GDPR

This Privacy Policy for PLINARA d.o.o. applies as of 25 May 2018. PLINARA d.o.o. will handle your personal data in accordance with the General Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data, as well as national regulations governing the protection of personal data, while applying appropriate technical and security measures to protect personal data from unauthorized access, misuse, disclosure, loss, or destruction.

1. Basic Information

This statement describes what data we collect, how we process it, and for what purposes we use it, as well as your rights related to your data.
The data processing is managed by the Data Controller:
PLINARA d.o.o., Limited Liability Company for Gas Supply
Pula, Industrijska 17
VAT ID: 18436964560

The Data Protection Officer is:

Law Firm ZAGORŠĆAK & PARTNERI d.o.o. Zagreb, Radnička cesta 52
Phone: (+385) 091 2017886
E-mail address: odvjetnik.zagorscak@os.t-com.hr

If we use external providers for processing your personal data, the processing (of personal data) is done on our behalf, and we are responsible for the protection thereof.

2. Categories of Personal Data We Process

We process and use the personal data of the following:
- employees, children, and spouses of employees,
- corporate bodies (members of boards of directors, assemblies, supervisory boards),
- external associates,
- users of core activity,
- business clients,
- contractual users.

Within the business relationship, you are obliged to provide the personal data that are necessary for the establishment and realization of the business relationship and for fulfilling related contractual obligations or for which there is an obligation to collect. Without this data, we are generally forced to refuse entering into a contract or executing an order or to suspend its implementation and terminate an existing contract. You are not obliged to give your consent for the processing of data that are not relevant or legally required for the execution of the contract.

3. Legal Basis and Purposes of Processing Personal Data

The processing we perform is based on:
a) Legal obligations – we process your personal data in accordance with applicable regulations and for notifications and reports that we are required to perform under valid regulations.
b) Contract fulfilment – we process personal data for the purpose of fulfilling contractual obligations that we agreed upon.
c) Consents – that you have given for processing your personal data (e.g. phone number).
d) Legitimate interests.

4. Retention Period

Personal data is retained, archived, and disposed of in accordance with legal and regulatory provisions or by-law - Regulation on the Protection and Processing of Archive and Registry Material.
We generally delete your basic personal data after the expiration of all legal obligations related to the retention of personal data.

5. Managing Consents

You can withdraw your Consent for Contact at any time. Likewise, you can object to our processing of your personal data at any time.

You can change your consent by sending a written request to:
Plinara d.o.o.
52 100 Pula, Industrijska 17
or via e-mail at: plinara@plinara.hr

If you withdraw the given consent, we will no longer use your data for the stated purposes. 
If you wish to give your consent again, you can do so at any time.

In cases where we process your personal data without the need for consent, which is necessary for concluding a contract with us or fulfilling the contract or due to obligations we have under the law, if you do not provide us with this data, we will not be able to fulfil our contractual obligations to you or conclude a contract with you. The withdrawal of consent does not affect the legality of the processing based on consent before it was withdrawn.

6. User Rights

a) Right to access information and information about the processing of personal data, i.e. whether the data controller processes personal data of the data subject or not.
b) Right to correction: If we process your personal data that are incomplete or inaccurate, you can request us to correct or complete them at any time.
c) Right to deletion: You can request the deletion of your personal data if we have processed them unlawfully or if this processing disproportionately infringes on your protected interests. Please consider that there are reasons that prevent immediate deletion, for example, in cases of legally mandated archiving obligations.
d) Right to restrict processing: You can ask us to restrict the processing of your data if: • you contest the accuracy of the data during a period that allows us to verify the accuracy of such data; • if the processing has been unlawful, but you refuse deletion and instead request the restriction of the use of the data; • if we no longer need the data for the intended purposes, but you still need them to establish legal claims; or • if you have lodged an objection to the processing of those data.
e) Right to data portability: You may request that we provide you with the data you have entrusted us with in a structured format, in a commonly used and machine-readable format: • if we process that data based on your consent, which you may withdraw, or for the fulfilment of our contract; and • if the processing is carried out by automated means.
f) Right to object: If we distribute your data for the performance of tasks carried out in the public interest or tasks of public authorities, or invoke our legitimate interests in their processing, you may object to such processing if there is an interest in protecting your data.
g) Right to lodge a complaint with a supervisory authority: If you believe that we have violated Croatian or European data protection regulations while processing your data, please contact us so that we can clarify any issues. You have the right to file a complaint with the Croatian Personal Data Protection Agency, or in the event of a change in applicable regulations, with another body that will assume its jurisdiction, and as of May 25, 2018, with a supervisory body within the EU.
h) Exercising rights: If you wish to exercise any of the stated rights, please contact us using our contact information provided in section 1 of this Statement.
i) Identity verification: In case of doubt, we may request additional information to verify your identity. This is to protect your rights and privacy.
j) Abuse of rights: If you were to use any of the stated rights too frequently and with obvious intent to abuse, we may charge an administrative fee or refuse to process your request.

7. Transfer of Personal Data to Third Countries

The transfer of data to third countries (countries outside the EU) is carried out only:
- if there is a legal obligation, or
- if the data subject has given explicit consent for the transfer of data.

8. Data Transfer to Third Parties

We are committed to safeguarding your personal data and will not disclose or make it available to third parties except in the following cases:
- if you explicitly and in writing consent to the disclosure of certain confidential data for a specific purpose or to a specific person;
- upon written request from a court or public notary if the data are needed to carry out duties entrusted to them by law (e.g. enforcement, bankruptcy, or inheritance procedures);
- if the data is needed by the Ministry of the Interior or the competent state attorney's office for the purposes of performing tasks within their jurisdiction;
- if the data is required by a court, an attorney-at-law, or a public notary for a procedure they are conducting, and the presentation of that data is requested in writing;
- if the data is needed by the Social Welfare Centre within their legal authority;
- if the data is required by the Ministry of Finance or tax authorities (Tax and Customs Administration), in proceedings they conduct within their jurisdiction;
- if the data is required by other competent ministries within the activities of the company;
- if the data is needed to fulfil contractual obligations towards you and to meet our legal obligations;
- in other cases prescribed by law.

9. Technical and Organizational Measures

We have implemented all technical and organizational measures to protect your data against loss, alteration, or unauthorized access from third parties. If you have any questions, feel free to contact us, and we will respond to your requests, inquiries, and assist you in exercising your rights as soon as possible. Any changes to our personal data protection policy will be published in the privacy statement on our website, and you will be adequately informed about them.

10. Personal Data on Websites

We only collect personal data that visitors to our official website voluntarily provide when submitting a contact request, job application, call-back request, or complaint form. This personal data is used confidentially and only for specific purposes. The transfer of this personal data to third parties does not take place unless there is a legal obligation or order from an official body, in which case the personal data may be forwarded to the competent authority. Access to the website is logged, and technical data such as page visits, operating system used, screen resolution, visit times, and the amount of data transferred are recorded. To enhance our services, the website may use "cookies" that are stored on the visitors' computers. The storage of "cookies" can also be prevented, but this may result in limited availability of the website. "Cookies" enable the storage of visitors' preferences, optimizing technical processes, and continuous improvement of the offerings.