PRIVACY STATEMENT

Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić, based in Zagreb, Savska cesta 208, OIB: 77152704832, (hereinafter “we”), as the service provider of the website https://starasava.hr is committed to protecting your privacy and your personal data. In this document you will find information related to the privacy of personal data collected through the use of the website https://starasava.hr or personal data by persons who contact us in any other way. For the sake of complete transparency and maximum security when using our site, please read this document carefully to better understand what information we collect from you and how we use that information. If you do not agree with these terms, leave and do not access or use the website https://starasava.hr. If you agree to this statement, electronic confirmation means that you confirm that you have read, understood and agree to this Privacy Statement and give us your consent to the collection, processing and sharing of data in accordance with this document and legal provisions. All issues that are not specifically regulated by this document are regulated by the Terms of Business of the website https://starasava.hr.

In order to facilitate understanding, it is necessary to point out the following terms in order to facilitate understanding of the Statement in question;

1. “General Regulation on Personal Data Protection” – EU Regulation 2016/679 of the European Parliament
2. “Personal data” – means all data relating to an individual whose identity has been or can be established (“respondent”); an identifiable individual is a person who can be identified directly or indirectly, in particular by means of identifiers such as name, identification number, location data, network identifier or by one or more factors specific to physical, physiological, genetic, mental , the economic, cultural or social identity of that individual;
3. “Processing” means any operation or set of operations carried out on personal data or on sets of personal data, whether automated or non-automated, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, inspection , use, disclosure by transfer, dissemination or otherwise making available, harmonization or combination, restriction, deletion or destruction;
4. “Pseudonymisation” means the processing of personal data in such a way that personal data can no longer be attributed to a particular respondent without the use of additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that personal data the data cannot be attributed to an individual whose identity has been established or can be established;
5. “Storage system” means any structured set of personal data available according to specific criteria, whether centralized, decentralized or dispersed on a functional or geographical basis;
6. “Processing controller” means a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller or the specific criteria for his appointment may be provided for by Union law or by the law of a Member State;
7. “Processor” means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
8. “Consent” – respondent means any voluntary, special, informed and unambiguous expression of the respondent’s wishes by which he gives a statement or clear affirmative action consent to the processing of personal data relating to him;
9. “Violation of personal data” – means a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed.

In the following points, we would like to inform you about the processing of personal data when visiting and using our website. Personal data is all that identifies you, e.g. name, surname, address, e-mail address, telephone number and user behavior. If you have any questions regarding the protection of personal data, please contact us via e-mail at info@starasava.hr.

1. Official person for data protection The

legal person responsible for the collection, processing and use of your personal data in accordance with the GDPR is the Craft for Catering “STARA SAVA” Vl. Jasna and Goran Antolčić, based in Zagreb, Savska cesta 208, OIB: 77152704832. In all matters concerning the processing of your personal data, you have at our disposal a personal data protection officer who you can contact via e-mail address: info@starasava.hr

2. For what purposes is your personal data collected?

Respect for privacy is a serious issue to which we pay special attention when processing and using personal data. Therefore, we attach great importance to the protection of your personal data. Personal data will be collected (eg your name, address or other contact details), processed and used exclusively in accordance with the applicable data protection provisions. We

process your personal data in different situations for different purposes. When you visit our online store where we also use cookies, we also use your information to track the number of visits and to improve our services. Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić collect and use personal data in order to enable you to use their services and activities through the website https://starasava.hr, and all in order to improve the work of the website https://starasava.hr, in order to create a database of our users, for marketing purposes, to contact you or submit marketing notices, improve our advertising and promotional efforts, analyze the use of the website

https://starasava.hr We can also use personal data for statistical purposes, then to solve problems, implementation administrative tasks, establishing contact with you.

By providing your personal data and accepting these General Terms and Conditions of Personal Data Protection, you agree that the Craft for Catering “STARA SAVA” Vl. Jasna and Goran Antolčić and the persons listed below (item 13) inform about the promotional activities, products and services they offer.

In addition to your personal data Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić may collect other information from you that cannot identify you and is not considered personal information (for example, information about how you use the site, information about your computer, Internet provider, your preferences, hobbies, interests, activities), and which allow us to better, more accurately and more personally select data for the user, or to improve the site and its content to further direct and adapt to the audience that visits it. Based on this data, we find out which contents are the most popular among which audience.

We can collect the following types of data:

– Contact information – name, surname, date of birth, gender, title, address, contact, number, email address, phone number.

