Date 27.01.2022. HISTRIA FINEST DETAILING (from now on: HISTRIA FINEST DETAILING), represented by David Kocijančić, owner of the business, following Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals about the processing of personal data and the free movement of such data and the repeal of Directive 95/46 / EC (from now on: the Regulation)
POLICY ON THE PERSONAL DATA MANAGEMENT SYSTEM AND INDIVIDUAL PRIVACY PROTECTION
I. INTRODUCTORY PROVISIONS
Our websites (content, structure, texts, photos, videos) are protected by copyright. All copying, adaptations, translations, storage, and processing by other means, including storage or processing by electronic means, and all photographs or videos' processing on this website, in particular, are protected by copyright. Any reproduction of information or data, particularly the use of texts or parts of text or images and videos or any other exploitation or sharing, requires the prior written consent of Henkel. HISTRIA FINEST DETAILING has the right to distribute and reproduce. Any other unauthorized use will be considered a violation of copyright or intellectual property rights and is subject to a lawsuit.
II. TERMS
Personal data - is any data relating to a natural person (individual) whose identity has been established or can be established; an identifiable individual is a person who can be identified directly or indirectly, in particular, based on the name of the identification number, location data, network identifier or by one or more characteristics specific to his physical, physiological, mental, economic, cultural or social identity.
Respondent - is a natural person (individual) whose identity can be established directly or indirectly, primarily based on name, identification number, location data, network identifier, or with the help of one or more characteristics specific to his physical, physiological, mental, economic, cultural or social identity.
Processing of personal data - is any procedure or set of operations performed on personal data or on sets of personal data, whether automated or non-automated means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, inspection, use, detection by transfer, dissemination or otherwise making available, harmonization or combination, restriction, deletion or destruction.
Processing manager - a natural or legal person who, alone or together with others, determines the purposes and means of personal data processing;
Information system - comprehensiveness of technological infrastructure, organization, people, and procedures for collecting, processing, generating, storing, transmitting, displaying, and distributing information and disposing of it. An information system can also be defined as the interaction of information technology, data and data processing procedures, and the people who collect and use the data. Supervisory body - an independent public authority established by the Republic of Croatia to control and ensure the implementation of the Regulation
Confidentiality - The property of information (data) that is not available or disclosed to unauthorized entities. Consent - any voluntary, particular, informed, and unambiguous expression of the respondent's wishes by which he gives support to the processing of personal data relating to him by a statement or explicit affirmative action;
Violation of personal data - breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed;
Profile creation - any form of automated processing of personal data that consists of personal data to assess certain unique aspects of the individual, especially for the analysis of desires and needs in the sale of real estate.
Third parties - natural or legal person, public authority, HISTRIA FINEST DETAILING or other body other than the respondent, controller, processor, or persons authorized to process personal data under the direct authority of the controller or processor
Distribution channels - represent the means and ways through which access, contracting, use of products and services of HISTRIA FINEST DETAILING and sending commercial information and offers related to products and services of HISTRIA FINEST DETAILING, and include the headquarters and website of HISTRIA FINEST DETAILING and the rest. Information on available distribution channels of HISTRIA FINEST DETAILING is open to the Client by telephone.
The respondent's consent is any voluntary, particular, informed, and unambiguous expression of the respondent's wishes by which he gives a statement or an explicit affirmative action consent to the processing of personal data relating to him.
Personal data protection is protected against a breach, which constitutes a breach of security. The breach leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.
III. SCOPE AND OBJECTIVE
The personal data protection policy aims to establish a framework for personal data protection following the General Data Protection Regulation. The policy sets rules related to the security of individuals regarding the collection and processing of personal data and practices associated with the free movement of personal data.
The policy applies to all processing of personal data, except in cases where the processing is of such a nature that it is a statistical analysis from which it is not possible to identify an individual.
IV. PRINCIPLES OF DATA PROCESSING
The principles of data processing are the basic rules that HISTRIA FINEST DETAILING is guided by when processing the personal data of respondents, and the processing that is carried out following the following principles is considered legal.
1. legality, fairness, and transparency - personal data are legally, somewhat, and transparently processed about the respondent; In certain situations, HISTRIA FINEST DETAILING will have to look for respondents who are not needed to perform a specific service but are required by law to collect (e.g., the Law on the Prevention of Money Laundering and Terrorist Financing). Also, HISTRIA FINEST DETAILING ensures transparency of personal data processing. It will provide respondents with all necessary information and, upon request, give the respondents insight into their data, explanations of processing, basics, laws of processing, etc. HISTRIA FINEST DETAILING transparently informs respondents about the collection of their data and their use or processing, as well as the extent to which these personal data will be processed. The respondent will be informed on time, i.e., before the data collection, with all relevant information.
