Slav Brothers, headquartered at 2. Loparska 1, 10000 Zagreb, establishes with this Privacy Policy the method of collecting, storing, and using personal data. In our business operations, we process certain personal data, which is why we are issuing this Privacy Policy.
This policy applies to the processing of data that occurs via our website (www.slavbrothers.com; hereinafter: Website), as well as through regular business operations. In addition, this Policy describes the legal basis and purpose of such processing, as well as the rights of the data subjects.
All terms used in this text are defined in the same way as they are defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR).
Please read this Policy carefully to find out how we collect, process, protect, or otherwise use your personal data.
Data Controller The website of the promotional agency Slav Brothers, located at 2. Loparska 1, 10000 Zagreb (hereinafter: Data Controller, or we, our, etc.), uses only the most essential, or strictly necessary cookies required for the proper functioning of our website. Choosing the option to reject cookies can significantly affect the functionality of the website in terms of your user experience. Contact: info@slavbrothers.com
Who is the data subject? A data subject is any identifiable individual, meaning a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
Within the framework of the Data Controller’s business via the Website, a data subject could primarily be:
every person who uses the contact form on the Website.
every visitor to the Website.
Within the framework of regular business operations, a data subject can be our client (existing or potential), our suppliers and business partners, our employees, and job candidates.
How do we collect data? As a rule, we collect your personal data when you provide it to us. This can happen in the following situations:
automatically through our internet servers or by using “cookies”.
by using/visiting this Website.
by filling out and submitting the contact form on the Website.
We aim to collect only those data that are absolutely necessary for the performance of contractual and legal obligations, or for the high-quality and efficient provision of our services. The data we collect may include (depending on the circumstances). Data we collect via cookie functionalities:
name and surname.
e-mail.
data you send us in the contact form.
Why do we process data? We process data primarily to fulfill contractual and legal obligations in relation to the activities we perform. Specifically, we need these data to effectively manage your inquiries, or to get back to you. It is not excluded that official authorities, which have the right to inspect documentation potentially containing personal data within the scope of their powers, may contact us with requests. In relation to our Website, the data we collect is needed to personalize your user experience and for the general improvement of our Website. We do not make decisions based on automated data processing.
What is the legal basis for processing? The legal basis for processing depends on the circumstances of each case, and below is an overview of common situations:
If you are a buyer (or potential buyer), the basis for processing personal data is the performance of a contract (or taking pre-contractual steps) to which you are (or will potentially be) a party, meaning the sale of goods or provision of services.
If you contact us using our contact form on the Website (or otherwise) with order-related inquiries, the basis for processing personal data is the performance of a contract to which you are a party.
If you contact us using our contact form on the Website (or otherwise) to file a complaint, processing is necessary for compliance with our legal obligations, primarily the applicable provisions of the Consumer Protection Act if you are a consumer.
The processing of data on the Website via cookies takes place on the basis of the visitor’s consent (with the exception of so-called functional cookies, without which the Website cannot function properly).
Who do we share your data with? Our primary goal is not to share your data, or to share it with a minimum number of entities, and even then, only if there are justified circumstances (usually a contractual or legal obligation). We ensure that we always share only the absolute minimum of necessary personal data.
In such circumstances—that is, if there is a compelling need for it—we share data with:
subcontractors/suppliers for performing operational activities (issuing and processing quotes, invoices, payment systems, etc.).
tax/legal/accounting advisors (provided they are bound by professional secrecy, contractual confidentiality clauses, etc.).
competent authorities—if required by applicable local or European legislation.
We do not transfer data to third countries, i.e., outside the borders of the Republic of Croatia. Should such a need arise, the data will not be transferred before we ensure that appropriate safeguards and standards are in place.
How long do we keep personal data? Naturally, we aim to process your data only for as long as necessary, and then to permanently delete/destroy it; however, we are legally obliged to keep some data slightly longer. We must certainly process your data at least for the duration of the statute of limitations for any claims you might have in case of dissatisfaction with a service or goods. If there are judicial or other proceedings in which you are a party, your data will be processed for as long as those proceedings last.
When data is processed for accounting purposes or is contained in an accounting document such as an invoice, it is stored for at least 11 years, in accordance with legal regulations on accounting. The Data Controller keeps records of processing activities, which detail how long data is processed.
Protection of your data To protect the personal data you send via this Website, we use physical, technical, and organizational security measures. We continuously upgrade and test our security technology. We restrict access to your personal data only to those employees who need to know that information to provide you with certain benefits or services. Furthermore, we educate ourselves on the importance of data confidentiality, privacy preservation, and the protection of your data.
Rights of individuals Please direct all inquiries aimed at exercising your rights (regarding personal data, which includes cookies) to info@slavbrothers.com, and we will fulfill your request free of charge. We respond to your inquiries and requests within 30 days. If for some reason we cannot fulfill your request, we will send you an explanation as to why we could not comply.
Subject to the preconditions contained in the GDPR, you have a set of rights that we describe below:
If you want to know whether we hold and process your personal data (and what those data are and what we do with them), or if you want to access the personal data we have about you, please contact us at info@slavbrothers.com (right of access).
You have the right to rectify personal data we hold if it is inaccurate or needs updating.
Under certain circumstances, with specific exceptions, you can request that we delete your data or stop processing it. Please note that deletion may prevent us from providing certain services or reduce their quality (e.g., if you decide to delete your user account, you will have to re-enter data with every new order). We must process certain data for a specific period, either due to legal obligations or contractual obligations. You can request that we stop using your personal data for direct marketing purposes.
You also have the right to restrict processing if some of the processed data is inaccurate, but you do not want the data deleted, preferring instead to restrict its use, or if we no longer need the data for the intended purposes, but you wish to retain it for your own legitimate needs (i.e., establishing, exercising, or defending legal claims).
Alongside the right of access, you may simultaneously use the right to data portability. This means that we transfer the data to you in a structured, commonly used, and machine-readable format if we process this data based on the consent you have given us and which you can withdraw, or to fulfill our contract, and if the processing is carried out by automated means.
You have the right to object (among other things) if we process your data for the performance of a task carried out in the public interest or in the exercise of official authority, or if we rely on our legitimate interests during processing.
If processing is based on your consent, you can withdraw it at any time. The withdrawal of your consent will only have effect for future processing. Processing carried out before the withdrawal of consent remains valid.
If you are not satisfied with our response to your inquiry, or if you have not received a response within 30 days from the date of submitting your request, you have the right to lodge a complaint with the supervisory authority, i.e., the Personal Data Protection Agency. A request to establish a violation of rights is submitted to the Agency (i) in person (orally into the record), or (ii) in writing to the address: Agencija za zaštitu osobnih podataka (Personal Data Protection Agency), Selska cesta 136, 10 000 Zagreb, or (iii) by filling out the online form on the Agency’s website (www.azop.hr), or (iv) by e-mail: azop@azop.hr, or (v) by fax to: 01/ 46-090-99.
Please note that we have the right, if your requests are manifestly unfounded (even if it is just one) or excessive, in particular because of their repetitive character, to: (a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or (b) refuse to act on the request.