The Istrian Truffle Growers’ Association ‘Istra’ (hereinafter referred to as “we”, “us”, “our”, etc.) is the owner of the website istarskibijelitartuf.com (the “website”). We have created this privacy statement to demonstrate our commitment to user privacy and to inform them about the methods of collecting and processing personal data on this website.
Please read this Statement carefully to understand how we collect, process, protect, or otherwise use your personal data.
Data Protection Officer
The Istrian Truffle Growers’ Association ‘Istra’ is a non-profit organization registered in the Republic of Croatia. We have appointed a data protection officer whom you can contact with any questions or complaints regarding our privacy policy or the handling of personal data. The name and contact information of our data protection officer are:
Anton Brenko
zastita@istarskibijelitartuf.com
Data Collection
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
We collect your personal data only when you voluntarily provide us with such information. We collect data about you when you fill out a form.
You should be aware that non-personal information and data may be automatically collected via our Internet servers or by using “cookies”. Click on the link at the bottom of the page to read our cookie policy.
Examples of information about your use of the site include: most visited and viewed pages and links on our website, number of completed forms, time spent on the site, most popular keywords that lead users to our site, your IP address, information collected via cookies, your device data such as hardware settings, system activity, browser type, etc.
Data Processing
We use the data obtained about you for one or more of the following purposes:
To personalize your user experience (collected information helps us better respond to your individual needs);
To improve our website (we constantly strive to improve our website’s offerings based on feedback we receive from our visitors);
To establish a primary communication channel with you;
To occasionally send emails (regarding occasional receipt of news (if you wish), updates, information about similar products or services, etc.)
Third-Party Links
We do not offer or provide third-party services or products on our website.
Use of Cookies
To learn how we use cookies, please read our cookie policy by clicking on the link at the bottom of the page.
Protection of Your Data
To protect the personal data you submit through this website, we use physical, technical, and organizational security measures. We continuously upgrade and test our security technology. We restrict access to your personal data only to those employees who need to know that information to provide you with benefits or services. In addition, we educate our employees about the importance of data confidentiality and maintaining privacy and protecting your data.
Data Storage and Retention Period
All data is stored in the databases and repositories of this website located on a server in Croatia. Stored data will not be transferred or stored in countries outside the European Union.
We retain and protect your personal data for the duration of your business relationship with us. Personal data that you have provided to us for business or contact purposes is regularly deleted 12 months after the date you provided it to us.
Individual Rights
If you wish to know whether we hold and process your personal data, or if you wish to access the personal data we hold about you, please contact us at udruga.tartufara@gmail.com.
You may also request information about: the purpose of data processing; the categories of personal data being processed; who else outside our company has received your personal data from us; the source of the personal data (if you did not provide it directly to us); and how long we will retain the data. You have the right to correct personal data we hold if it is inaccurate. You may also, with certain exceptions, request that we delete your data or cease processing it. You may request that we stop using your personal data for direct marketing purposes. In many countries, you have the right to lodge a complaint with the competent data protection authority if you are not satisfied with how we handle your personal data. If technically feasible, we will, based on your request, send you your personal data or transfer it directly to another data controller.
If you submit a request to us to send your personal data to udruga.tartufara@gmail.com, we will fulfill that request free of charge. If we cannot fulfill your request within a reasonable time, we will inform you of the date when we will fulfill the request. If for some reason we cannot fulfill your request, we will send you an explanation as to why we did not fulfill your request.
Notification of Personal Data Breach
In the event of a personal data breach, we will notify you and the competent supervisory authority via email within 72 hours of the extent of the breach, the data involved, the possible impact on our services, and our planned measures to secure the data and limit any harmful effects on individuals.
We will not send you a breach notification if:
- technical and organizational protection measures (such as encryption) have been applied to the personal data affected by the personal data breach, which render the data unintelligible to any person who is not authorized to access it;
- we have taken subsequent measures which ensure that the high risk to the rights and freedoms of individuals is no longer likely to materialize;
- it would involve disproportionate effort (in which case we will inform you via public announcement or a similar equally effective measure).
A personal data breach means a security breach leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed in connection with the offering of our services.
Your Consent
By using this website, you consent to this privacy policy.
Changes to Our Privacy Policy
In the event of changes to our privacy policy, we will inform you on this page and update the privacy policy modification date below as follows.
This privacy policy was last modified on October 26, 2023.
Right to Lodge a Complaint with the Competent Authority
You may at any time lodge a complaint with the supervisory authority regarding our collection and processing of your personal data. In the Republic of Croatia, you can submit a complaint to the Croatian Personal Data Protection Agency (AZOP).