2. Purpose limitation - personal data must be collected for particular, explicit, and lawful purposes. They may not be further processed in a manner inconsistent with those purposes unless there is other processing required by law or necessary for the quality delivery of the service itself.
3. Reduction of the amount of data - the collection and processing of personal data is appropriate, relevant, and limited to what is necessary for relation to the purposes for which they are processed
4. Accuracy - personal data is accurate and up to date as required; HISTRIA FINEST DETAILING will take all reasonable measures to ensure that personal data that are inaccurate, taking into account the purposes for which they are processed, are deleted or corrected without delay; HISTRIA FINEST DETAILING ensures the application of this principle through communication with respondents through which correction of data may be requested if the respondent notices that some of his data is not correctly stated.
5. Integrity and confidentiality - personal data are processed in a way that ensures adequate security of personal data, including protection against unauthorized or illegal processing and accidental loss, destruction, or damage through the application of appropriate technical or organizational measures;
6. storage restriction - personal data are kept in a form that allows the identification of respondents only for as long as necessary for the purposes for which personal data are processed; personal data may be stored for more extended periods if the personal data will be processed exclusively for statistical purposes, subject to the implementation of appropriate technical and organizational measures or if there is a legitimate interest (e.g., in the event of litigation)
V. OBLIGATION TO KEEP CONFIDENTIALITY
All-HISTRIA FINEST DETAILING employees must adhere to the measures defined in this Policy. HISTRIA FINEST DETAILING will ensure that third parties who, in the framework of their cooperation with HISTRIA FINEST DETAILING, gain access to personal data are acquainted with the measures defined in this Policy to comply with them.
All persons under an employment contract or any employment contract who may directly or indirectly obtain personal data are obliged to respect the confidentiality and protect the privacy of the individual, which includes preventing unauthorized access to personal data and equipment used in processing data or their unauthorized use.
HISTRIA FINEST DETAILING will forward the respondents' data to state institutions if there is a legal basis for this (for example, forms for the Law on the Prevention of Money Laundering and Financing of Terrorism).
YOU. LEGALITY OF PERSONAL DATA PROCESSING
HISTRIA FINEST DETAILING considers the personal data of the respondents to be their property and treats them in the same way. However, for HISTRIA FINEST DETAILING to be able to provide a service to the respondent. Therefore, if the respondent refuses to provide the requested data set, HISTRIA FINEST DETAILING will not be able to provide the service. Following the laws below, it is necessary to process the minimum set of data needed for the quality of a particular service.
Accordingly, the personal data of the respondents are processed when one of the following conditions is met:
a) processing is necessary for the performance of the contract to which the respondent is a party or to take action at the request of the respondent before the conclusion of the contract
b) processing is necessary to comply with legal obligations - when the law authorizes or obliges HISTRIA FINEST DETAILING to perform specific processing, HISTRIA FINEST DETAILING will process the personal data of respondents based on that law.
Disputes and for a necessary and justified purpose to protect persons and property. c) processing is necessary for the needs of legitimate interests of HISTRIA FINEST DETAILING - except when these interests are more vital than the interests or fundamental rights and freedoms of respondents that require the protection of personal data, especially if the respondent is a child. The legitimate interest of HISTRIA FINEST DETAILING includes processing that serves to improve the process, product development, and business improvement, modernizing services, and offering products and services that are clear to facilitate its business with HISTRIA FINEST DETAILING, and in favour of resolving court cases.
d) the respondent has given consent to the processing of their data - the license must be provable and voluntary, written in easy-to-understand language, and the respondent has the right to withdraw their consent. As well as the offer of real estate that HISTRIA FINEST DETAILING communicates through available distribution channels. HISTRIA FINEST DETAILING considers part of the service and will not request the consent of the respondent's laws of processing.
e) processing is necessary to protect the critical interests of the respondents;
VII. RIGHTS OF RESPONDENTS
The respondent has the following rights:
1) Right of access - The respondent has the right to contact HISTRIA FINEST DETAILING at any time and obtain confirmation whether personal data relating to him is being processed and if such personal data are processed, request access to personal data and information to which he is entitled in connection protection of personal data.
