processing, if you have withdrawn your consent to processing, if personal data illegally processed, etc. But you cannot, for example, ask the Seller to destroy the issued invoices with your data as long as he has to keep them in accordance with accounting regulations.

Right to reporting

You have the right to be informed by the Seller about the correction, deletion or restriction of processing that you have requested.

Right to portability

You have the right to receive from the Seller personal data about you that you previously provided to him for the purpose of processing based on consent or contract in a structured form and in a commonly used and machine-readable format. format.

Right to object

You have the right to object to the processing of personal data based on the Seller's legitimate interest. In this case, the Seller will no longer be allowed to process this data if he does not prove that his legitimate interests prevail over your interests.

You can send a request to exercise your rights by mail or e-mail to the above mentioned address of the Seller.

You should identify yourself in the request, so that the Seller can verify your identity in an easy and accessible way. Otherwise, the Seller will not be able to act on your request. Within one month of receiving your request, the Seller will inform you of its decision and the actions taken.

Registered users of the Seller's website can manage their personal data through protected websites intended for managing user accounts. On these pages, registered users can:

• Get insight into all their data that the Seller has stored on its website and download it.
• Edit your personal data.
• Exercise the right to delete or anonymize your personal data.

You also have the right to file a complaint Personal Data Protection Agency if you believe that the Seller has violated your rights by processing your data.