Privacy Policy
ON PRIVACY RULES
This privacy policy (“rules”) explains how XY Agency, obrt za promidžbu i dizajn, vl. Dorian Šestan, Zemljoradnička 16, 52470 Umag OIB: 83917129322 (hereinafter: “XY Agency”) collects, uses and manages your personal data contained on the website and which is available to XY Agency through your use of the website: www.xyagency.hr.
XY Agency is committed to protecting and respecting your privacy. Read these policies carefully to understand why and how we collect your personal information and how it will be used. In terms of the personal data we collect, XY Agency is the “controller”, ie the one who determines the needs for which and the means by which personal data are processed.
XY Agency, as the service provider of the website www.xyagency.hr, is committed to protecting the privacy of personal data.
If you wish to contact us regarding these policies or about your personal information, please use the following contact information:
XYAgency, obrt za promidžbu i dizajn, vl. Dorian Šestan
Zemljoradnička 16,
52470 UMAG
OIB: 83917129322
You can reach the Data Protection Officer at: contact@visioncompliance.eu
How and when do we collect your personal information?
XY Agency collects personal information for the purpose of improving our business and your user experience, and for marketing purposes. For these reasons, XY Agency has a comprehensive privacy program designed to respect and protect data privacy rights, project analysis and implementation, marketing, and other types of technical support.
We treat your personal information as confidential and are properly protected by XY Agency and / or our trusted partners.
We process your personal data for the purpose of complying with legal obligations, if necessary for the performance of the contract to which the respondent is a party or to take action at the request of the respondent before concluding the contract or for legitimate interests, except when these interests and the freedoms of respondents who require the protection of personal data.
What information do we collect directly from you?
When the user gets involved in certain activities on the website www.xyagency.hr such as searching for products we offer, subscribing to the newsletter, sending us an inquiry, and / or when you wish to send us your CV, XY Agency may ask the user to provide certain additional personal information. In this case, before providing personal data, the user is obliged to study these Privacy Policy and agree to their application in relation to additional data.
Depending on the types of activities, some of the requested data are defined as mandatory and some as voluntary. If the user does not want to provide mandatory information for the activity that requires them, he will not be allowed to participate in this activity.
XY Agency collects and uses personal data in order to enable users to use the activities through the website www.xyagency.hr, improve the performance of the website www.xyagency.hr, create a database of users or customers in order to improve the service and / or marketing and improved advertising and promotional activities. Also, personal data can be used to resolve complaints, resolve problems related to the delivery of purchased products, perform other administrative tasks and establish contact with users.
On the website www.xyagency.hr, XY Agency collects personal data of respondents such as: IP address of the website visitor, ID of the website visitor and the information about your location. Name, surname, e-mail address or other contact information might be requested and obtained through web form submission.
In addition to the following personal data that we process when you visit the website, below we detail other types of personal data, the purposes of collection and use of the same, which we collect and process in the course of our regular duties:
XY Agency collects and processes personal data from its employees and other associates for the purpose of enforcing employment contracts signed with employees and consulting and / or employment contracts signed with associates relating to personnel, administrative or other business / contractual business purposes. In the latter case, we collect and process data such as: name, surname, gender; marital status, citizenship, residence, date and place of birth, personal identification number; title, occupation, data on professional training, data related to health insurance, work experience; etc.
- We collect and process data from suppliers and other clients or associates, for the purpose of fulfilling contractual obligations, such as: name and surname of the responsible person in the legal entity; contact details of the personal person in charge of communication and execution of contractual obligations.
- From job candidates, all for the purpose of possible employment, the data collected and processed by XY Agency may include: name, surname, address, contact information, level of education, citizenship, title and occupation, information on previous work experience, information on professional development and training and test results that may also reflect the candidate’s ability to perform all the job responsibilities that a particular position he / she is applying for places before him / her.
- From subscribers to our newsletter, in order to inform you about our new products and the benefits you can get, we collect information such as e-mail address.
- In many cases, you want to ask us something, and for that purpose we collect your e-mail address, name and surname. The subject of the message as well as its content depends on what you want to ask us.
