Privacy Policy

1. Introduction

We care about your privacy. We collect and process your data if it is necessary for the proper provision of the service.

Below we present the data processing principles used by the Administrator, in accordance with the GDPR.

Who is the Data Administrator?

The data controller is Mala Vala Maslina doo with its registered office at Put Mulina 36A, Trogir, Croatia, OIB: 03778211724, MB: 05044146

For what purpose do we collect your data? How long do we process it?

We may process your data for the following purposes:

• Communicating with you, including responding to questions submitted via the contact form, e-mail, online meetings, etc.
  The data will be processed based on the legitimate interest of the Administrator in the form of communication with the Users of the website (Article 6 paragraph 1 letter f of the GDPR). Your data will be processed no longer than until you file an objection or the business purpose ceases. Providing this data is voluntary, but necessary for communication with you. The data may also be processed for archiving purposes, for internal purposes based on the legitimate interest of the Administrator (Article 6 paragraph 1 letter f of the GDPR) until you file an objection or the business purpose ceases.
• Conclusion of the contract and its implementation (placing an order).
• Establishing, defending and pursuing claims.
• Fulfillment of legal obligations incumbent on the Administrator (including tax and archiving obligations and obligations resulting from the Act on Counteracting Money Laundering and Terrorist Financing). Data necessary to conclude and execute the contract will be processed for the duration of the contract, including the duration of the exercise of rights resulting from the contract, such as the right to make a complaint under the warranty (Article 6, paragraph 1, letter b and f of the GDPR). Providing these data is voluntary, but necessary for the conclusion and execution of the contract.

Additional data, provided for the purpose of, among other things, improving the performance of the contract, will be processed for no longer than until you file an objection or the business purpose ceases, based on the legitimate interest in the form of customer service (Article 6, paragraph 1, letter f of the GDPR). After this period, the data will be processed for the limitation period of claims, based on the legitimate interest of the Administrator, in order to defend against claims, as well as to establish and pursue claims (Article 6, paragraph 1, letter f of the GDPR).

If the data is necessary to fulfil the legal obligations incumbent on the Controller (such as issuing and storing invoices) – such data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents) or within the scope of obligations arising from the Act on Counteracting Money Laundering and Terrorist Financing – for a period of 5 years from the date of termination of business relations, carrying out an occasional transaction or conducting a risk analysis, unless the law requires a longer period (Article 6 paragraph 1 letter c of the GDPR).

Data may also be archived for internal and statistical purposes until you object or the business purpose ceases to exist based on the legitimate interest of the Controller (Article 6 (1) (f) of the GDPR).

• Sending marketing information (including sending the newsletter and other information about services, products, promotions, free content). Data will be processed based on the legitimate interest of the Administrator for the purpose of marketing the Administrator's products and services (Article 6 paragraph 1 letter f of the GDPR). Your data will be processed for no longer than until you file an objection or until the business purpose ceases - depending on which comes first. Providing data is voluntary, but necessary to receive the newsletter. For the purposes of commercial communication, your consent is required, based on Article 10 of the Act of 18 July 2002 on the provision of services by electronic means (Journal of Laws of 2002, No. 144, item 1204). You can withdraw it at any time by clicking the link in the footer of the e-mail or by writing to us at the address provided above.
• Administering and managing the website and groups on social media platforms (including Facebook and Instagram), primarily in the case of data processing on social media platforms through communication with you and sending marketing content to you.

This data will only be processed if you decide to like the page, join the group, select the "Follow" option or otherwise leave your data on the platform managed by us (e.g. in the form of a post or comment). The data will be processed for the duration of the page's or group's existence or until you object, which may be done by unchecking the "Like" option, "Follow", deleting the comment/post or in another way provided for within the platform/page or by contacting us. We inform you that the rules relating to the page/fanpage/group are established by the Administrator, while the rules for using the social networking site on which the page/fanpage/group is placed are established by the entity managing these portals.