HISTRIA FINEST DETAILING provides a copy of the personal data being processed. If the respondent submits the request electronically, the information shall be provided in the usual electronic form unless requested otherwise. For all additional documents requested by the respondent, the Company may charge a reasonable fee based on administrative costs.
2) The right to correction - The respondent has the right without undue delay to obtain from HISTRIA FINEST DETAILING correction of inaccurate personal data relating to him. Considering the purposes of the processing, the respondent has the right to supplement incomplete personal data, including by giving an additional statement. The Company communicates any correction of personal data to any recipient to whom personal data has been disclosed unless this proves impossible or requires a disproportionate effort. The Company shall inform the respondent of these recipients if the respondent so requests.
3) Right to erasure (right to forget) - The respondent has the right to submit a request for the erasure of personal data. A justified request for deletion of data must be met without undue delay. If the respondent has the right to delete data, but deletion is not possible or prudent, the data must be protected by blocking against unauthorized processing. The prescribed retention periods must be observed. HISTRIA FINEST DETAILING discloses any deletion of personal data to any recipient to whom personal data has been announced unless this proves impossible or requires a disproportionate effort. The Company shall inform the respondent of these recipients if the respondent so requests.
4) The right to restrict processing - The respondent has the right to obtain a restriction on processing from HISTRIA FINEST DETAILING for disputing accuracy, the illegality of processing, cessation of the need for processing, and exceeding legitimate rights for data processing. Following applicable regulations, HISTRIA FINEST DETAILING may process personal data even when processing is limited.
5) Right to data portability - The respondent has the right to receive personal data related to him, provided by HISTRIA FINEST DETAILING in a structured, commonly used, and machine-readable format and has the right to transfer this data to another controller without interference by HISTRIA FINEST DETAILING, if the processing is based on consent or contract and is carried out automatically.
6) Right to object - The respondent has the right to object to personal processing data relating to him if the processing is based on the legitimate interests of HISTRIA FINEST DETAILING, including profile creation and processing for direct marketing. HISTRIA FINEST DETAILING may no longer process personal data unless it proves legitimate reasons for processing beyond the respondents' interests, rights, and freedoms or to set, exercise, or defend legal claims. Furthermore, suppose personal data is processed for direct marketing. In that case, the respondent has the right to object to personal processing data relating to him for such marketing, which includes creating a profile related to such direct marketing.
7) The right to withdraw consent - The respondent has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawing consent must be as simple as giving it.
8) Right to compensation and liability - the respondent who has suffered property or non-property damage due to violating prescribed legal provisions is entitled to compensation from the controller or processor for the injury sustained.
Manner of exercising the right - the respondent can exercise his rights stated in this article through the contact information published on the HISTRIA FINEST DETAILING website and the information received in the pre-contracting. Suppose he believes that there has been an irregularity in the processing of his data. In that case, the respondent has the right to contact HISTRIA FINEST DETAILING and the right to file a complaint to the national supervisory authority.
The respondent has the right not to be subject to a decision based solely on automated processing, including the creation of a profile, which produces legal effects that relate to him or similarly significantly affect him, unless that decision is necessary for the conclusion or execution contract between the respondent and HISTRIA FINEST DETAILING, permitted by law or based on the explicit consent of the respondent.
VIII. INFORMING
HISTRIA FINEST DETAILING ensures that the respondent is provided with all information if personal data are collected from the respondent or if personal data are not obtained from the respondent. The respondent is informed of his rights under the previous article. HISTRIA FINEST DETAILING will publish information on personal data protection on its official website.
IX. RECORDS AND STORAGE
HISTRIA FINEST DETAILING has established and maintains records of personal data. The processing is carried out on them and constantly ensures that only personal data are included in the processing, for which there is a legal basis.
Personal data is appropriate, relevant, and limited to what is necessary for the purposes for which the data are processed. Personal data are processed only if the purpose of the processing could not justifiably be achieved by other means. Therefore, it is ensured that the period in which personal data is stored is limited to a strict minimum.
HISTRIA FINEST DETAILING continuously implements appropriate technical and organizational protection measures, taking into account the nature, scope, context, and purposes of the processing and risks of different levels of probability and severity for the rights and freedoms of respondents.
