Privacy Policy

    1. General Information

    Thank you for visiting our website. Below we would like to inform you about which personal data we collect, for what purposes we process it, and what rights you have.

    2. Definitions

    Based on Article 4 of the GDPR, this privacy policy is based on the following definitions:

    • "personal data" (Article 4(1) GDPR) means any information relating to an identified or identifiable natural person ("data subject"). A person is identifiable if their identity can be determined directly or indirectly, in particular by reference to an identifier such as a name, identification number, online identifier, location data or by reference to their physical, physiological, genetic, mental, economic, cultural or social characteristics. Identity can also be determined by combining such information with other additional knowledge. The origin, form or method of storing information is irrelevant (photographs, video or audio recordings may also contain personal data).
    • "processing" (Art. 4(2) GDPR) means any operation or set of operations performed on personal data, whether or not by automated means. This includes in particular collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data, as well as change of purpose of processing.
    • "controller" (Art. 4(7) GDPR) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
    • "third party" (Art. 4(10) GDPR) means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
    • "processor" (Art. 4(8) GDPR) means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g. IT service providers). In terms of data protection regulations, the processor is not a third party.
    • "consent" (Art. 4(11) GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

    3. Responsible Party

    Tiartec d.o.o.

    Industrijska ulica 13
    10431 Sveta Nedelja
    Croatia

    Email: office@tiartec.hr

    4. Data Protection Officer

    We have not appointed a Data Protection Officer as we are not legally required to do so. If you have any questions regarding the processing of your personal data, you can contact us using the contact details provided or the competent authority.

    5. Types of Processed Data

    We process the following types of personal data:

    • basic data (name, address, etc.)
    • contact data (email, phone number, etc.)
    • meta/communication data and usage data (e.g. IP address, operating system, etc.)

    6. Data Subject Rights

    Right of Access (Art. 15 GDPR)

    You have the right to request confirmation as to whether we process your personal data. If so, you have the right to access that data and the information set out in Art. 15(1) GDPR.

    Right to Rectification (Art. 16 GDPR)

    If we process inaccurate personal data about you, you have the right to request its rectification. You also have the right to request the completion of incomplete personal data.

    Right to Erasure (Art. 17 GDPR)

    If the conditions of Art. 17(1) GDPR are met, you have the right to request the erasure of your personal data. This does not apply if there are grounds under Art. 17(3) GDPR.

    Right to Restriction of Processing (Art. 18 GDPR)

    If the conditions of Art. 18(1) GDPR are met, you have the right to request the restriction of processing of your personal data.

    Right to Object (Art. 21 GDPR)

    If we process your personal data on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to such processing on grounds relating to your particular situation, in accordance with Art. 21(1) GDPR.

    Right to Data Portability (Art. 20 GDPR)

    If the conditions of Art. 20(1) GDPR are met, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us.

    Right to Withdraw Consent (Art. 7(3) GDPR)

    You have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

    Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

    You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

    The competent authority in the Republic of Croatia is:

    Croatian Personal Data Protection Agency

    Ulica Metela Ožegovića 16
    10000 Zagreb

    Email: azop@azop.hr

    Phone: +385 (0)1 4609-000

    You may also contact another supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

    7. Automated Decision-Making

    Automated decision-making, including profiling (Art. 13(2)(f), Art. 22(1) and (4) GDPR)

    We do not use automated decision-making, including profiling.

    8. Visiting Our Website

    When you use our website for informational purposes, we collect, store and process the following categories of personal data:

    Log data

    When visiting our website, so-called log data (server log files) are temporarily stored on our web server. This includes:

    • the page from which the page was requested (so-called referrer URL)
    • name and URL of the requested page
    • date and time of the request
    • type, language and version of the web browser used
    • IP address (anonymised/truncated where applicable)
    • amount of data transferred
    • operating system
    • access status (HTTP status code)
    • time zone (GMT difference)

    This data is processed for the purpose of ensuring the stability and security of the website and improving its functionality.

    Legal basis:

    legitimate interest (Art. 6(1)(f) GDPR)

    9. Data Storage and Deletion

    Personal data is stored only for as long as necessary to fulfil the purpose of processing or as long as there is a legal basis for processing.

    Unless otherwise stated, data will be deleted or anonymised as soon as the purpose of processing ceases.

    In the event of legal retention obligations, data will be stored in accordance with those obligations, after which it will be deleted or blocked.

    10. Cookies

    To enable the proper functioning of the website, we use cookies. Cookies are small text files that are stored on your device.

    We distinguish between:

    • session cookies – deleted after closing the browser
    • persistent cookies – remain stored on your device until expiry or manual deletion

    You can set your browser to be notified about the use of cookies and to decide whether to accept or reject them in individual cases or entirely.

    Please note that disabling cookies may limit the functionality of the website.

    On our website, we use only technically necessary cookies.

    Purpose:

    • ensuring website functionality

    Legal basis:

    • legitimate interest (Art. 6(1)(f) GDPR)

    11. Hosting

    Personal data is processed in the following processes. Providing data is not legally or contractually required.

    Our website is hosted by the service provider WMD d.o.o.

    When visiting our website, the above-mentioned data (see "Visiting Our Website") is transferred to the hosting provider's servers.

    We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.

    12. Enquiry via Email or Phone

    If you contact us by email or phone, the data you provide will be processed.

    The purpose of processing is to respond to your enquiry and to fulfil (pre)contractual obligations.

    Legal basis:

    • pre-contractual measures (Art. 6(1)(b) GDPR)
    • legitimate interest (Art. 6(1)(f) GDPR), where applicable

    We store data for as long as necessary to respond to your enquiry or to fulfil (pre)contractual or legal obligations.