Privacy policy

CONCOLOR d.o.o. Zagreb, Petrinjska 5 (hereinafter: CC) processes personal data of users, i.e., customers (hereinafter: Personal Data) on its website https://humidor.hr (hereinafter: Website) and in connection with the provision of services available through the Website, in its capacity as data controller, in the manner and for the purposes described in these Privacy Rules (hereinafter: Rules).

In addition to these Rules, the Cookie Rules and the General Terms and Conditions of Use and Sale (hereinafter: General Terms) also apply to your use of the Website, which together constitute a contract governing the rights and obligations of CC as a service provider and you as a user, i.e., customer. The provisions of the General Terms also apply to these Rules if a particular issue is not regulated herein at all or in a different manner. The Cookie Rules contain specific provisions on which cookies are used on this Website, for what purposes, and in what manner. By accessing this Website, i.e., by using it, and in particular by ordering the offered goods, you accept all provisions of the aforementioned Rules and General Terms in their entirety. Therefore, it is important that you read them carefully. If you find any provision of these Rules, the Cookie Rules, or the General Terms unacceptable, please do not access this Website any further.

We may update these Rules, the Cookie Rules, and the General Terms from time to time. Therefore, we recommend that you periodically check for any changes. Updated Rules will be published on this website with an indication of the date of their application below the title. In the case of significant amendments and/or supplements, we may also notify users in another appropriate manner (for example, by publishing a separate announcement on the Website, including system notifications on your user account, or by sending an email to registered users, etc.).

If you have any questions and/or comments, please contact us via email at the following address: info@humidor.hr or via the contact form on the Website.

We may collect your personal data directly from you as part of a transparent registration process when this is necessary to provide you with our services, for example, to sell you ordered products, or to communicate with you, for example, in response to your inquiry or as part of our promotional activities. However, when visiting our Website, we also process certain data by analyzing collected information about your visits to and use of our Website, which may also be considered Personal Data even if you could not be directly identified using such data.

Registration, Order, Purchase, and Delivery Data

In order for you to order and purchase products offered on our Website, we collect, among other things, the following categories of Personal Data: identity data (first and last name), contact data (email address, mobile phone number, residential address), payment data, and other data specified in the forms for carrying out the purchase transaction. If you wish, you may also register and create your user account on our Website. In that case, in addition to the categories of data already listed, we will also process your username and password. We process such Personal Data on the basis of the contract we conclude with you in this manner, as we need them for its conclusion and fulfillment, i.e., for the purpose of selling the ordered products and delivering the sold products to you.

Marketing and Profiling

We may offer you the opportunity to receive marketing and other promotional information, materials, and/or other communications about the products and services we offer, such as e-newsletters, for which you can choose the manner in which you wish to receive them, for example, by email, in the form of SMS/MMS messages, etc. In such cases, we will ask you for the appropriate personal data, such as your name, email address, mobile phone number, and similar, as well as your consent for sending such promotional communications. We process personal data for direct marketing purposes on the basis of consent and retain them for a maximum of 6 months after the withdrawal of consent.

Profiling is a form of automated processing of personal data that consists of the use of Personal Data to evaluate certain personal aspects related to your interests and consumer behavior in connection with our offerings, marketing, promotion, and general business, particularly for the analysis or prediction of such behavioral aspects. Although we may use your Personal Data for profiling our customers and their consumer habits, such processing of your Personal Data does not result in decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

For example, when visiting our Website, we collect certain data such as the name of your computer and the type of internet browser, clicks, and page views. Information about your use of our Website and services allows us to classify Website visitors, i.e., our customers, into certain groups with a number of common characteristics such as age group, gender, or region (so-called segments). We will likely classify you into one of our segments. We use segments to customize the Website and, for example, to change the order of search results or to determine where we will display certain offers to increase the likelihood that you will see them. We process such Personal Data because we need them on the basis of our legitimate interests for the purpose of improving the quality of our Website. Usage logs of our Website will be deleted 1 year after their generation.

At any time, you have the right to object to the processing of your Personal Data for direct marketing purposes, which includes profiling as explained in the preceding paragraphs of this section, i.e., the right to withdraw or modify your consent to receive promotional communications. Once we receive your objection or withdrawal of consent, we will cease processing your Personal Data for such purposes. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn. You may withdraw or modify your consent, or exercise your right to object, by sending an email to the email address: info@humidor.hr or via the contact form, indicating that you wish to unsubscribe from our direct marketing list or that you object to the use of your Personal Data for profiling. You may also unsubscribe from the direct marketing list via the link contained in each of our promotional communications. Finally, if you are a registered user, you can uncheck the box for receiving marketing messages in your user account.

Maintenance and Optimization of Our Website

Your Personal Data will also be used to maintain and analyze our Website for the purpose of resolving functionality issues, improving availability, security, and protecting the Website from fraud or other similar violations. We process such Personal Data for the stated purposes on the basis of our legitimate interests, and the Personal Data will be retained for a maximum of 1 year.

Cookies

A large portion of the data mentioned in these Rules, particularly in the preceding sections on marketing/profiling and maintenance/optimization, is collected through cookies and similar technologies. Cookies are small text files that may be stored on your device (e.g., computer, smartphone, or tablet) and contain certain data necessary, for example, to remember the settings of your user account, language, and country, but also to allow us to measure and analyze your behavior on our Website. Where required by law, we will request your consent for the use of cookies. For more information on which cookies we use, how, and why, please read our Cookie Rules.

We may disclose your Personal Data or grant access to your Personal Data to competent authorities in accordance with legal obligations, as well as to our affiliated companies or data processors, i.e., other business partners such as data analytics or IT service providers who maintain our information and communication networks (hereinafter: Recipients). The disclosure of Personal Data to Recipients is based on an appropriate legal basis; for example, in the case of competent authorities, this is primarily the relevant legal provision, and in the case of our affiliated companies or business partners, this will most often be an appropriate data processing agreement ensuring appropriate technical and organizational measures to protect your Personal Data, including in particular the obligation to maintain their confidentiality. If any of the Recipients are located in so-called “third countries,” i.e., countries outside the European Economic Area that are not considered to provide an adequate level of personal data protection, such transfer of Personal Data is carried out on a valid basis and for justified purposes in a manner that ensures adequate protection in accordance with applicable legal regulations.

We will implement appropriate technical, physical, and organizational measures to protect Personal Data from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access (hereinafter: Data Breach), in accordance with applicable legal regulations and accepted technical standards in the field of privacy protection and data security. However, no website can be 100% secure. Therefore, to the maximum extent permitted by law, we exclude liability for non-negligent or accidental Data Breaches.

Our Website may contain links to other websites. We are not responsible for the policy or practice of processing and/or protecting privacy, the content, or the level of security on such other websites to which these Rules do not apply. We recommend that you always carefully read the privacy rules applicable to such websites.

We will process your Personal Data: (i) within the time limits prescribed by law (this applies, for example, to Personal Data used for processing and executing purchase transactions in accordance with applicable accounting and tax regulations); or if the retention periods for Personal Data are not prescribed by law, (ii) we will process them for as long as necessary to achieve the purpose for which they were collected, i.e., within the specific time limits set out in the preceding provisions of these Rules, unless you request their removal before the expiration of the specified period in accordance with your right under the following section of these Rules; in addition, (iii) we may retain certain Personal Data, or the related documentation containing them, for a maximum of 5 years from the achievement of the purpose for which they were collected, for evidentiary purposes in the event of any subsequent complaints, disputes, or proceedings.

After the expiration of the appropriate retention period, we will destroy the Personal Data or anonymize certain Personal Data if there is a need for this and the appropriate conditions are met. Anonymized data is no longer Personal Data, as it does not allow the identification of individuals.

Your rights in relation to our processing of your Personal Data are:

(1) the right to access your Personal Data, i.e., the right to obtain confirmation from us as to whether Personal Data relating to you is being processed, and if such Personal Data is being processed, the right to access your Personal Data, including the right to obtain a copy of the Personal Data being processed;

(2) the right to rectification, i.e., the correction or supplementation of inaccurate Personal Data relating to you without undue delay, including by providing an additional statement or independently by updating the data in your user account if you are a registered user;

(3) the right to erasure of Personal Data relating to you, particularly in cases where:

(i) they are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(ii) they have been unlawfully processed;

(iii) you withdraw, in whole or in part, the consent you have given us for the processing of your Personal Data for the stated purposes and there is no other legal basis for processing; or

(iv) they must be erased in order to comply with a legal obligation under applicable legal regulations;

(4) the right to restriction of processing in the following cases:

(i) if you contest the accuracy of your Personal Data, for a period enabling us to verify the accuracy of the Personal Data;

(ii) if the processing is unlawful, but you oppose the erasure of your Personal Data and instead request the restriction of their use;

(iii) if we no longer need the Personal Data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims; or

(iv) if you have objected to the processing of your Personal Data that we process on the basis of legitimate interests – until it is determined whether the legitimate interests of the Controller outweigh your personal interests;

(5) if we process certain of your Personal Data on the basis of consent, you have the right to withdraw consent at any time, but this does not affect the lawfulness of processing based on consent before it was withdrawn;

(6) in the case of automated decision-making, including profiling, you have the right to be informed about the logic involved, as well as the significance and the envisaged consequences of such processing for you;

(7) at any time, you have the right to object to the processing of your Personal Data for direct marketing purposes, which includes a prohibition on profiling to the extent that it is related to such direct marketing;

(8) the right to data portability, i.e., the right to receive your Personal Data (which you have provided to us) in a structured, commonly used, and machine-readable format and to transmit that data to another controller if the processing is based on consent or on a contract and is carried out by automated means; and

(9) the right to lodge a complaint regarding the processing of your Personal Data with the Croatian Personal Data Protection Agency, Zagreb, Selska cesta 136 (www.azop.hr).

If you wish to exercise any of the above rights or have any questions or comments regarding the processing of your Personal Data in connection with the use of our Website or the application of these Rules, please contact us at the following email address: info@humidor.hr or via the contact form.