In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 119, 4.5.2016, pg. 1., hereinafter: General Data Protection Regulation or GDPR), which has been in full force and effect in the Republic of Croatia and all EU Member States since 25 May 2018, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), i.e. in line with the legal framework for personal data protection in the Republic of Croatia and the European Union, as well as European best practice, PODRAVKA d.d., having its seat at Ulica Ante Starčevića 32, Koprivnica (City of Koprivnica), OIB: 18928523252 (hereinafter: PODRAVKA), as the controller responsible for the processing of personal data of the users of its services and its customers, has prepared the following Privacy Policy.
This Privacy Policy (“Policy”) explains how PODRAVKA collects, uses and manages your personal data available on and through the use of the website https://vegeta.com/en/
This Privacy Policy applies to all services offered by PODRAVKA, and its objective is to inform our visitors, partners and users of our services (hereinafter: “Data Subjects”) about the operations of processing of their personal data and about their rights in a clear and transparent manner.
PODRAVKA is committed to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data, and how the collected data will be used. With regard to personal data we collect, PODRAVKA is the “Controller”, i.e. it determines the purposes and means of the processing of personal data.
As the provider of website services, PODRAVKA is committed to protecting the privacy of personal data.
If you wish to contact us in connection with this Policy or your personal data, please use the following contact information:
PODRAVKA d.d.
Ulica Ante Starčevića 32
48 000 Koprivnica
You can contact the Data Protection Officer at: dpo@podravka.hr
How and when do we collect your personal data?
We collect your personal data when this is necessary to meet your needs and fulfil your requests, to perform services or for the purpose of our business operations:
a) when you access the website https://vegeta.com/en/, we will collect your IP address, also considered as personal data,
b) when you register as a user or subscribe to our newsletter or other notifications about our products and promotions. As the Controller, we will ask you to enter information about yourself (personal data) such as e-mail address, first and last name, and phone number (part of the data is marked as optional). The legal basis for the processing of your data is your consent. Thus, by entering their data on the website https://vegeta.com/en/, the users who subscribe to notifications about our products and promotions give their consent to the processing of their personal data. The users may withdraw their consent at any time by sending a notification to the e-mail address of the Data Protection Officer,
c) situations where we collect other types of data, such as the date and time of access to the site, information about the hardware, software or web browser you use, as well as your computer operating system, application version and language preferences. We can collect information about your clicks and access to the website https://vegeta.com/en/ shown to you,
d) when you contact our office and request our assistance or ask a question in order to exercise any of your rights guaranteed by applicable regulations,
e) when you contact us through social media, we collect data you provide to us when making enquiries or requests,
f) when you participate in our prize contests, we collect various data depending on the type of prize contest, and we will provide additional information thereon in the rules of the prize contest. We can collect data that include, e.g., your first name, last name, prize delivery address,
g) when you fill out a satisfaction survey, we process data such as your IP address,
h) when you send us an enquiry regarding our offer, we process your contact information and/or other data you provide when sending the enquiry,
i) when you apply for an unadvertised job, we will process data such as your first name, last name, age, education, occupation, work experience, contact number and other information included in your application,
j) when registering on a website, both the date and the time information for the IP address assigned by the Internet Service provider (ISP) and used by the data subject are stored. Registration, together with your consent, allows us, as the Controller and Organizer, to offer content or services that may only be offered to registered users due to the nature of their subject-matter. Registered persons may change personal data provided during registration or completely delete such data from our records at any time,
We collect the above specific categories of your personal data either on the basis of the consent, shown to you in a pop-up window when you arrive at https://vegeta.com/en/, or on the basis of legitimate interest (for example, when cookies are necessary for the functioning of the website https://vegeta.com/hr/ or when we send you some interesting notifications and/or offers of promotions) or in order to fulfil our obligations arising from the applicable regulations of the Republic of Croatia.
If the processing is based on your consent, you have the right to withdraw your consent at any time. You should notify the Controller of such withdrawal by sending an e-mail to dpo@podravka.hr or a letter marked “Attn. Data Protection Officer” by post to PODRAVKA d.d, Ulica Ante Starčevića 32, 48 000 Koprivnica. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Please take note of the scope of the required information we request from you because if you do not provide the requested information marked as required because necessary for performing an activity you have requested or expect, unfortunately, you will not be allowed to access such activity or the activity will not be technically feasible.
To summarize all the above, we typically collect your personal data directly from you when you fill out a form or want to subscribe to our newsletter.
We do not use your personal data for marketing purposes unless you tell us you agree. If you want us to send you the details about our products, events, services, offers and promotions, please give us your consent by subscribing to our newsletter.
We treat your personal data as confidential, and your personal data are appropriately protected by PODRAVKA and/or our trusted partners.
What data do we collect directly from you and for what purposes?
We routinely collect the following personal data from the users: e-mail address.
We collect your personal data to:
• perform a service, fulfil a contract or ensure the provision of a service requested
• facilitate the use of all services on the website https://vegeta.com/en/
• respond to your queries and process your requests with maximum efficiency
• to perform statistical data processing
• send materials or offers or contact you
• improve the quality of contents, functionalities and services.
