RUDAN d.o.o. undertakes to protect the personal data of customers by collecting only the necessary, basic data about customers/users that are required to fulfill our obligations; informing customers about how the collected data is used; and regularly giving customers the option to choose how their data is used, including the possibility to decide whether or not they want their name removed from lists used for marketing campaigns. All user data is strictly protected and available only to employees for whom such data is necessary to perform their work. All employees of RUDAN d.o.o. and business partners are responsible for respecting the principles of privacy protection.
Who is responsible for processing your personal data?
RUDAN d.o.o.
9. rujan 1/H, Žminj
Danijel Benčić, President of the Management Board
OIB: 84430586938
Phone: +385 52 845 500
A. Introduction
1. The privacy of visitors to our website is very important to us, and we are committed to protecting it. This policy explains what we do with your personal data.
2. Consent to our use of cookies in accordance with the terms of this policy when you first visit our website allows us to use cookies each time you visit our website.
B. How we collect your personal data
The following types of personal data may be collected, stored and used:
- Information about your computer, including your IP address, geographical location, browser type and version, and operating system
- Information about your visits to and use of this website, including referral source, length of visit, page views and website navigation paths.
- Data you enter when registering on our website.
- Data you enter when creating a profile on our website.
- Data you enter in order to subscribe to our emails and/or newsletters.
- Data generated while using our website, including when, how often and under what circumstances you use it.
- Data relating to anything you purchase, services you use or transactions you carry out through our website, including your name, address, telephone number and email address
- Information you publish on our website with the intention of publication on the internet.
- Any other personal data you send to us.
C. Use of personal data
Personal data submitted through our website will be used for the purposes stated in this policy or on the relevant pages of the website. We may use your personal data for the following:
- Administration of our website and business
- Personalizing our website for you
- Enabling the use of services available on our website
- Sending goods purchased through our website
- Providing services purchased through our website
- Sending statements, invoices and payment reminders, and collecting payments from you.
- Sending email notifications that you have specifically requested.
- Sending newsletters by email if you have subscribed to them (you may unsubscribe at any time).
- Sending marketing communications related to our business or the businesses of third parties that we believe may be of interest to you.
- Handling inquiries and complaints submitted by you or relating to our website
- Maintaining the security of our website and preventing fraud.
- Checking compliance with the terms and conditions governing the use of our website.
- Other purposes.
We will not, without your explicit consent, provide your personal data to any third party for their own direct marketing or the direct marketing of any third party.
D. Disclosure of personal data
We may disclose your personal data to any of our employees, officers, insurers or professional advisers if this is strictly necessary for the purposes stated in this privacy policy.
We may disclose your personal data:
- to the extent required by law;
- in connection with any ongoing or future legal proceedings;
- in order to establish, exercise or defend our legal rights (including providing information to others for the purpose of preventing fraud and reducing credit risk);
Except as stated in this privacy policy, we will not provide your personal data to third parties
E. International data transfers
- The data we collect may be stored, processed and transferred between any country in which we operate in order to enable us to use the data in accordance with this policy.
- Personal data that you publish on our website or submit for publication on our website may be available worldwide via the internet. We cannot prevent the use or misuse of such information by others.
- You expressly consent to the transfers of personal data described in this section F.
F. Retention of personal data
1. This section G sets out our data retention rules and procedures, which are designed to ensure that we comply with our legal obligations regarding the retention and deletion of personal data.
2. Personal data that we process for any purpose or purposes will not be kept longer than is necessary for that purpose or those purposes.
3. Without prejudice to Article G-2, we will usually delete personal data that falls into the categories listed below:
a. the type of personal data will be deleted
4. Regardless of the other provisions of this section G, we will retain documents (including electronic documents) containing personal data:
a. to the extent required by law;
b. if we believe that the documents may be relevant to any ongoing or future legal proceedings; and
c. in order to establish, exercise or defend our legal rights (including providing information to others for the purpose of preventing fraud and reducing credit risk).
G. Security of your personal data
1. We will take reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal data.
2. All personal data you provide to us will be stored on our secure servers, protected by password and firewall.
3. All electronic financial transactions entered through our website will be protected by encryption technology.
4. You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
5. You are responsible for keeping confidential the password you use to access our website; we will not ask you for your password, except when you log in to our website.
H. Amendments and changes
From time to time, we may update this policy by publishing a new version on our website. You should check this page occasionally to ensure that you understand any changes to this policy. We may notify you of changes to this policy by email or through the private messaging system on our website.
I. Your rights
You may instruct us to provide you with all personal data we hold about you; the provision of such information is subject to the following:
1. submission of appropriate proof of your identity
We may withhold the personal data you request to the extent permitted by law.
You may instruct us at any time not to process your personal data for marketing purposes.
In practice, you will usually either expressly consent in advance to our use of your personal data for marketing purposes, or we will provide you with the opportunity to opt out of the use of your personal data for marketing purposes.
J. Third-party websites
Our website includes hyperlinks to third-party websites and details about them. We have no control over the privacy policies and practices of third parties and are not responsible for them.
K. Updating information
Please inform us if the personal data we hold about you needs to be corrected or updated.
Protection of personal data transmission
The protection of personal data is in accordance with the General Data Protection Regulation of the European Parliament and of the Council No. 2016/679 and the implementation of the General Data Protection Regulation.
Monri WSPay, as the executor of credit card authorization and payment processing, handles personal data in the capacity of a processor and processes personal data in accordance with the General Data Protection Regulation of the European Parliament and of the Council No. 2016/679 and in accordance with the strict rules of the PCI DSS L1 regulation on the protection of data entry and transmission.
Monri WSPay uses an SSL certificate with 256-bit encryption and the TLS 1.2 cryptographic protocol as the highest levels of protection during data entry and transmission.
Personal data used for the purpose of authorization and payment processing, or for fulfilling obligations under the Agreement or based on the Agreement, is considered confidential data.
The following personal data of the buyer is required for the execution of the Agreement (authorization and payment processing):
- First and last name
- Phone
- Address
- City
- Postal code
- Country
- Card type
- Card number
- Card validity period
- Card CVV code
Monri WSPay does not process or use this personal data except for the purpose of executing the authorization and payment processing agreement.
Monri WSPay guarantees compliance with all requirements set by applicable regulations on personal data protection for personal data processors, in particular the implementation of all necessary technical, organizational and security measures, which is especially confirmed by the PCI DSS L1 certificate.