– Use of the website – the way you use our site, including information collected through cookies and other tracking technologies

– Photos and videos – in the case of presentations at fairs, conferences and other similar events, we may accompany the event by taking photos or recording videos

– Information on sales, services and service – purchase information, including customer’s user identity, account or contract number and information on the use of our services, including complaints and requests

– Customer history information – customer satisfaction, offers received, purchase data including subject and date of purchase, delivery date, warranty information, campaign response, complaint history, service and service history

3. How we collect personal information

We usually obtain your personal information directly through our website or when we communicate with you. Some other information can also be obtained from our partners, such as banks or transport companies.

Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić collect your personal information, inter alia, in the following cases:

– if you contact us directly to request information or an offer for our products or services

– when you engage in certain activities on the website https://starasava.hr, such as opening an account, subscribing to a newsletter or filling out surveys, comments, participating in contests or sweepstakes, sending feedback to us, seeking information about our services, responding to a job advertisement, we may ask you to provide certain additional personal information

– if Buy a product or service directly from us

– if you respond to our direct marketing campaigns, for example by filling out the data entry form on our website

– if our partners or principals provide us with your data in a permitted manner

– if we received your personal data from other sources , for example from a business address broker

Note: u if you are under the age of 16, please do not provide us with any information without the approval of a parent or guardian.

4. What personal information do we collect?

If you only browse our website then we collect the following personal

data within our logs:

– IP addresses (see below Cookies)

If you use or purchase our services and products then we collect the following personal

data:

– Name and surname

– OIB

– Address

– Email address mail

– phone numbers

– payment details

– Information about your computer or mobile device (eg. your IP address and browser type, device type)

– Information on how to use our Services (for example, pages viewed, time when you watched and what you clicked).

Although we do not actively collect them, we may store any personal information you discover during live chats, support requests (tickets) or emails.

5. Cookies and IP addresses

5.1. When do we collect cookies?

When you visit the site for information only, e.g. if you do not wish to register or otherwise provide information about yourself, we will only collect personal information that your browser transfers to our server. If you wish to visit our website, please note that we collect the following information that we, technically, need to be able to display our website to you and to ensure its stability:

IP address

Date and time of access

Operating system

Time zone difference compared to Greenwich Mean Time

(GMT)

Request content (special page)

Access status / HTTP status

activation Javascript

Java off / enabled

Cookies Enabled / disabled

Amount of data transferred

URL data about the previously visited page

Browser type

Operating system and its interface

Language and version of the browser software The

legal basis for the processing of pseudonymous data described under point 2.1 is Art. 6th st. 1 f) General regulations are a legitimate interest (improvement of the website and user experience for users and data protection).

5.2. In addition to the aforementioned information, cookies are stored on your computer when you visit our website. Cookies are small text files that are stored on your hard drive through the browser you use, and through which certain information travels to the source that sets the cookies. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet simple and efficient for the user.

5.3. Use of cookies:

1. a) This website uses the following types of cookies, the scope and their operation which are explained below:

Temporary cookies (see b).

Persistent cookies (see c).

1. b) Temporary cookies are automatically deleted when you close your browser. They mostly refer to session cookies. They store so-called session identifiers, which can be assigned to a regular session depending on the request of your browser. This allows you to recognize your computer when you visit our website again. Session cookies are deleted when you log out or when you close your browser.
2. c) Persistent cookies are automatically deleted after a certain period depending on the cookie. You can delete cookies at any time in the security settings of your browser.
3. d) You can configure your browser settings to your liking and you can, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of the website then.
4. e) We use cookies to identify you during future visits, in case you have registered on our site. If you have not, you must log in every time you visit our site.
5. f) The Flash cookies used are not collected by your browser, but by your Flash plugin. We also use HTML5 storage items stored on your mobile device. These items store the required data independently of your browser, and do not have an automatic expiration date. If you do not want to process Flash cookies, you must install the appropriate plugin, e.g. Better Privacy for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or Adobe Flash cookie remover for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode when using your browser. We also recommend that you regularly manually delete your cookies and your search history.

5.4. Of course you can also browse our website without using cookies. Internet browsers are set up to accept cookies. In general, you can deactivate the use of cookies at any time through your browser settings. Please use the browser’s help functions to find out how you can change these settings. Please note that some features of our website may not work in part or in full if you disable the use of cookies.

5.5. The legal basis for data processing in accordance with the above is Article 6 (1) item f) of the GDPR. Our interests in data processing mainly stem from the desire to enable the use of the website in a way that ensures its operational stability and security. We store personal information, unless otherwise stated, only as much as is necessary to perform the desired functions.

