Privacy Policy – 2020 d.o.o.
2020 d.o.o.
Last Updated: January 2024
2020 d.o.o. is committed to protecting your privacy. This Policy (together with other related documents - Record of Processing Activities and Risk Assessment of Personal Data Processing) determines which of your personal data we collect and how we use it.
What Personal Data We May Collect
We collect personal data about your visits to the Website, including, but not limited to, traffic data, location, web logs, survey content and content from contact forms and other communication data and resources you access.
We collect all information you send us when using our contact forms (for example 'Contact Us') and in particular name, surname, email address, phone number, etc.
Collecting your personal data through our contact forms does not represent a legal or contractual requirement; however, we note that fields marked with an asterisk (*) are mandatory fields.
These are necessary for us to process or respond to your request. Sharing other information or personal data when filling out contact forms is based on your free decision.
How We Use Your Personal Data
- to customize content and services to your interests
- to provide responses to your requests or questions when you contact us
- to inform you about other services that might interest you - such as brochures or information about upcoming events of 2020 d.o.o.
- to create, publish and improve content and services that are important to you
- to customize the display of content and services on the Website in a way that best suits your device
- to offer the use of interactive features of our Website if you wish
- for further development and improvement of the Website, our services and systems to be more useful to you
We also collect your personal data for: Human Resources Management - HR, including employment of potential employees, Management of occupational safety processes, Management of accounting and finance processes, Management of procurement processes (supplier list), Management of application development processes, Project management, Management of quality and IT system security processes of 2020 d.o.o., Management of website functionality, including processing of technical data and cookies
Legal Basis for Processing
The use of the mentioned personal data is permitted by applicable data protection laws because:
- in some cases it is necessary to fulfill our legal or statutory obligations, for example, communicating data to competent state bodies, agencies, etc.
- necessary for the performance of tasks carried out in the public interest and when we use special categories of personal data, necessary for the establishment, exercise or defense of legal interests or when processing relates to personal data in the public domain
- in certain circumstances, processing is carried out in accordance with your consent (consent), which you occasionally give us, such as when you sign up to receive promotional messages, notifications and news via email
Personal data processing may also include the legitimate interest of 2020 d.o.o., in which case we conduct a proportionality test and risk assessment of personal data processing for each such processing. 2020 d.o.o. may process personal data without human intervention, and may then use automated systems/processing and automated decision-making (such as profiling) to provide requested services to business clients.
Data Retention Periods
The retention periods of personal data depend on the purpose for which such data is processed, as well as on the appropriate means by which such personal data is processed. It is not possible to determine different periods in this Policy and clearly cover them all. The criteria used to determine the applicable retention period of personal data mentioned in this Policy are:
- that storage is necessary to achieve the appropriate purpose
- that it is necessary to maintain a business relationship with you
- that it is based on your consent, and/or
- determined by applicable legal provisions on storage
Sharing with Third Parties
To facilitate efficient use of your data and to provide you with the best content and/or services, we are sometimes required to disclose your data to third parties. However, this is only possible in some cases: With suppliers, subcontractors and representatives: to perform certain tasks, work may be contracted with other companies and individuals (e.g. server maintenance services, business application maintenance, commercial audits or legal services, etc.), but these persons may only have access to your personal data for the purposes of performing agreed tasks, and may not be used for any other purposes.
All suppliers, subcontractors and representatives must respect contractual obligations regarding privacy and confidentiality.
IP Addresses and Cookies
2020 d.o.o. may collect data about your computer, including available data about IP address, operating system and browser type for system management. These are statistical data about browsing and browsing patterns that do not contain identification data about an individual.
For the same reason, using a cookie file stored on your device, we can collect general information about how you use the Internet. Cookies help us improve the website and provide better and personalized services.
If more than one user works on your computer, we advise you not to select the offered option 'remember my data' for storing certain information you have entered.
Where We Store and Process Your Personal Data
As explained in the 'Sharing with Third Parties' section, we share your personal data with suppliers, subcontractors or representatives, but your personal data remains under the control of 2020 d.o.o. to be appropriately protected. We try to take all steps that are reasonably necessary to ensure secure use of your personal data in accordance with this Policy.
Do We Transfer Your Data Outside the European Union?
We may transfer and process your personal data in one or more other countries, within or outside the European Union. We will transfer your data outside the EU only to countries for which the European Commission decides that they provide an adequate level of protection.
Data Security
Although we will do everything to protect your personal data, sending information over the Internet is not completely secure and therefore we cannot guarantee the security of your personal data sent to the Website or to any third party. Any such transfer is at your own risk. Once we receive your data and send it to third parties, we use strict procedures and appropriate technical and organizational security measures to prevent unauthorized access, modification, deletion or transfer of the mentioned personal data.
Your Rights
Right to Access and Receive a Copy
According to applicable data protection regulations, you have the right to request confirmation as to whether we process your personal data. In cases where we process your personal data, you can access your personal data and certain information about how we process it.
Right to Correction
If you prove that the personal data we have about you is not accurate, you can request correction of inaccurate personal data.
Right to Deletion ('Right to be Forgotten')
In certain circumstances, you have the right to obtain deletion of your personal data. You can submit a request for deletion of your personal data at any time, and 2020 d.o.o. will assess whether your deletion request is justified. The right to deletion is conditional on legal rights and obligations, so in some cases there is a basis for data retention. In cases where, in accordance with the law, we determine that the request for deletion of your personal data should be approved, 2020 d.o.o. will do so without undue delay.
Right to Withdraw Consent
To the extent that we process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Right to Complain
Regarding the processing of your personal data, you also have the right to complain to the supervisory authority at your local data protection authority.
Changes to the Policy
The provisions of this Policy may be changed from time to time. We will publish all significant changes through appropriate notices on this Website or we will notify you about it through other communication channels.
Contact
Feel free to send us all questions, comments and inquiries related to this Policy to the email address:
Email: info@2020.hr