Personal data protection
Personal data
Personal data processed in accordance with the law and internal acts of Kraš include all information relating to an individual whose identity is identified or can be identified (e.g. name and surname, address, telephone number, email address, etc.).
Processing of personal data refers to any operation performed on personal data, whether by automated or non-automated means, such as collection, use, storage, adaptation or alteration, deletion, or destruction.
Purpose of processing and consent
We collect personal data for specific, clearly defined purposes, about which you as the data subject are properly informed. Where required by law, your consent for processing is requested. Consent constitutes a freely given and explicit declaration allowing Kraš to process your personal data for the purpose for which it was collected.
The purposes of processing personal data include informing users/consumers about existing and new products and marketing activities, participation in prize contests and competitions, recruitment and candidate selection, responding to user/consumer inquiries, and similar activities.
All data are provided voluntarily, and whenever collected electronically via a web form, consent is given by ticking a checkbox next to a clear description of the processing purpose.
When personal data are collected in writing (via post), the possibility to grant consent is also provided where required. This typically applies to prize games or contests, where the rules specify how consent is granted — by handwritten signature, ticking a checkbox, or other designated means.
We do not process more personal data than is necessary for your participation in any given activity.
Types of information collected on the Kraš website and use of collected information
Kraš d.d. collects information that does not identify a specific user, including the Uniform Resource Locator (URL) of the website visited before accessing the Kraš website, the URL of the website visited after leaving the Kraš website, the type of browser used, and the user’s Internet Protocol (IP) address. Authorized service providers and advertisers may automatically collect this information when visiting this website through the use of cookies and other tracking tools. Kraš d.d. uses such data exclusively for troubleshooting, website administration, trend analysis, demographic data collection, regulatory compliance review, and cooperation with law enforcement authorities.
Depending on the type of activity, some information is designated as mandatory and some as voluntary. If a user does not provide mandatory information required for a specific activity, participation in that activity will not be permitted. Kraš d.d. will not collect personal data via its websites—such as name, surname, address, telephone number, or email address—unless voluntarily provided by the user through contact forms, surveys, consent, and/or as permitted by applicable personal data protection laws and regulations.
Server statistics
Our web server uses a statistical program. These programs are a standard feature of all web servers and are not unique to the Kras.hr website. Such programs allow us to identify which content is of most or least interest to our users. This program is necessary to improve the structural efficiency of our website and measure the visitor traffic to Kras.hr.
Protection and storage of personal data
Collected personal data are stored and treated as confidential, either in electronic or written form, and all necessary technical, organizational, and administrative protective measures are taken in accordance with legal regulations and Kraš’s internal policies.
Personal data are processed only for as long as necessary to fulfill the purpose for which they were collected, after which they are deleted. When collecting personal data for a specific purpose, we inform you of the retention period for the data provided.
Regardless of the defined retention period, personal data provided with your consent may be deleted at your request at any time (e.g. deletion of a user account).
In addition to the right to request data deletion, you also have the right to access your personal data or to request their correction, at any time.
Protection of children's personal data
Recognizing the particular sensitivity of processing personal data concerning children, Kraš processes children’s personal data only with the prior explicit consent of a parent.
Within the scope of rights and possibilities for using Kraš’s website services or providing information services directly to children (e.g. www.igraoni.ca), and in accordance with the law, Kraš d.d. allows or offers such activities exclusively to children aged 16 or older. For children under 16 years of age, consent from a holder of parental responsibility is required.
Limitation of liability
Although we undertake available technical, organizational, and administrative measures to protect personal data from accidental or intentional misuse, destruction, loss, unauthorized alteration, or access, we cannot guarantee that some personal data we collect will never be accidentally disclosed, contrary to the provisions of applicable legal regulations and Kraš’s internal rules described herein.
To the fullest extent permitted by law, we disclaim liability for any damage caused to users or third parties due to accidental disclosure of personal data.
Contact
Requests for exercising rights or inquiries regarding the processing and protection of personal data may be sent to the data controller at:
KRAŠ d.d.
Ravnice 48, Zagreb
e-mail: [email protected]