Protection of the confidential data

Protection of the confidential data

Under no circumstances will we misuse your personal information.
We will not disclose your contact information or your personal information to any third party unless otherwise required by law.
We will not send you emails or notifications unless you have given your consent, except in the case of electronic transactions.
Whenever you wish, you can simply unsubscribe from receiving our emails or notifications.

 

Privacy Statement

This Privacy Statement applies to the confidentiality of personal information collected in the purchase and / or registration process at www.istta.eu. This Privacy Statement is an integral part of the General Terms and Conditions of the www.istta.euwebsite.

 

As data controller, Veselich promet d.o.o. collects the following personal data:

Activity/purpose	Type of data gathered and when they are gathered	Legal basis
Fulfilling the order/purchase Delivering the products purchased  Distributing the newsletter Prize-winning competitions	Full name, home address, phone number, e-mail address.   Financial and banking data such as account number and payment data during transactions, for which we use a third-party provider, Corvus Pay. We do not retain your financial and banking data; they are directly available to the provider we use. The provider’s Personal Data Protection Policy is available here.   The aforementioned data is collected when fulfilling the order, i.e. when the Customer enters their personal data for shopping purposes and confirms (by clicking) that they have agreed to both the General Terms and Conditions and this Privacy Statement, thus entering into a contractual relation that is the basis for purchasing products and services as chosen by the Customer at www.istta.eu.	Consent, fulfillment of a contractual obligation.
Receiving notifications on products and promotional activities, taking part in surveys, and participating in prize-winning competitions	Full name, e-mail address, date of birth.   The aforementioned data is collected when the Customer registers to receive notifications on products and promotional activities by entering their data at www.istta.euand confirms the correctness of their e-mail address, thus granting their consent for their personal data to be processed.	Consent
Cookies	The Cookie Policy is available here.	Consent

 

Data retention and security

Veselich promet d.o.o. will undertake the necessary internal organizational measures to ensure that your personal data is accurate, complete, and kept up to date for the intended purpose. 

Furthermore, the company will undertake all the appropriate security measures to protect your personal data from loss, manipulation, misuse, unauthorized access, disclosure, alteration, or destruction.

Retention period for personal data

Your data will be kept for no longer than is reasonably necessary for the individual purposes for which it was collected. Veselich promet d.o.o. regularly assesses the retention periods for the personal data it has, and deletes, i.e. destroys the data once it is no longer necessary for the purpose for which it was collected.

In case of legal or regulatory requirements that require personal data to be retained for a specified period, we will keep your personal data for the legally required period of time. 

Sharing of your personal data

Veselich promet d.o.o. may allow your personal data to be processed by parties providing support for our business activities. In that case, we will provide the third parties with only the personal data necessary for the specific scope of their provision of services on our behalf. Furthermore, we will not authorize them to use your personal data for any other purpose. For instance, we may share the services of processing your personal data with the following parties:

• Third parties aiding us in providing technical support: e.g. platform or hosting providers, database support and maintenance support service providers, and providers of software services, which may contain your personal data (such services occasionally entail access to your data so the necessary tasks can be carried out);
• Third parties providing bookkeeping services;
• Third parties providing debt recovery services (collection agencies and/or lawyers), in case Customers fail to meet their payment obligations on time;
• Public law bodies when, acting in good faith, we have reason to believe it is necessary in order to act under legal obligation.

All third parties are bound by specific contractual clauses guaranteeing data protection and confidentiality for any processing operations of your data, in line with the existing rules and regulations. Moreover, they only collect and process your data for the exact aforementioned purposes.

 

Data transfer to third countries

Your data is not transferred to third countries.

 

Your rights

Regardless of the reasons for data collection, you may at any time request the following:

• Access to, correction or update of your data across all databases containing personal data;
• Erasure (the right to be forgotten) of the personal data, upon which request Veselich promet d.o.o. will erase your data from all its databases, except for the data the company is under obligation to retain based on positive regulations. The company will also erase all data for which there are no overriding legitimate grounds for the processing, and data whose processing is not necessary for the establishment, exercise, or defense of legal claims; 
• Restriction of processing of your data or submission of complaint about personal data processing;
• Data portability, which allows you to obtain and move the personal data we have collected to either you or a third party;
• If the data was collected with your consent, you can withdraw your consent at any time without detriment;
• Right to lodge a complaint with a supervisory authority (Croatian Personal Data Protection Agency – www.azop.hr), if you believe the company’s processing of your personal data has violated your rights.

 

Card payment data protection

Veselich promet d.o.o. at the time of payment on the website www.istta.eu, as a condition of payment for products and services by credit or debit cards requires the consent of the Customer to activate the payment process through Corvus Info doo, provider of processing and payment (credit or debit) cards, contractual partner Veselich promet d.o.o.. and the Executor of personal data processing. For this purpose, the personal data of the Customer (name and surname of the Customer, address of the Customer, data from the Customer’s card) are temporarily stored with Corvus Info d.o.o., which stores this data in accordance with PCI DSS certification, the highest level of protection and confidentiality. The customer activates the process of card processing and payment by confirming (clicking) on ​​the “pay” link.

Veselich promet d.o.o.. at no time does it dispose of, collect, or process personal data entered for the purpose of processing and charging cards. Customers are instructed to be informed about the processing of personal data by Corvus Info d.o.o. on the website where the payment process takes place. Personal data stored with Corvus Info d.o.o. they are deleted immediately after the card processing and billing process is complete except for the Buy option.

Veselich promet d.o.o. informs the Buyer regarding the above consent to “Buy” Corvus Info d.o.o. does not store the security code (CVV) from the (debit, credit) card of the Customer. CVV is a three-digit or four-digit number that the Customer enters separately during the card payment process. This number will continue to be entered by the Buyer as an additional security check. Veselich promet d.o.o. therefore warns the Buyer to take care of the data stated on the card so that this data would not be available to third parties and so as not to be misused.

How to contact us

If you wish to exercise any of the aforementioned data protection rights or withdraw consent for the processing of your data (in cases where consent is the legal basis for the processing of your personal data), please contact us. We will keep records of our communication so we may timely resolve any issues.

You can contact us at any time and in any way convenient to you:

Veselich promet d.o.o.

Radićev odvojak 21

10410 Velika Gorica

E-mail: mirta.veselic@istta.eu

Website: www.istta.eu

Phone: +385992126230

 

Modification of the Privacy Statement

By completing an order at www.istta.eu, the Customer agrees to this Privacy Statement, confirming that they have read and understood it, and that they agree to the processing of their personal data as per the Privacy Statement. 

This Privacy Statement, Veselich promet d.o.o. may change it at any time by posting the amended text of the Privacy Statement on the Website www.istta.eu. Therefore Veselich promet d.o.o. invites Customers to periodically review this Privacy Statement which will indicate new changes, if any. If Customer does not agree with this Privacy Statement, we instruct Customer to leave and not access or use the Website www.istta.eu. The amendment to the privacy statement takes effect immediately upon publication on the Website www.istta.eu. The continued use of the Website www.istta.eu by the Customer after the entry into force of the changes, implies that the Customer confirms and accepts the amended Privacy Statement.

 

Right to complaint 

If, despite all the personal data protection measures undertaken, you still feel you have grounds for complaint, please contact us via e-mail to mirta.veselic@istta.eu. Naturally, you also have the right to file a complaint with the supervisory authority, namely the Croatian Personal Data Protection Agency.