- Customer Service – Office; if you contact our customer service (request a return of the product or are not satisfied with the service, etc.), directly in XY Agency or through any other means of communication available to you, we need your contact information to solve the problem with which we you are addressing. The information you provide to us will only be used for this purpose. In certain cases, we will use the services of other legal entities to whom we entrust your data only to the extent necessary to resolve your case (eg authorized repair services or authorized companies that provide customer support for us).
- The following persons may have access to personal data in the performance of their scope of work: legal entities involved in the implementation of legal relations with users such as IT support and other companies related to XY Agency.
What privacy rights do you have?
XY Agency respects that every user should be able to ensure the accuracy, completeness and up-to-dateness of their personal data. If the user considers that his personal data is incomplete, inaccurate or out of date, he can contact XY Agency by sending an e-mail to contact@visioncompliance.eu
Please note that you have the right to request the following from XY Agency at any time:
To gain access to your personal information:
You can ask XY Agency what personal information we use, and you can request access to that personal information. You have the right to know the purpose of the processing, which categories of your personal data we keep, the bodies or categories of bodies with which we share your personal data, the retention period, as well as the source of data in case indirect data is collected. You can contact us if you want a copy of some or all of the personal information we hold about you.
Request correction of incorrect data:
We want your personal information to be accurate and up-to-date. You can ask us to correct or remove information that you think is inaccurate or out of date.
Request the deletion of personal data:
You can ask XY Agency to stop processing or even delete your personal data. If we need your personal information to perform a contractual obligation to you, XY Agency may cease to be able to perform such contractual obligations. Also, if your personal information is needed in order to fulfill certain legal obligations (eg tax obligations), your request may not be able to be fulfilled.
Restrict access to your data (us and / or third parties) in certain processes or in full:
If you want to challenge the accuracy of the data, or we no longer need personal data for the purpose of processing, but you need them to establish, execute or process legal claims or you oppose the processing on grounds we deem legitimate, you have the right to restrict personal data processing.
File a complaint in the way we use your information:
Remember that you have the right to object to the processing of personal data based on a legal basis that XY Agency considers legitimate.
Request data transfer to another processor (transferability of rights)request data transfer to another processor (transferability of rights):
If the processing is based on your consent or is performed by automatic means, you have the right to request from XY Agency the transfer of data to another processor.
___
To exercise any of the above rights, please use the contact information provided at the beginning of these Rules.
If you are not satisfied with how we have collected or used your personal data, you can file a formal complaint with the Personal Data Protection Agency.
Where is your personal information stored?
We store the personal information we collect about you in a secure environment. Your personal information is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
The processed data is stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.
XY Agency will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons.
The data collected for the purposes specified in these Rules will be stored only for as long as is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than XY Agency reasonably deems necessary to achieve the purpose for which it was collected or processed. XY Agency will keep certain personal data for a period of time prescribed by law or a regulation that obliges XY Agency to keep data. For example, we keep data related to the exercise of your rights, such as the right to be forgotten, permanently; data related to consumer complaints 1 year from the receipt of the same, etc.
In case you have given us consent, we will process your personal data until the consent is withdrawn. If you make a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to point out the following; during the audit we will take into account that after 1 year from when you told us which cookies you accept and / or gave your consent and renew, and if a court, administrative or out-of-court procedure is initiated, personal data may be stored until the end of such procedure, including and a possible period for declaring remedies. XY Agency will keep certain personal data for a period of time prescribed by law or a regulation that obliges the controller to keep the data.
Does XY Agency share data with third parties?
Privacy is important to us, so we will never share your personal information with third parties except for the purposes described in this Policy.
XY Agency cooperates with other companies. This means that we sometimes share your personal information, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that provides an adequate level of protection in accordance with EU legislation.
XY Agency, as the controller of personal data, may transfer personal data outside the EU if it is necessary for the execution of a contract between XY Agency and the controller and / or other controller or for the fulfillment of legal obligations. In the latter case, XY Agency transfers personal data only to countries that provide an appropriate level of protection, either through model contracts containing binding provisions or through binding corporate rules; or in accordance with an approved certification mechanism and / or privacy framework for the transfer of personal data from the European Union and Switzerland to the United States.
