Privacy policy
Privacy policy
Introduction
This Privacy Notice informs you about the information we collect about you, how we use it and with whom we share it.
It is very important for us that you read the following Privacy Notice in order to be informed about the processing of your personal data and your rights under the applicable data protection regulations.
Content
- Definitions
- About ŠMIT ELECTRONIC
- Collection, processing and storage of personal data
- With whom we share personal data
- Transfer of personal data to third countries
- Your rights
- Changes to the Privacy Notice
1. Definitions
ŠMIT ELECTRONIC or WE refers to the company ŠMIT ELECTRONIC d.o.o., Croatia, Metanska 1, HR-44320 Kutina, OIB: 15852723582, which operates under the brands ESHARK, S-BOX i WHITE SHARK. ESHARK is a White Shark Premium brand.
GDPR means the EU General Data Protection Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC.
SERVICES denote the purchase and sale of products offered by ŠMIT ELECTRONIC.
PERSONAL DATA / PERSONAL INFORMATION means any data relating to an identified or recognizable living person.
PROCESSING MANAGER means the natural or legal person who determines the purposes and means of processing personal data and is responsible for the processing of such personal data in accordance with the GDPR and other applicable European and member state laws on the protection of personal data.
PERFORMER OF PROCESSING refers to a natural or legal person who processes personal data on behalf of the Controller.
SUB-PROCESSOR refers to a natural or legal person who processes personal data on behalf of the Controller, as specified in the contract and in accordance with our instructions.
VI refers to a natural person whose personal data is collected and processed by ŠMIT ELECTRONIC.
2. O ŠMIT ELECTRONIC
We, ŠMIT ELECTRONIC d.o.o., Hrvatska, Metanska 1, HR-44320 Kutina, OIB: 15852723582, we are responsible as the Data Controller for all personal data that you provide to us in connection with the offer of our Services.
ŠMIT ELECTRONIC offers buying and selling products. While providing the Services to our customers and processing personal data, we act as a Controller.
We act as a Data Controller in situations where we process personal data for our own purposes and in the manner described in this Privacy Notice.
Contact details
ŠMIT ELECTRONIC
Metanska 1
44320 Quince
Croatia
Email: kutina@smit-electronic.hr
3. Collection, processing and storage of personal data
Unless otherwise agreed, we will only collect basic data necessary for the realization of the offer of our Services or in connection with our business relationship.
In case of realization of business cooperation and business relationship, we will also collect data related to business. This data may contain information about purchases, services and other business activities, feedback and any other information that you can provide us, which is necessary for the realization of the business relationship.
We may collect your personal information directly from you or indirectly for one of the following reasons:
- General inquiry by e-mail;
- Communication via social network profiles;
- Browsing our website, including third-party services such as Google Analytics;
- Newsletter subscription;
- Other sources, such as public databases, joint marketing partners, social media platforms, people with whom you are connected on social networks, public forums and other third parties.
We collect personal data depending on the specific situation mentioned above. We only collect necessary data.
3.1. General inquiry by e-mail
This applies to situations when you contact us with a question about our services or when you are looking for new business opportunities.
Personal data we collect
- name;
- e-mail address;
- telephone number;
- state;
- related information, such as your company name, business role, and phone number.
Legal basis for data collection
- execution of the contract, in accordance with Article 6, paragraph 1, point (b) of the GDPR;
- legitimate interest, in accordance with Article 6, paragraph 1, point (f) of the GDPR, in terms of providing our Services to you.
Time period of data storage
If we do not enter into a contract, we will delete your personal data within six (6) months after our last communication.
Also, based on legitimate interest, if you no longer want us to contact you, you can object by sending an email to our contact address.
3.2. Communication through social network profiles
This applies to situations where you have initiated communication with us through social network profiles.
Personal data we collect
- name;
- e-mail address;
- telephone number.
Legal basis for data collection
- consent, in accordance with Article 6, Paragraph 1, Point (a) of the GDPR;
- legitimate interest, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.
Time period of data storage
In the event that you have not hired us for one of our Services, we will keep the data based on legitimate interests until you object to the processing of your personal data for this purpose.
If you have given your consent, we will keep the data until you withdraw your consent.
3.3. Browsing our website
This applies to situations when you browse our website, including the use of third-party services, for example Google Analytics.
Personal data we collect
We usually collect:
- IP address;
- browser type;
- the pages you have visited;
- the order in which you visited the pages;
- information about whether you are a new or returning visitor.
This data is only processed in a way that does not identify anyone, but helps us maintain and improve our website and business.
For more information, read our Cookie Policy.
Legal basis for data collection
- consent, in accordance with Article 6, Paragraph 1, Point (a) of the GDPR;
- legitimate interest, in accordance with Article 6, Paragraph 1, Point (f) of the GDPR.
Time period of data storage
We keep the data until you object to the processing of your personal data for this purpose or until you withdraw your consent.
For more information, read our Cookie Policy.
3.4. Newsletter subscription
Personal data we collect
- e-mail address;
- name.
