Privacy policy

Lacuna grupa d.o.o. collects and processes personal data in accordance with the applicable European and Croatian legislation governing personal data protection, and in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Which personal data do we process?

We primarily process data of our users (legal entities), i.e. the responsible persons, representatives or employees of such users. Along with data relating to the legal entity, we only process the personal data necessary for creating a user account in our webshop: full name, telephone number and email address.

We may also process personal data for which you have given your consent for the purpose of providing information, marketing, or sending our newsletter.

Why do we process personal data?

The legal basis for processing the personal data of responsible persons, representatives or employees of users (legal entities) is our legitimate interest in establishing and maintaining a business relationship necessary for our regular operations and for the performance of contractual obligations towards our users. The legal basis for processing personal data may also derive from compliance with legal obligations.

The legal basis for processing personal data for the purpose of sending newsletters is your explicit consent, which you may withdraw at any time by using the link provided in the email you received from us or by sending an email to info@lacuna.hr.

How did we obtain your personal data?

We collect personal data directly from the data subject, i.e. from the legal entity in which the data subject is a responsible person, representative or employee.

How long do we retain your personal data?

We retain your personal data for the period prescribed by law, or, if no such period exists, until the purpose for which the data were collected has been fulfilled, or until we receive your justified request for their removal or erasure. When the processing is based on consent (e.g. newsletters), we retain your personal data until the consent is withdrawn.

If the data concern the contact details (full name, telephone number and email address) of responsible persons, representatives or employees of legal entities with whom we have a business relationship, such data are retained for one year from the last contact or the termination of the business relationship.

Do we use your personal data for any other purposes?

We use your personal data solely for the purpose for which they were collected. In exceptional cases, if it becomes necessary to process your data for other purposes, you will be duly informed and, where required, your consent will be obtained.

To whom do we disclose your personal data?

Some of your personal data may be disclosed to our data processors (such as our accounting service, delivery service or newsletter service provider), as well as to competent state and public authorities when we are required to do so by law or by a decision of a competent authority.

We do not transfer your personal data outside the territory of the European Union. Exceptionally, some of our electronic service providers may transfer certain data (such as IP addresses, cookie identifiers or location data) to third countries. In such cases, we rely on appropriate safeguards, such as the Data Privacy Framework (DPF) or the European Commission’s Standard Contractual Clauses.

Cookies

This website uses first-party and third-party cookies to provide you with an optimal user experience. The term “cookies” is used to refer to cookies and other similar technologies (such as pixels and local storage objects (LSO)) covered by the EU Directive on Privacy and Electronic Communications and the Croatian Electronic Communications Act.

Cookies may also enable us to monitor and analyse how you use our website, helping us understand how you interact with our content and allowing us to improve your experience during future visits. For example, some cookies remember your preferences so that you do not have to confirm them each time you visit our website.

Cookies help us tailor the website to your individual needs, enhance your user experience, obtain feedback, and communicate with you more effectively.

We believe it is important for you to be informed about which cookies we use and for what purposes. When you first visit our website, you will see a cookie banner where you can allow or refuse the use of cookies (except for those that are strictly necessary for the proper functioning of the website). There, you can also access detailed information about each cookie we use, including its duration.

If you would like to learn more about cookies and other similar technologies, please visit www.allaboutcookies.org or www.networkadvertising.org.

Your rights and how to exercise them

We will be happy to respond to your questions regarding the processing of personal data and to provide you with all relevant information about such processing and your rights in relation to personal data. For this purpose, we have appointed a Data Protection Officer: GDPR-MEDIA j.d.o.o., Samobor, Ivice Sudnika 7, OIB /TN: Personal ID No./: 23309501979.

You have the right to obtain confirmation as to whether or not we process your personal data. If we do, you may request access to your personal data and to information regarding the purpose of processing, the categories of personal data concerned, any potential recipients, and the legal basis for such disclosure.

Providing such information is free of charge and, as a rule, delivered electronically in an easily readable and portable format. We reserve the right to charge a reasonable fee in the event of repeated requests or if your rights are misused.

You also have the right to request the rectification of your personal data, the restriction of processing, the erasure of your data, or their transfer to third parties, where applicable.

To exercise your rights or obtain information regarding the processing and protection of personal data, please contact us at info@gdpr-media.eu.

You may always lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), which is the supervisory authority responsible for personal data protection in the Republic of Croatia – www.azop.hr, e-mail: azop@azop.hr or by post to: Croatian Personal Data Protection Agency, Ulica Metela Ožegovića 16, 10 000 Zagreb.

Review and updates

This statement is reviewed and updated as necessary.