In addition, we may provide your personal information to our trusted partners who maintain our IT system or provide services on behalf of XY Agency, for example, for marketing, finance, advertising and other services inside and outside XY Agency. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your information and to consider it a trade secret.
Information collected about you by Google LLC:
XY Agency uses services provided by Google LLC and its affiliates, including YouTube, Android, and services provided on third-party websites, such as advertising services (“Google”).
These policies do not apply to services that have separate privacy policies that do not include these privacy policies, however, in accordance with personal data protection regulations, XY Agency is required to notify its users of the information collected by Google LLC in providing other legal and physical services. persons.
The information collected by Google includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including operator name and phone number, and application version number.
In addition, Google collects information about the interaction of applications, browsers, and devices with Google services, including IP address, crash reports, system activity, and the date, time, and URL of the referral request.
Google collects information when a Google service on your device contacts Google servers – for example, when you install an app from the Play Store or when the service checks for automatic updates. If you use an Android device with Google applications, your device periodically contacts Google servers to provide device information and connect to our services. This includes information such as device type, mobile operator name, crash reports, and applications you have installed.
1. Information about your activities
For example, Google collects information about your activities on Google services in order to recommend a video on YouTube that you may like. Activity data collected by Google may include:
– the terms you are looking for
– videos you’re watching
– Display and interact with content and ads
– data on voice and audio activity when using audio features
– purchasing activities
– People you interact with and share content with
– activities on websites and third-party applications that use our services
– The Chrome browsing history that you synced with your Google Account.
If you use Google services to make and receive calls or send and receive messages, Google may collect phonebook information such as your phone number, the number you called, the number that received the call, the numbers to which calls were diverted, the time and date of the call. and messages, call duration, routing information, and call types.
You can find and manage activity data stored in your Google Account.
2. Location information
Google collects information about your location when you use specific Google services. Your location can be determined with different levels of accuracy based on:
– GPS
– IP address
– sensor data on the device
– Data about things near the device, such as Wi-Fi access points, mobile transmitters, and Bluetooth-enabled devices.
In some circumstances, Google also collects information about you from publicly available sources.
For example, if your name appears in a local newspaper, Google’s search engine may index that article and show it to other users when they search for your name.
It’s important to note that Google may also collect information about you from trusted partners, including marketing partners who provide information about potential users of Google business services and security partners who provide us with anti-abuse data, as well as advertisers to provide ads and research services in their behalf.
For what purposes does Google collect your information?
Google may use your information to ensure the proper functioning of the Services, for example by monitoring downtime or resolving issues you report.
Furthermore, Google uses the data for analytical and measurement purposes.
For example, Google analyzes data about your visits to Google sites and uses data about ads you interact with.
When you visit sites that use Google Analytics, Google and the Google Analytics user Google may associate information about your activity on that site with activity on other sites that use Google advertising services. The information we collect, such as your email address, is used by Google to interact directly with you. For example, it may send you a notification if it detects suspicious activity, such as trying to sign in to your Google Account from an unusual location, or it may notify you of upcoming changes or improvements to services.
In the event that you contact Google, Google will record a request record to help resolve your issue.
Google uses automated systems that analyze your content to provide customized search results, customized ads, or other features tailored to your use of our services.
Google also analyzes your content to detect abuse, such as unwanted, malicious, or illegal content. Algorithms are also used to identify patterns in Google data.
For example, Google Translate helps people communicate in different languages by discovering common language patterns in the phrases you are looking for translation.
For the purposes described above, Google may combine data collected from its services and all of your devices. Depending on your account settings, your activity on other sites and applications may be linked to your personal information in order to improve the Google services and ads that Google displays.
If other users already have your email address or other credentials, Google may show them your publicly visible Google Account information, such as your name and photo. For example, they can more easily recognize the email you send them.
YOUR PRIVACY CONTROLS
You have choices about the information that Google collects about you and how it uses it.
