Privacy Policy

The purpose of this privacy policy text (hereinafter policy) is to inform customers, potential customers, or visitors to the Projekt Orange website about the purposes and legal basis for processing personal data.

PROJEKT ORANGE d.o.o., Trg Josipa Jurja Strossmayera 8, 10000 Zagreb, Croatia.

At PROJEKT ORANGE d.o.o., we value your privacy, which is why we carefully protect all your data. This privacy policy may be changed or supplemented at any time without prior notice or notification. By using PROJEKT ORANGE websites after changes or additions, the user confirms that they agree with the changes and additions.

All our internet activities related to the processing of personal data are in accordance with European consumer protection laws regarding the processing of personal data and the use of such data, as well as conventions of the Council of Europe and the state laws of the Republic of Croatia. The privacy policy regulates the use of personal data that Projekt Orange receives from you when you visit and use the PROJEKT ORANGE website or submit it in some other way.

Data Controller and Authorized Person for Data Protection

The data controller is PROJEKT ORANGE d.o.o., Trg Josipa Jurja Strossmayera 8, 10000 Zagreb, Croatia.

If you have any questions regarding the use of this policy or related to the exercise of your rights arising from this policy, please contact us at kontakt@projektorange.hr

Personal Data

Personal data is any information relating to an identified or identifiable natural person; an identifiable person is a person whose identity can be determined directly or indirectly, in particular on the basis of an identification number or one or more characteristics specific to their physical, psychological, mental, economic, cultural, or social identity.

The provider, in accordance with the purposes stated below in this policy, collects the following personal data:

1. Basic user data (name, address, email);
2. Contact data and data about your communication (email address, phone number, date, time and content of postal or email communication, date, time);
3. Data about the user's use of the controller's website (dates and times of website visits, visited pages i.e. URLs, time spent on individual pages, number of pages visited, total time of website visit, actions on the website).

The provider does not collect and process your personal data, except when you enable it, e.g.

• When contacting via the contact form and further communication via email or some other communication channel.

We also obtain your personal data based on the use of cookies on our website. You can read more about the use of cookies on the Cookie Policy subpage.

The provider collects only those personal data that are relevant and necessary to fulfill the purposes for which they are processed.

Purpose of Personal Data Processing

The provider collects and processes your personal data for the purpose of communicating with you to provide our services and respond to your questions. This category primarily includes responding to communication via the contact form and further informing users about business opportunities if the user is interested and gives their consent for further communication.

Storage of Personal Data

The provider will store your personal data for as long as necessary to achieve the purposes for which the personal data were collected.

All personal data that the provider processes on the basis of law, the provider stores within the legally determined period.

All personal data that the provider processes on the basis of individual consent, the provider stores permanently until the consent is withdrawn by the individual. The provider will delete this data before the consent is withdrawn by the individual, only if the purpose of processing personal data has been achieved.

Upon expiration of the storage period, the controller effectively and permanently deletes or anonymizes personal data, so that they can no longer be linked to a specific individual.

Notification to Supervisory Body of Personal Data Security Breach

In the event of a breach of personal data security, the Controller is obliged to notify the competent authority, except when it is likely that the rights and freedoms of the individual were not endangered by the breach. When there is suspicion that a criminal offense has been committed due to the breach of rights, the Controller is obliged to notify the police and/or the competent prosecutor's office of the breach.

In the event that it is a breach that may cause a high risk to the rights and freedoms of the individual, the Controller is obliged to notify the individual to whom the personal data relate immediately, i.e., when this is not possible, without undue delay. The notification to the individual must be written in a clear and understandable language.