5.6. If we use contracted service providers for individual functions of our offers or if we use your information for advertising, we will inform you in detail. We will also specify certain criteria for the storage period.

6.

Google Analytics Affiliates

Like many other websites, we use Google Analytics to collect anonymous information about the users of our websites, to find out how often they visit our websites, which pages they visit, when they visit them, how long they stay and from which countries are coming. This data is collected using cookies and IP addresses, and the statistics obtained are used for the following purposes: to improve the usability of websites. to monitor the success of marketing campaigns. for the analysis of patterns of behavior. More information about how Google uses data collected from our websites can be found here: https://policies.google.com/privacy/partners?hl=en&gl=en

1. a) The website uses Google Analytics and the web analytics services provided by Google, LLC. (“Google”). Google Analytics also uses cookies, ie text files that are stored on your computer and enable the analysis of your use of the website. The information generated by the cookie regarding your use of this website is transmitted to a Google server in the USA and stored there. By activating the IP anonymization of the website, Google will shorten your IP address within the member states of the European Union or other parties involved in the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and truncated there.
2. b) Google will, on our behalf, use this information for the purpose of analyzing your use of the Website, and will prepare reports on activities on the Website and provide us with information on other services related to website activity and Internet use.
3. c) Google may not associate the IP address obtained from your browser with any other data stored by Google. Google may also transfer this information to third parties where required to do so by law, or where such third parties process this information on behalf of Google.
4. d) You can delete cookies on your computer at any time via the appropriate menu on your browser or by deleting them from your hard drive. For more information, select the Help menu on your browser.
5. e) You can refuse the use of cookies by selecting the appropriate settings of your browser; however, we recommend that in this case you may not have access to the full functionality of this website. You can also prevent data about your use of the website (including your IP address) generated by the cookie from being sent to Google, and you can prevent data from being processed by Google by downloading and installing the browser plug-in available at the following link: http: / /tools.google.com/dlpage/gaoptout?hl=en
6. f) Further information is available at http://tools.google.com/dlpage/gaoptout?hl=en. We want to emphasize that the code “_anonymizeIp ();” added to Google Analytics on the website to be able to guarantee anonymity when collecting IP addresses (so-called IP address masking).

Google Maps

This website uses the Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes, and uses information about the use of map features by visitors. You can find more information about the processing of Google data in the Google Privacy Policy. You can also change your personal data protection settings in the Data Protection Center.

Google Web Fonts

Google Fonts are used to improve the visual presentation of various data on this website. Web fonts are transferred to the browser’s secret memory when the page is opened, so that they can be used in views. If your browser does not support Google Web Fonts or does not allow access, the text will be displayed in the default font. The data provided when linking to the page is sent to domain-specific sources such as fonts.googleapis.com or fonts.gstatic.com. This data is not related to data that may be collected or used while using Google services. In the browser, you can set fonts not to be downloaded from Google servers (for example, by installing add-ons such as NoScript or Ghostery for Firefox.). If your browser does not support Google Fonts, or if you deny access to Google servers, the text will appear in a pre-defined font.

Mailchimp

We use MailChimp as a platform to automate newsletter subscriptions. By clicking on the ‘Subscribe’ button, you agree that your e-mail address be stored in the MailChimp database in order to be processed in accordance with their privacy policy and terms of use. Mailchimp privacy policy can be found at https://mailchimp.com/legal/privacy/ You can withdraw your consent at any time by clicking on the ‘unsubscribe’ (or ‘unsubscribe’) link at the bottom of the email.

Google

Tag Manager This website uses Google Tag Manager. This service allows you to manage website bookmarks via an interface. Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. Google Tag Manager launches other tags that collect data as needed. However, Google Tag Manager does not reach for this information. If a domain or cookie-level deactivation is made, it remains valid for all tracking tags if implemented with Google Tag Manager.

Google Remarketing We

use the Google Remarketing app to contact you again within 12 months. With this application, after visiting our website, our ads can be displayed when you continue to use the Internet. This is done using cookies, which are used to record and evaluate your use behavior by Google when visiting various websites. This way, Google can determine your previous visits to our website. According to Google’s own statements, Google does not combine data collected in the context of remarketing with your personal data that Google may store. According to Google, pseudonymization in particular is used for remarketing.

