GDPR Policy

Rulebook on the Methods of Processing and Using Personal Data of the Business Entity VIJCI KRANJEC

R U L E B O O K

on the methods of processing and using personal data of the business entity VIJCI KRANJEC

GENERAL PROVISIONS

Article 1

This Rulebook regulates the categories of personal data, as well as the purposes, processing, and protection of personal data, with the aim of ensuring such protection. Regarding the binding nature of its content, this Rulebook applies to clients, employees, and third parties in a contractual relationship (Data Subjects) with the business entity "Vijci Kranjec," Zagreb, Ulica grada Vukovara 3, Personal Identification Number (OIB): 40518747839 (hereinafter: VIJCI KRANJEC), as well as to other persons whose personal data is processed by VIJCI KRANJEC (Data Subjects), specifically concerning the processing of personal data and in instances where individual contracts do not stipulate otherwise. This Rulebook does not apply to the processing of data concerning legal entities, including their legal form and contact details. Appendices relating to the processing of personal data for specific categories of Data Subjects constitute an integral part of this Rulebook.

For all matters not regulated by this Rulebook, the provisions of the General Data Protection Regulation (GDPR) and the Act on the Implementation of the General Data Protection Regulation shall apply directly.

Article 2.

VIJCI KRANJEC, acting as the data controller, undertakes to process personal data lawfully, fairly, and transparently. Basic information about the Data Controller: Saša Kranjec, owner of the business "Vijci Kranjec", Zagreb, Ulica grada Vukovara 3, Personal Identification Number (OIB): 40518747839

Article 3.

For the purposes of this Rulebook, the following terms have the following meanings: 1. "personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; 2. "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; 3. "restriction of processing" means the marking of stored personal data with the aim of limiting their processing in the future; 4. "profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyse or predict aspects concerning that individual's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements; 5. "controller" means the business VIJCI KRANJEC; 6. "data subject" means customers, employees, business partners, third parties in a contractual relationship, and persons whose personal data are processed by the business VIJCI KRANJEC; 7. "recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. 8. "third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data; 9. "consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her; 10. "personal data breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed; 11. "biometric data" means personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data; 12. "data concerning health" means personal data related to the physical or mental health of a natural person, including the provision of health care services