We will email you updates and information about our new products and services, upcoming events or other advertising campaigns and news.
We also collect statistics on email open and click rates.
Legal basis for data collection
- consent, in accordance with Article 6, Paragraph 1, Point (a) of the GDPR;
- legitimate interest, in accordance with Article 6, paragraph 1, point (f) of the GDPR, in terms of information about us and our services.
Time period of data storage
If the marketing communication is based on our legitimate interests, we will keep the data until you object to the processing of your personal data for this purpose.
If the processing is based on the given consent, we will keep the data until you cancel the subscription, that is, until you withdraw your consent.
ŠMIT ELECTRONIC can save your email address for the purpose of sending promotional and educational newsletters. Your e-mail address is stored in Kutina, on the company's server, and will be forwarded to the Mailchimp service, which we use to send newsletters.
We will retain your email address until you unsubscribe from the newsletter. You can withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent prior to its withdrawal.
You can unsubscribe from receiving our newsletter at any time by clicking on the icon Check out, which will be available in each individual edition of the newsletter.
By withdrawing your consent, you will no longer receive our newsletters, but you will still be able to use our website and other services.
3.5. Links to other websites
This website contains links to other websites.
Please note that ŠMIT ELECTRONIC cannot be held responsible for privacy on other websites.
We encourage our users to read the privacy statements of each website that collects personal information.
This Privacy Notice applies solely to information collected on the Website eshark.gg.
4. With whom we share personal data
We may share your personal data with:
- to third parties as Sub-Processors, if required or permitted by applicable law;
- to third parties as sub-contractors in order to provide specific functionalities, such as targeted marketing and other tools necessary for the provision of our Services, for example Google Analytics and the company Lloyds design d.o.o., which technically maintains the website;
- to third parties who are legally authorized to process credit decisions, prevent fraud and prosecute debtors;
- to third parties who are legally authorized to request access and sharing of your personal data for the purpose of criminal proceedings or due to threats to public safety.
Otherwise, no third party will have access to your personal data unless there is a legal requirement to do so or you give us permission to do so.
5. Transfer of personal data to third countries
Subject to the above, we may share your personal data with third parties located outside the European Economic Area.
All transfers of personal data are carried out in accordance with EU GDPR data protection standards.
6. Your rights
In accordance with the EU General Data Protection Regulation, you have the following rights:
- Right to information about the collection and use of your personal data, which is a key transparency requirement under the GDPR;
- The right to access personal data, that is, the right to request a copy of your personal data that we have about you;
- Right to rectification your personal data if the data is incomplete or incorrect;
- Right to erasure, i.e. the right to be forgotten, when your personal data is no longer needed or when your personal data has been used illegally;
- The right to restriction of processing your personal data in certain circumstances, as an alternative to the right to deletion;
- The right to data portability, which means that your personal data can be obtained and reused for your own purposes;
- The right to object to process your personal data in a way that will stop or prevent us from processing your personal data in accordance with our legitimate interest, for example for direct marketing purposes;
- Rights in relation to automated decision-making and profiling;
- The right to appeal to the national data protection authority.
You can exercise the above rights in accordance with the EU General Data Protection Regulation and national regulations on personal data protection.
6.1. The right to object to the use of your data
You have the right to object, that is, the right to stop or prevent an organization from using your data in certain circumstances.
We may not have to stop processing your personal data if we provide you with compelling and legitimate reasons for continuing to use your data.
You can object to processing only when we use your data:
- for our legitimate interests;
- for direct marketing purposes.
In cases where we invoke a legitimate interest as the legal basis for processing your data, you can object to such processing at any time.
In that case, we are obliged to prove to you:
- that there are compelling legitimate reasons for data processing on our side or on the side of a third party, which go beyond your interests, rights or freedoms; or
- that data processing is necessary to establish, exercise or defend legal claims.
On the other hand, in the case of direct marketing, we cannot reject your objection and we will stop using your data for direct marketing purposes.
You can exercise this right by unsubscribing.
6.2. How to exercise your rights
If you have any concerns about the way we handle your personal data or would like to make a complaint about the way we have handled your personal data, you can contact our Data Protection Officer by sending an email to:
6.3. The right to file a complaint with the supervisory authority
If you believe that we are processing your personal data illegally, you have the right to file a complaint with the supervisory authority for the protection of personal data.
In the Republic of Croatia, it is the body Agency for the Protection of Personal Data: www.azop.hr.
If your habitual residence, workplace or the place of the alleged infringement is in another EU member state, or if you believe that your rights have been violated in another EU member state, you can file a complaint with the supervisory authority of that state.
7. Changes to the Privacy Notice
This Privacy Notice was last updated in October 2020
You can check from time to time whether this Privacy Notice has changed or been modified in accordance with applicable data protection rules.
If you have any questions regarding your privacy, wish to withdraw your consent to the processing of your personal data or exercise any of your rights arising from this Notice, you may do so at any time by sending an email to: