GDPR

General provisions

In the processing of personal data and the protection of individuals with regard to the processing of personal data and rules relating to the free movement of personal data, Pula Parking d.o.o. (hereinafter: the Company) is subject to the application of the General Data Protection Regulation (EU) 2016/679 (hereinafter: the General Regulation) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18).

Pursuant to Art. 4, point 7 of the General Regulation, the Company is the controller of personal data processing, determining the purpose and means of processing personal data in accordance with national legislation and/or EU law.

The Company processes the personal data of natural persons lawfully, fairly and transparently. Only adequate and relevant personal data are processed, exclusively for specific, explicit and legitimate purposes, and are not further processed in a manner incompatible with those purposes.

The personal data processed by the Company are accurate and, where necessary, kept up to date. Personal data that are inaccurate are deleted or corrected without delay.

The Company processes personal data exclusively in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical and organisational measures.

The Company stores personal information for the period necessary to fulfil the purpose for which the information was collected, usually for the duration of the contractual relationship and for any period thereafter that is legally required or permitted under applicable law. The Company's storage rules reflect the applicable limitation periods and legal requirements.

This Statement relates to our website www.pulaparking.hr and to personal data in communication with our clients via the e-mail protocol, with the consent of the user themselves ("personal data" includes data that, individually or in combination with other data, can be used for personal identification).

The Company cooperates with trusted partners such as Google LLC for analytics tools, and E-scape obrt for providing website hosting services (hereinafter we will refer to them as "Partners").

For the personal data covered by this Security and Privacy Statement, the Company is the data controller under the General Data Protection Regulation (GDPR).

 

Data collection

When sending contact details related to information and complaints, you send us the data we need to provide our services: first and last name, e-mail, mobile or telephone number.

These data are required exclusively for correct recording and further communication via secure email protocols with our clients, and they are not disclosed to third parties or Partners. There are exceptions, in the case of our Partners, when we share the most basic necessary data in order to help us fulfil our obligations towards you.

When using our website, we also collect technical data about the devices through which you access our website, including: Internet and/or mobile connection (includes the IP address), data on the type of mobile device, operating system, type of browser or other software, hardware specifications or other technical data provided by the browser. These are all technical data about our users and their actions and patterns, which do not reveal personal data.

 

Cookies

We also collect data by using cookies and similar technologies.

Necessary cookies These cookies are essential for the operation of the web service in order to enable smooth operation and access. Without these cookies some parts of the website will not be available.

Performance cookies These cookies serve for faster access to certain parts of the website

Analytical cookies We use Google Analytics to collect data on how visitors use our website. For example, we are able to track which web pages you open most often, which device you use to access our website and the like. We collect this in order to optimise and improve the service, to make your use easier and to obtain information about visits. Usage data and the IP address are sent to Google Inc. via the Google Analytics tool. To stop the tracking of your actions by the Google Analytics tool, visit http://tools.google.com/dlpage/gaoptout. You can obtain more information about the Google Analytics tool at https://www.google.com/analytics/.

 

Processing of personal data

The Company processes personal data only and to the extent that one of the following conditions is met:

- that the data subject has given consent to the processing of their personal data for one or more specific purposes
- that the processing is necessary for the performance of a contract to which the data subject is a party
- that the processing is necessary for compliance with the Company's legal obligations
- that the processing is necessary in order to protect the vital interests of the data subject or another natural person
- that the processing is necessary for the performance of a task carried out in the public interest
- that the processing is necessary for the purposes of the legitimate interests of the Company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

The consent by which the data subject gives the Company their agreement to the processing of personal data relating to them is voluntary, in written form with easily understandable, clear and simple language, with a clearly indicated purpose for which it is given and without unfair conditions.

If it concerns the processing of the personal data of a child below the age threshold of 16 years, consent in the manner previously described is given by the holder of parental responsibility over the child (the parent or legal guardian of the child).

In the process of processing personal data, the Company provides the data subject, in an appropriate manner (in writing or directly orally), with all information relating to the processing of their personal data, and in particular on the purpose of data processing, the legal basis for data processing, the legitimate interests of the Company, the intention to transfer personal data to third parties, the period for which the personal data will be stored, the existence of the data subject's right to access personal data and to rectify or erase personal data and restrict processing, the right to lodge an objection, and more.

 

Manner of data processing

All the data you leave with us are stored on a dedicated network server located in the European Union, to which only the Partner has access. We regularly carry out appropriate technical and organisational measures to protect personal data against unauthorised or unlawful handling, accidental loss, destruction or damage.

Data protection measures in the data centre
• biometric access system via fingerprint reader
• recording of all entries and exits
• data centre divided into 3 restricted-access zones
• access only through locks that have 2 separate access terminals
• 24/7 monitoring and recording with (infrared) cameras

 

Data retention period

The Company stores personal information for the period necessary to fulfil the purpose for which the information was collected, usually for the duration of the contractual relationship and for any period thereafter that is legally required or permitted under applicable law. The Company's storage rules reflect the applicable limitation periods and legal requirements.

 

User rights

The Company will, immediately and no later than within one month from the date of submission of the request by the data subject or their legal representative or authorised proxy:

- inform the data subject about the purpose of processing their personal data, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, and, where the personal data are not collected from the data subject, about their source
- provide the data subject with a printout of the personal data contained in the storage system that relate to them
- correct inaccurate data or supplement the data
- carry out the erasure of personal data relating to the data subject, provided that the personal data are no longer necessary in relation to the purposes for which they were collected or if the data subject withdraws the consent on which the processing is based.

The deadline may, if necessary, be extended by a further two months, taking into account the complexity and number of requests. The Company informs the data subject of any such extension within one month of receiving the request, together with the reasons for the delay.

If the data subject's request is submitted electronically, the Company provides the information electronically where possible, unless the data subject requests otherwise.

 

Changes to the Security and Privacy Statement

We reserve the right to amend this Security and Privacy Statement if we consider it necessary for legal reasons or in order to comply with changes to the websites. In that case we will publish the changes on our website and/or notify you by e-mail. After we change the Security and Privacy Statement, it becomes effective immediately upon publication.
 

DECISION ON THE APPOINTMENT OF THE DATA PROTECTION OFFICER.