What are your privacy rights?
Please note that you have the right to request the following from PODRAVKA at any time:
• access to your personal data
You can ask PODRAVKA what are your personal data that the company uses, and you can also request access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we hold, authorities or categories of authorities with which we share your personal data, the data retention period, and, if the data are collected indirectly, the source of such data.
You can contact us if you want to obtain a copy of some or all personal data we hold about you.
• rectification of inaccurate personal data
We want your personal data to be accurate and up to date. You can ask us to rectify or remove data you think is incorrect or out of date.
• erasure of personal data
You can ask PODRAVKA to stop processing or even erase your personal data. If we need to process your personal data to fulfil our contractual obligations towards you, PODRAVKA may not be able to comply with such contractual obligations anymore. Furthermore, if your personal data are required for us to comply with a specific legal obligation (e.g. tax obligation), we may not be able to fulfil your request.
• restriction of access to your data (by us and/or third parties) in certain processes or in full
If you want to contest the accuracy of any data, or if we no longer need the data for the purpose of processing, but they are required by you for the establishment, exercise or defence of legal claims, or if you have objected to the processing on the grounds we consider to be legitimate, you have the right to request that the processing of your personal data be restricted.
• lodge a complaint about the manner in which we use your data
Do not forget that you are entitled to object to the processing of personal data based on any grounds that PODRAVKA considers to be legitimate.
• request transfer of data to another controller (right to data portability)
If the processing of your personal data is based on your consent or is carried out by automated means, you have the right to request that such data be transmitted to another controller.
In order to exercise any of the above rights please use the contact information provided at the beginning of this Privacy Policy.
If you feel that your rights have been breached, you have the right to lodge a complaint to the Croatian Personal Data Protection Agency, Selska cesta 136, HR – 10 000 Zagreb, e-mail: azop@azop.hr
Where are your personal data stored?
We keep the personal data we collect about you in a secure environment. Your personal data are protected from unauthorised access, disclosure, use, alteration or destruction by any organisation or individual.
The processed data is stored on our premises and safe IT systems, however, sometimes we store them on the servers of our trusted service providers in the EU.
PDORAVKA will ensure that personal data are kept in a secure place (including reasonable administrative, technical and physical safeguards to prevent unauthorised use, access, disclosure, copying or alteration), which can only be accessed by authorized persons. All authorized persons shall be required to sign a confidentiality statement.
Data collected for the purposes set out in this Policy will only be retained for as long as necessary to achieve the aforementioned purposes. Your personal data shall not be stored in a form which permits identification for any longer than PODRAVKA reasonably considers necessary for the purposes for which the personal data have been collected or processed. PODRAVKA will keep certain personal data for a period of time stipulated by law or any regulation laying down the obligation to retain such data that PODRAVKA is required to comply with (more in How long will PODRAVKA keep your personal data?).
If you have given us your consent (for example, by subscribing to our newsletter or opting to accept the use of a category of cookies), we will process your personal data until you withdraw your consent. If you raise a valid objection to the processing of personal data on the basis of legitimate interest, we will refrain from processing your personal data in the future.
In addition to the above, please note: in the event of judicial, administrative or out-of-court proceedings, personal data may be retained until the conclusion of such proceedings, including the statutory limitation period if any.
Does PODRAVKA exchange data with third parties?
Privacy protection is important to us, and we will therefore never share your personal data with any third party except for the purposes described in this Policy. In the event that we share or transfer your data, we will always notify you thereof.
PODRAVKA cooperates with other companies. It means that we sometimes share your personal data using secure IT systems. In such cases, the data is transferred to servers located in the EU or in a country that offers an adequate level of protection in accordance with EU legislation.
In some cases, our partners that provide services for or on behalf of PODRAVKA may process your data outside the EU. However, the agreements we conclude with these partners require them to safeguard your data by implementing special security measures in accordance with the regulations applicable as law in the EU Member States.
On July 10, 2023, the European Commission adopted a new Adequacy Decision allowing personal data to be freely transferred from the European Union to the companies in the United States that participate in the Data Privacy Framework.
The Adequacy Decision is based on Article 45 of the GDPR and constitutes a mechanism that ensures safe and lawful transfer of data to third countries. U.S. companies that wish to participate in the Data Privacy Framework have to self-certify and join the Data Privacy Framework List.
Furthermore, if our contractual partner is based in the United States, we will review the existing contracts and check the security standards guaranteed by our partner in order to ensure the protection of all our data subjects in accordance with the latest standards approved and recommended by the competent institutions.
We may share data with our trusted partner for the purposes of, for example, marketing, maintenance of the website https://vegeta.com/en/, advertising, payment processing, shipment (delivery) and other services within and outside https://vegeta.com/en/. These service providers are required, under the relevant contracts, to use the data entrusted to them strictly in accordance with our guidelines and solely for the purposes precisely determined by us. We also require that our trusted partners adequately protect and treat your data as a business secret.
All our partners undergo annual audits conducted by us to ensure that the protection of your personal data remains at the required level and complies with applicable regulations.
How long will PODRAVKA store your personal data?
PODRAVKA will keep your personal data no longer than necessary to achieve the purposes for which the personal data are used, and in any case no longer than 3 years, except where the law prescribes a longer retention period (for example, we will keep the data related to unilateral contract termination and complaints for a period of 1 year, the data related to the exercise of your privacy rights permanently, the data related to prize contests for a period 5 years, e-mail addresses for the purpose of sending newsletters until withdrawal of consent, the data related to invoices for a period of 11 years).
You can find out more about data retention periods by contacting our Data Protection Officer.
For what purposes will we use your data?
We can use your personal data in several different ways, primarily to fulfil our legal and other obligations towards you, but sometimes also to improve your website user experience and for security reasons.
The purposes for which we use your personal data are described in this Policy, and if your personal data is processed for other purposes, you will be notified thereof prior to any such (new) processing.
Cookies
In order to maintain the website and guarantee the expected functionality level of the website, PODRAVKA uses a technology known as “cookies”.
Cookies are small files that we send to your computer, and we can access them later. They can be temporary or permanent. Because of cookies, you can browse our website without difficulty. Cookies tell us what interests you and other visitors of our website, thus helping us improve it.
Read more about cookies in our Cookie Policy.
Other websites
Other websites that can be accessed via the website https://vegeta.com/en/ are subject to their own confidentiality statements and data privacy policies, as well as policies regarding the use and disclosure of data.
PODRAVKA is not responsible for the manner and terms of operation of third parties.
PODRAVKA collects and processes personal data through user interactions on social media such as Facebook, Instagram, LinkedIn and YouTube. PODRAVKA, or the responsible persons appointed by PODRAVKA, can see the messages and/or posts on such social media, but do not store or further process personal data collected through such social media, especially data contained in the messages, except for the purposes stated in this Policy.
PODRAVKA has a business profile maintained using Facebook, YouTube, LinkedIn and Instagram services. You can read their privacy policies or confidentiality statements and find out how they use your personal data at:
YOUTUBE ONLINE – https://policies.google.com/privacy?hl=hr
If you have any questions about how Facebook, YouTube, LinkedIn and/or Instagram collect and process data or want to exercise your rights under the GDPR, please contact:
ZA FACEBOOK:
META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irska
Data Protection Officer: https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the manner in which your personal data are collected and processed, you can contact the competent lead supervisory authority for Facebook, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency.
On the website https://vegeta.com/en/, the Controller has embedded Facebook components. Facebook is a social network.
A social network is a place that facilitates social interactions on the Internet, an online community that usually allows users to communicate with each other in a virtual space. Social networks serve as platforms for exchanging views and experiences or providing personal or job-related information to the online community. Facebook allows its users to create private profiles, upload pictures, and connect through friend requests.
Facebook is owned by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data for Facebook users who live outside the USA or Canada, is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA is an independent controller.
When opening the website https://vegeta.com/en/, the data subject’s browser will display the corresponding Facebook component due to the use of the Facebook plugin. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of the website was visited by the data subject.
If the data subject is logged into Facebook at the same time, Facebook can detect their every visit to the website https://vegeta.com/en/. This information is collected via the Facebook component and assigned to the data subject’s Facebook account. If the data subject clicks on one of the Facebook buttons integrated on the website https://vegeta.com/en/, e.g. the Like button, or posts a comment, Facebook assigns this information to the personal Facebook user account of the data subject and thus stores this personal data.
Every time that the data subject visits the website https://vegeta.com/en/ while being simultaneously logged into Facebook, Facebook receives information via the Facebook component. This takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted, such transmission can be prevented by logging out of the Facebook account before accessing the website https://vegeta.com/en/.
ZA YOUTUBE:
Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Irska
Data Protection Officer: https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the manner in which your personal data are collected and processed, you can contact the competent lead supervisory authority for YouTube, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency.
On the website https://vegeta.com/en/, the Controller has embedded YouTube components. Youtube is an online video platform that allows users to upload, view, rate and comment on videos free of charge. YouTube lets you upload all types of videos, so you can watch entire films, TV broadcasts, music videos, trailers and videos created by the platform users.
The owner of the YouTube service is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. YouTube, LLC, a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA is considered to be an independent controller.
If the website user (data subject) is logged into YouTube, YouTube will detect their every visit to any sub-site that contains a YouTube video. This information is collected by YouTube and Google and assigned to the data subject’s YouTube account.
YouTube, i.e. Google will receive information through the YouTube component that the data subject has visited the website https://vegeta.com/en/ if the data subject is logged into YouTube at the same time; this takes place regardless of whether you, as the data subject, click on a YouTube video or not. If you do not want this information to be transmitted, such transmission can be prevented by logging out of the YouTube account before accessing the website https://vegeta.com/en/.
Effective date and changes to the Privacy Policy
This Policy shall take effect following its publication on the website.
PODRAVKA reserves the right to amend the Privacy Policy and the amendments will be published on the website.