Privacy Policy

Privacy Policy

BRAND KARMA d.o.o., headquartered at Kaptol 21, Zagreb, OIB: 17671885663, MB: 04138708, establishes through this Privacy Policy the method of collecting, storing, and using personal data.

In our business operations, we process certain personal data, which is why we are adopting this Privacy Policy. It applies to data processing that occurs via our website (hereinafter: the Website), as well as through regular business operations. Furthermore, this Policy describes the basis and purpose of such processing and the rights of the data subjects.

All terms used in this text are defined in the same way as in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR).

Please read this Policy carefully to learn how we collect, process, protect, or otherwise use your personal data.

Data Controller

The website of BRAND KARMA d.o.o., headquartered at Kaptol 21, Zagreb, OIB: 17671885663, MB: 04138708 (hereinafter: Data Controller, or we, our, etc.), uses only the most essential, i.e., necessary cookies required for the proper functioning of our website. Choosing the option to reject cookies can significantly affect the functionality of the website in terms of your user experience.

Contact Details:

• Phone: +385 98 458 226
• E-mail: jelena@hiddentablecroatia.com
• Instagram:https://www.instagram.com/hiddentablecroatia/

Who is the Data Subject?

A data subject is any identifiable individual, i.e., a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Within the framework of the Data Controller’s operations via the Website, the data subject could primarily be:

• Any person who uses the contact form on the Website.
• Any visitor to the Website.

Within the framework of regular business operations, the data subject may be our client (existing or potential), our suppliers and business partners, our employees, and job candidates.

How Do We Collect Data?

We generally collect your personal data when you provide it to us. This can happen in the following situations:

• Automatically via our Internet servers or by using “cookies”.
• By using/visiting this Website.
• By filling out and submitting the contact form on the Website.

We aim to collect only the data that is absolutely necessary for fulfilling contractual and legal obligations, and for providing our services effectively and with high quality. The data we collect may include (depending on the circumstances) and via cookie functionality:

• Name and surname.
• E-mail.

Why Do We Process Data?

We process data primarily to fulfill contractual and legal obligations related to our business activities. Specifically, we need this data to effectively manage your inquiries, i.e., to contact you back. It is not excluded that official bodies may approach us with requests, as they have the right to inspect documentation that may contain personal data within the scope of their authority. Regarding our Website, the data we collect is needed to personalize your user experience and generally improve our Website. We do not make decisions based on automated data processing.

What is the Legal Basis for Processing?

The legal basis for processing depends on the circumstances of the specific case. Below is an overview of common situations:

• If you are a customer (or a potential customer), the basis for processing personal data is the performance of a contract (or taking pre-contractual steps) to which you are (or potentially will be) a party, i.e., the purchase and sale of goods or the provision of services.
• If you contact us using our contact form on the Website (or in another way) with inquiries related to an order, the basis for processing personal data is the performance of a contract to which you are a party.
• If you contact us using our contact form on the Website (or in another way) to submit a complaint, processing is necessary for compliance with our legal obligations, primarily the applicable provisions of the Consumer Protection Act if you are a consumer.
• Data processing on the Website via cookies takes place based on your consent as a visitor (with the exception of so-called functional cookies, without which the Website cannot function properly).

Who Do We Share Your Data With?

Our primary goal is not to share your data, or to share it with a minimal number of entities, and only if there are justified circumstances for doing so (usually a contractual or legal obligation). We are careful to always share only the minimum amount of absolutely necessary personal data.

In such circumstances—that is, if there is an essential need for it—we share data with:

• Subcontractors/suppliers for the execution of operational activities (issuing and processing quotes, invoices and payment systems, etc.).
• Tax/legal/accounting advisors (provided they are bound by professional secrecy, contractual confidentiality clauses, etc.).
• Competent authorities—if required by applicable local or European legislation.

We do not transfer data to third countries, i.e., outside the borders of the Republic of Croatia. Should such a need arise, the data will not be transferred before we ensure that appropriate safeguards and standards are in place.

How Long Do We Keep Personal Data?

We aim to process your data only as long as necessary, and afterward permanently delete/destroy it; however, we are legally obliged to keep some data slightly longer. We must certainly process your data for at least the duration of the limitation period for any claims you might have in case of dissatisfaction with a service or goods. If there are judicial or other proceedings in which you are a party, your data will be processed for as long as those proceedings last.

When data is processed for accounting purposes or is contained in an accounting document such as an invoice, it is stored for at least 11 years, in accordance with legal regulations on accounting. The Data Controller maintains a record of processing activities, which details how long data is processed.

Protection of Your Data

To protect the personal data you send via this Website, we use physical, technical, and organizational security measures. We continuously upgrade and test our security technology. We restrict access to your personal data only to those employees who need to know that information to provide you with some benefits or services. In addition, we educate ourselves on the importance of data confidentiality, maintaining privacy, and protecting your data.

Individuals’ Rights

Please direct all inquiries regarding the exercise of your rights (related to personal data, which includes cookies) to jelena@hiddentablecroatia.com, and we will comply with your request free of charge. We respond to your inquiries and requests within 30 days. If for any reason we cannot fulfill your request, we will send you an explanation as to why we were unable to do so.

Subject to the preconditions contained in the GDPR, you have a range of rights described below:

• Right of Access: If you want to know whether we hold and process your personal data (and what data it is and what we do with it), or if you want to access the personal data we hold about you, please contact us at jelena@hiddentablecroatia.com.
• Right to Rectification: You have the right to correct the personal data we hold if it is inaccurate or needs updating.
• Right to Erasure / Stop Processing: Under certain circumstances, with certain exceptions, you can request that we delete your data or stop processing it. Please note that deletion may prevent us from providing certain services or reduce their quality (e.g., if you decide to delete your user account, you will have to re-enter your details with each new order). We must process certain data for a specific period, whether due to legal or contractual obligations. You can request that we stop using your personal data for direct marketing purposes.
• Right to Restriction of Processing: You have the right to restrict processing if some of the processed data is inaccurate but you do not want the data to be deleted (preferring to restrict its use instead), or if we no longer need the data for the intended purposes, but you want to retain it for your own legitimate needs (i.e., establishing, exercising, or defending legal claims).
• Right to Data Portability: Along with the right of access, you may simultaneously use the right to data portability. This means that we transfer the data to you in a structured, commonly used, and machine-readable format, provided we process this data based on the consent you have given us (which you can revoke) or for the performance of our contract, and if the processing is carried out by automated means.
• Right to Object: You have the right to object (among other things) if we process your data for the performance of a task carried out in the public interest or in the exercise of official authority, or if we rely on our legitimate interests during their processing.
• Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time. The withdrawal of your consent will only affect future processing. Processing carried out prior to the withdrawal of consent remains valid.

Complaints and Regulatory Authority

If you are not satisfied with our response to your inquiry, or if you have not received a response within 30 days from the date of submitting your request, you have the right to lodge a complaint with the supervisory authority, namely the Personal Data Protection Agency (AZOP). A request for determining a violation of rights is submitted to the Agency:

1. In person (orally into the record)
2. In writing to the address: Agencija za zaštitu osobnih podataka, Selska cesta 136, 10 000 Zagreb
3. Online: By filling out the form on the Agency’s website (www.azop.hr)
4. By email: azop@azop.hr
5. By fax: 01/ 46-090-99

Note: Please take into consideration that if your requests are manifestly unfounded (even if there is only one) or excessive, in particular because of their repetitive character, we have the right to:

(a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or

(b) refuse to act on the request.