You can prevent involvement in the tracking process in a variety of ways:

1. a) by setting your browser software accordingly, in particular by preventing third-party cookies, you will not receive ads from third-party providers;
2. b) by disabling conversion tracking cookies, setting the browser so that the domain https://support.google.com/ads/answer/7395996 blocks cookies, this setting being deleted when you delete cookies;
3. c) deactivation of advertisements based on interest for providers participating in the self-regulation campaign “About advertisements” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete cookies;
4. d) permanently deactivating Firefox, Internet Explorer or Google Chrome in browsers at http://www.google.com/settings/ads/plugin,
5. e) setting cookie settings accordingly (click here). Please note that in this case you may not be able to take full advantage of all the features of this offer.

Learn more about the purpose and scope of Google’s data collection and processing at https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html. In addition, additional information can be found on the Network Advertising Initiative (NAI) website http://www.networkadvertising.org . Google has joined the EU-US Privacy Shield:  https://www.privacyshield.gov/eu-us-framework.

WSPay

Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić WEBSHOP uses WSPay for online payments. WSPay is a secure system for online payment, real-time payment, credit and debit cards and other payment methods. WSPay provides the customer and merchant with secure registration and transfer of entered card data, which is confirmed by the PCI DSS certificate that WSPay has. WSPay uses 256-bit encryption SSL certification and the TLS 1.2 cryptographic protocol as the highest levels of protection when writing and transferring data.

Facebook Pixel

This website also uses the “Custom Audience” remarketing feature of Facebook Inc. (“Facebook”) to be contacted again within 180 days. This allows website users to see ads according to their interests (“Facebook ads”) when they visit the social network Facebook or other websites. Your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of data collected by Facebook using this tool and therefore inform you in accordance with our knowledge: By integrating Facebook Custom Audience, Facebook receives information that you have referred to a website that matches ours or clicked on our ad. If you are registered for the Facebook service, Facebook may link your visit to your account. Even if you are not registered on Facebook or have not logged in, it is possible that the service provider can obtain and store your IP address and other identifying information. The “Facebook Custom Audiences” function can be deactivated in the Cookie settings and for logged in users at https://www.facebook.com/settings/?tab=ads#_. For more information on data processing via Facebook, visit https://www.facebook.com/about/privacy.

Social connections

Our social connections (“connections”) are used by social networks. In order to raise the level of protection of your data when visiting our website, links are not prohibited, but are only integrated into the page via an HTML link (the so-called “Shariff solution”). This integration ensures that no connection is made to the servers of a particular social network provider when our page containing such links is opened. Clicking on one of the buttons opens a new window on your browser and opens the page of a specific service provider, and on it you can (if necessary after entering the login data) e.g. press the Share key. The purpose and scope of the data collected and the further processing and use of data by providers on their site, as well as your rights and settings to protect your privacy, can be found in the data protection information of the following providers:

– Instagram (1601 p. California Ave, Palo Alto, CA 94304, USA)

– Facebook Inc. (1601 p. California Ave, Palo Alto, CA 94304, USA)

– Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043 USA)

7. Newsletter

(1) After giving your consent, you can subscribe to our newsletter, which informs you about our current interesting offers and services. The advertised goods and services are listed in the statement of consent.

(2) We use the ‘double opt-in’ procedure when subscribing to our newsletter. This means that, after you register, we will send you a mailbox in the mailbox to the e-mail address you provided, asking you to confirm that you want to receive our newsletter. If you do not confirm the registration within [24 hours], your data will be blocked and will be automatically deleted after one month. In addition, we will store your IP address and registration and confirmation time. The purpose of this procedure is to give you the opportunity to prove your registration and, if necessary, to clarify all the circumstances in the event of misuse of your personal data.

(3) The only obligatory information that you need to give us when subscribing to the newsletter is your e-mail address. The provision of other information is voluntary, and this information is used so that we can contact you personally. After your confirmation, we will store your email address for the purpose of sending news. The legal basis is Art. 6. (1) point. and GDPR.

(4) You can withdraw your consent to send the newsletter at any time, and thus cancel the sending of news. You can confirm the withdrawal of consent by clicking on the link in each sent mail with newsletters, by sending an email to info@starasava.hr or by sending a message to one of the listed contacts.

(5) We emphasize that by sending our newsletters we assess user behavior. For the purpose of this analysis, the emails sent contain so-called web followers or tracking pixels, which are single-pixel image files stored on our website. During the assessment, we link the mentioned data and web companions with your e-mail address and special identification.