The legality of processing. HISTRIA FINEST DETAILING does not allow unauthorized collection, processing, or use of personal data. The rule of restricting access to data applies only to those necessary data for the performance of specific business tasks. Employees of HISTRIA FINEST DETAILING are strictly prohibited from using the personal data of the respondents for any purpose that does not comply with the conditions defined in Chapter VI. Finally, HISTRIA FINEST DETAILING, following applicable laws (e.g., the Law on Prevention of Money Laundering and Terrorist Financing), has the right to inspect and process part of personal data, but only to the extent necessary to meet regulatory requirements or to enforce Contract with the respondent.
Personal data is protected from unauthorized access, use, alteration, and loss. Protection mechanisms are applied to personal data within HISTRIA FINEST DETAILING, regardless of the form in which they are stored - paper or electronic.
Personal data collected and processed by HISTRIA FINEST DETAILING in its work are considered confidential and must be treated with special care and may only be used following the reason they were collected.
HISTRIA FINEST DETAILING will collect and store personal data only to the extent necessary to fulfill the purpose of processing. HISTRIA FINEST DETAILING processes only personal data that is relevant, relevant, moderate, and limited to what is required about the purposes for which they are processed ("reduction of the amount of data"); HISTRIA FINEST DETAILING takes all necessary measures to ensure that your data is accurate, complete and, if necessary, updated, and undertakes to collect respondents' consents whenever they are needed and to inform respondents about the processing of their data.
Personal data will be stored in the least possible number of places where they must be adequately protected. Access to personal data may be provided solely based on business needs. It is forbidden to use personal data to develop or test IT systems. Personal data must be protected by encryption, pseudonymization, or anonymization.
X. LEGALLY BASED PROCESSING AND RIGHT OF COMPLAINT
HISTRIA FINEST DETAILING will process respondents' data following favorable legal and other regulations governing the prevention of money laundering and monitoring and preventing fraud, money laundering, etc., which is carried out following the European Union's rules, standards, and recommendations institutions or national supervisory authorities.
Following the Regulation, HISTRIA FINEST DETAILING gives respondents the right to object to the processing of data for direct marketing, whether about initial or further processing, at any time and free of charge.
XI. TRANSFER OF PERSONAL DATA
In the case of concluding a business cooperation agreement, there is a possibility that HISTRIA FINEST DETAILING forwards the personal data of the respondent to an external associate who has professional competencies and who provides sufficient guarantees to ensure appropriate individual data protection measures and with whom HISTRIA FINEST DETAILING has signed a cooperation agreement. All to deliver the fastest and highest quality service. The same applies to business cooperation agreements with other business entities registered for real estate brokerage, law offices, architectural offices, geodetic offices, etc.
HISTRIA FINEST DETAILING further, and in the part of providing advertising services, can provide access to your data to its partners, who act as executors of processing. These third-party service providers will only follow the instructions of HISTRIA FINEST DETAILING. They will only have access to your data to fulfil the purposes of collecting personal data and are subject to the same personal data protection and confidentiality regulations as HISTRIA FINEST DETAILING. HISTRIA FINEST DETAILING is obliged.
Furthermore, your data may be forwarded based on the following:
• in response to legal or administrative proceedings of any kind or enforcement measures requested by the competent authorities;
• following legal obligations, protect the rights and/or security of the individual, protect the rights and property of HISTRIA FINEST DETAILING, including the need to respect this Privacy Policy and prevent any technical, safety, or fraud issues.
XII. INCIDENT MANAGEMENT AND THE RIGHT TO COMPLAINT
HISTRIA FINEST DETAILING takes all measures within its capabilities to protect the personal data of respondents. In addition, all employees must notify the responsible person in a personal data protection incident and in the event of a personal data breach. HISTRIA FINEST DETAILING is obliged to report the incident to the Personal Data Protection Agency within 72 hours after learning of the violation, if feasible. Also, in the event of a personal data breach that is likely to pose a high risk to the rights and freedoms of individuals, HISTRIA FINEST DETAILING informs the respondent about the personal data breach without undue delay. The respondent has the right to file a complaint to the supervisory body (Agency for Personal Data Protection) in the event of an incident involving his data or if he considers that HISTRIA FINEST DETAILING violates his rights defined by the Regulation.
XIII. FINAL PROVISIONS
This Policy shall enter into force on the day of its adoption.
HISTRIA FINEST DETAILING, rental business
Owner David Kocijančić
Krančići 17G, 52440 Kaštelir
OIB: 90055623717