This section describes the main privacy management controls:
1. You can visit the Privacy Settings Checker to review and customize important privacy settings.
2. Visit the Check Privacy Settings, Manage Data, and View and Update pages.
Once logged in, you can always view and update your information by visiting the services you use.
3. Google has also established a location where you can view and manage the data stored on your Google Account.
The following controls are available in your Google Account:
a. Privacy controls
b. Activity controls
Specify the types of activities you want to save to your account.
c. Ad settings
Manage your ad preferences that appear on Google and on sites and applications that display ads in partnership with Google. You can change your interests, choose whether your personal information is used to display relevant ads, and turn certain advertising services on or off.
4. Google allows you to manage information that others see about you on Google services.
5. Shared recommendations via Google.
Choose whether your name and photo will appear next to your activities, such as reviews and testimonials that appear in your ads.
6. Information you share.
Determine who you want to share data with through your Google + account.
7. Google also provides you with ways to view and update your data.
On the My Activity page, you can view and control data generated by your use of Google services, such as your past searches and visits to Google Play.
You can view your activity by date and topic, and you can delete it in part or in full.
8. Google Dashboard.
You can use Google Dashboard to manage data related to specific products.
Your personal information
a. Manage your contact information such as name, email address, and phone number.
When you are not logged in, you can manage the data associated with your data.
Customize your search while logged out: Choose whether your search activity will be used to offer relevant results and recommendations.
YouTube settings: Pause and clear your YouTube search history and YouTube viewing history.
b. Manage your ad settings on sites and applications that run ads in partnership with Google.
c. Export, remove and delete data
If you wish, you can export a copy of the content from your Google Account for backup or use on a service outside of Google.
d. Request the removal of content from certain Google services based on applicable laws.
To delete your data, you can:
Delete content from certain Google services.
Search for and then delete specific items from your account via the My Activity page.
Delete certain Google products, including data associated with them.
Delete entire Google Account.
Finally, there’s the Inactive Account Manager, which lets you give someone else access to parts of your Google Account in case you can no longer use it.
Browser settings: For example, you can configure your browser to indicate when Google places a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains.
Please note that Google’s reliance services rely on cookies, for example, to remember your language settings.
Device settings: Your device may have controls that determine what data Google may collect. For example, you can change location settings on an Android device.
Cookies:
To maintain the website and ensure that its functionality is at the expected level, XY Agency uses a technology known as “cookies”.
Cookies are small files that we send to your computer and can be accessed later. They can be temporary or permanent. Thanks to cookies, you can easily search our pages and display results that are relevant to you. Cookies show us what interests you and other visitors to our website, which helps us improve it.
Other websites
These rules apply only to the use and utilization of data collected by XY Agency from website visitors, newsletter subscribers and customers (respondents). Other websites that can be accessed through the website www.xyagency.hr have their own statements of confidentiality and data collection and ways of using and publishing them.
XY Agency is not responsible for the ways and conditions of work of third parties.
XY Agency collects and processes personal information through user interactions on social networks such as Facebook and Google (YouTube channel). XY Agency or responsible persons appointed by XY Agency have access to messages and / or posts on the mentioned social networks, however personal data collected through them, especially those contained in the messages, XY Agency does not store or further process except for the purposes stated. in these Rules.
XY Agency uses a business profile using Facebook and Instagram services, and you can view their Privacy Policy and Privacy Statements as well as the way they use your personal information at:
FACEBOOK ONLINE https://www.facebook.com/policy.php
INSTAGRAM ONLINE
https://help.instagram.com/519522125107875
In case you have questions regarding the collection and processing of data by Facebook, YouTube and / or Instagram or you want to exercise any of your rights guaranteed by the General Data Protection Regulation, contact:
FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
Contact of the Data Protection Officer:
https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Facebook, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
FOR YOUTUBE:
Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland
Contact of the Data Protection Officer:
https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body for YouTube, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
FOR INSTAGRAM:
FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
Contact of the Data Protection Officer:
https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory authority for Instagram, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.
Entry into force and change of privacy policy
These Rules shall enter into force upon publication on the Website.
XY Agency reserves the right to amend the Privacy Policy and it will be published on the website.