You may complain about this tracking method at any time by clicking on a separate link provided by email or by informing us via email. The data is stored for the time during which you subscribe to the news. After cancellation, we store the data anonymously for statistics. If you contact us (e.g. via the warranty form, contact or email), we will store details about you to process the request and for any additional questions. We will delete the mentioned data after we no longer need them in storage or we will limit the processing if there are statutory obligations to keep them. We only store and use other personal information only if we obtain your permission or if it is legally possible to do so without special permission.

8. How can your data be used?

The use of personal data in accordance with the regulations on personal data protection must be justified on the basis of one of the legal “bases”, and we set out in this Statement the bases for each use of personal data. Justified basis for use; is Legitimate Interest, Consent, Execution of a Contractual Obligation, and Fulfillment of Legal Obligations.

Legitimate interest:

This processing is based on the legitimate interest of the company Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić for promoting and providing information about their products and services, as well as for the purpose of maintaining the highest standards of sales and services from their offer. The fundamental rights and freedoms of existing and potential customers are measured in relation to the interest of the company Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić to process personal data for the stated purpose.

Consent:

Company Crafts for catering “STARA SAVA” Vl. Jasna and Goran Antolčić use direct marketing based on your personal data to inform you about news and promotions in our offer about special shopping benefits, presentations of new products, as well as our appearances at fairs, conferences and other events only with your consent . Consent for direct marketing can be withdrawn at any time. Any person may also object at any time to the processing of data for the above purpose.

Izvršavanje ugovorne obveze:

Obrada se temelji na ispunjavanju ugovorom preuzete obveze

Radi ispunjavanja pravnih obveza:

Obrada se temelji na obvezi društva Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna i Goran Antolčić da ispuni svoje zakonske obveze kao Voditelj obrade primjerice s osnova računovodstvenih i knjigovodstvenih propisa.

9. How long do we keep your data?

We store and process personal data only for as long as is necessary for the execution of a certain legitimate purpose, unless the applicable regulations provide for a longer period of storage for a particular purpose. In the case of giving consent for marketing, we keep the data as long as the consent is not withdrawn. In the case of rejected bids, where no consent has been given for marketing, we keep the data related to the bid for one year, and in case you ask us to delete them, they will be deleted immediately. As a rule, personal data collected for the purpose of fulfilling the contractual obligations of the Processing Manager are kept permanently or until you request them to be deleted, in which case only data on performed transactions are permanently kept. Transaction data is kept permanently due to a legal obligation in accordance with applicable accounting regulations. Personal data that is no longer needed is either irreversibly anonymized or destroyed in a secure manner

10. How do we keep your data secure?

We pay the utmost attention to maintaining the security of all data and take all appropriate steps in accordance with the regulations on personal data protection in force in the Republic of Croatia. We use a variety of security measures, including encryption and authentication, to protect and maintain the security, integrity, and availability of your information.

Among other things, we use the following measures:

– strictly limited personal access to your data on the principle of “necessary access”

– secure transfer of collected data,

– installation of firewalls on IT systems to prohibit unauthorized access

– permanent monitoring of access to IT systems to detect and prevent misuse of personal data data.

All your data is stored on our secure servers and the secure servers of our partners and is accessed and used in accordance with our security rules and standards (or equivalent standards of our subcontractors or business partners). The protection of the privacy of your data is permanent, and the company Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić take all measures necessary to protect them in accordance with applicable regulations and good practices. We process personal data in a secure manner, including protection against unauthorized or unlawful processing and against loss. The user can access personal data on the website https://starasava.hr using a password and e-mail address. It is recommended that the user does not reveal the password to anyone. In addition, the user’s personally identifiable information is stored on a server that can only be accessed by selected individuals and service providers. You are obliged to take care of the security of your user password and change it from time to time. No data transmission over the Internet, or any wireless network can be 100% secure and the company Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić cannot guarantee the protection of any information transmitted to, or from the website https://starasava.hr and is not responsible for the actions of any third party to whom such information becomes available.

11. Where do we store and process your personal information?

We store the personal data we collect from you on our servers. However, we may share this information with third parties with whom we do business for the purpose of fulfilling service contracts with you, which may be located outside the European Economic Area. By submitting your personal data, you consent to the processing of such data outside the European Economic Area. We will take all necessary steps to ensure that your personal data, regardless of where it is processed, is safe and treated in accordance with this Privacy Policy and the GDPR.

12. Your data privacy rights

We are pleased to inform you of your rights regarding the general data protection provision. According to the GDPR, from 25 May 2018 onwards you have certain rights relating to your personal data, and we briefly describe them below:

Right of access

You have the right to request confirmation of whether the data about you and information about this data are processed according to Art. 15. GDPR. You can exercise your right by contacting us (see below How you can contact us). Please note that before processing any request for access to data, we must verify your identity, and we may contact you further to make sure we understand what information you are requesting. Once we verify your identity, we will provide the requested information to you within 30 days. We will provide the requested information free of charge, however, we may charge an administrator fee if the request is clearly unfounded or excessive, and especially if it is repeated.

Right to rectification

Pursuant to Article 16 of the GDPR, you have the right to request the completion or correction of inaccurate data concerning you.

Right to erasure (Right to forget)

In accordance with Article 17 of the GDPR, you have the right to request the erasure of relevant data in the event that erasure is not prevented by any legal obligations.

Right to restrict processing

You have the right to request a restriction on data processing in accordance with Art. 18.

Right to data portability

You have the right to request the receipt of data provided to us in accordance with Art. 20 of the GDPR and to additionally request a transfer to other processors

Right to appeal

You have the right to appeal for future processing in accordance with Art. 21. of the GDPR at any time .You can exercise your right by contacting us (see below How you can contact us).

Right to revoke

You have the right to revoke your consent at any time in accordance with Art. 7., St. 3 of the GDPR, which refers to the future.

The right to inform the supervisory services

In accordance with Art. 77 of the GDPR, you have the right to appeal to the competent supervisory services.

13. Persons with whom we share your personal datashare the

We maydata you provide to us, based on our legitimate interest, with affiliates who may also process them. We may share your personal information with third parties in accordance with the contractual obligations we have with them. This is in our legitimate interest.

Such third parties (business partners) include:

– professional advisors and auditors,

– suppliers hired by the Company to provide services on behalf and for the account of the Company, including IT service providers, event organizers; and

– other persons hired by the Company to provide you with services including courier services, lawyers, experts and translators.

14. Confidentiality of third party data

On our website we can place links to the websites of our business partners. If you follow this link to any of these websites, please note that their own privacy policies apply to these websites and that Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić have no responsibility regarding these rules. Please review such policies before entering or submitting your personal information on these websites. This Privacy Statement applies only to the use and use of data by the company Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić collect from the respondents. Other websites that can be accessed through the website https://starasava.hr have their own statements of confidentiality and data collection and ways of using and publishing them on them. If you switch to any such site, we recommend that the user review the privacy statement of that site. Craft for catering “STARA SAVA” Vl. Jasna and Goran Antolčić are not responsible for the ways and conditions of work of third parties. We reserve the right to change this Privacy Statement at any time, for any reason. You will be notified of any changes to this Privacy Statement on our website. Amendments to the general conditions for the protection of personal data come into force immediately after their publication on the website https://starasava.hr. We may occasionally remind you of the Privacy Statement by e-mail, while there is always a valid version of the Privacy Statement on the website.

15. Changes to our Privacyour Privacy

Statement We regularly review and updateStatement and, if necessary, reserve the right to change our privacy statement. Therefore, please read the Privacy Statement from time to time and apply the one that is valid at that time.

16. Disclosure of your personal data

We may disclose your personal data to third parties in the following circumstances: If a third party acquires partial or full ownership Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić, in which case the personal data of the user Obrt za ugostiteljstvo “STARA SAVA” Vl. Jasna and Goran Antolčić, become part of the property of a third party. If we have an obligation to disclose or share your personal information in order to fulfill any legal obligation, or to exercise our rights under the Terms of Business or to protect the rights, property or safety of our users or others. This includes exchanging information with other companies and organizations for fraud prevention and security breach purposes.

17. How can you contact us?

Your questions, comments and requests regarding the Privacy Statement are welcome and in this regard you can contact us by e-mail at info@starasava.hr You can contact us at the specified address in case you want to exercise any of your rights below.

You have the right at any time:

– to ask us to provide you with additional information on how we use your data

– to send you a printout of the personal data you have given us

– to ask us to correct any inaccuracies in the data we have

– to ask us to delete all data in respect of which we no longer have a legal basis for use,

– in cases where processing is based on consent and in relation to any direct marketing, withdraw our consent with effect in the future in order to stop such specific processing

– object to any processing [including profiling ] which is based on a legitimate interest due to your specific situation, unless the reasons for carrying out such processing are stronger than the right to protection of personal data

– ask us to limit the way we use your data, e.g. while the complaint is being processed

– the right to the possibility of data transfer