Privacy Policy

Information about personal data processing

VTM d.o.o., in carrying out its activities, collects and processes the personal data of website users, hereinafter referred to as Service Users, while respecting all relevant laws and regulations.

To give you the best experience while using our website, we use technologies like cookies that store and/or access information from your device. By accepting these technologies, or giving consent to use them, you allow data processing like your browser behavior or unique IDs on this site. Refusing or withdrawing consent may negatively affect certain features or options of the website while using it.

Personal Data Processing Manager

The service provider is the data controller in accordance with the law and regulations on personal data protection.

The service provider, as the data controller, decides the purpose and means of processing personal data and is responsible for keeping and using personal data in paper and/or electronic form.

The service provider, in its business, can also be a processor of personal data in cases when it processes personal data according to the written instructions of the data controller.

Data Protection Officer

The service provider has appointed a data protection officer in accordance with legal and regulatory requirements, whom you can contact regarding any questions about personal data processing or exercising your data protection rights.

Personal data we collect

The personal data collected depends on the type of service provided, the users and clients, the user’s intention to use the services, the type of contract concluded with clients, as well as the user’s intention to exercise their rights based on legal and regulatory provisions on personal data protection.

Your data isn’t used for other purposes, nor is it shared with third parties, unless the law requires otherwise, and it will be deleted as soon as it’s no longer needed. While no online service is 100% secure, we make every effort to protect your data from unauthorized access, use, alteration, or destruction and take reasonable measures to do so.

We use appropriate business systems and procedures to protect the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using personal data on our servers.

In case of potential collaboration with external partners on certain projects, the Service Provider may disclose information about you that is essential for the external partner to carry out the process. External partners must respect the website’s Data Privacy Rules and the specific working parameters agreed upon in the collaboration contract.

The personal data that is primarily collected during the service provision process, and without which the service cannot be performed, includes at least:

• basic personal information (first and/or last name)
• basic contact information (email address)
• data related to using the website, for example when using the contact form
• data necessary for concluding a contract, offer, or invoice
• other personal data necessary to exercise the client’s rights based on legal provisions on consumer protection.

Collection for the purpose of a sales transaction

If relevant laws require the Service Provider to do so, for certain reasons they will also ask the Service User for their explicit consent.

The reasons why personal data is processed for the conclusion and fulfillment of contractual obligations are:

• providing the service
• the Service Provider’s sales and marketing activities
• managing the contractual relationship, invoices, offers, and appointment schedules
• handling and receiving complaints, grievances, and claims
• the debt collection process or enforced debt recovery.

The reasons your personal data is processed based on legitimate business interests are:

• informing about changes related to collaboration conditions
• preventing and detecting fraud.

Collecting and using personal data

The service provider takes technical and organizational measures to ensure that the collected personal data is processed only in a way that matches the stated purpose.

If necessary for carrying out our business activities, access to personal data will be granted to third parties, such as government bodies and public authorities that have the right to access personal data to enforce legal obligations; lawyers, service providers, printing companies, financial institutions, and other business partners.

Everyone, except state bodies and public authorities, processes personal data exclusively according to the instructions of the Service Provider.

Processing personal data

User personal data will be processed within the European Economic Area (EEA) by processors listed in the chapter Access to Personal Data, who are responsible for and obliged to protect personal data and keep it confidential, as defined by the contractual relationship and in accordance with all technical and organizational measures and legal regulations governing data protection.

Your personal data collected by the Service Provider for the purposes mentioned in the ‘Collection and Use of Personal Data’ section will not be accessible to anyone who isn’t authorized by the Service Provider.

Realization of rights

When legally required, the Service User has the right to information about the processing of their personal data; to withdraw their consent at any time if we process personal data based on given consent; to correct or update personal data to always keep it accurate; to delete personal data when it is no longer needed for the purposes mentioned above; and to file a complaint with the Service Provider or the competent state authority.

The service provider ensures communication channels for everyone interested so they can exercise their rights related to personal data protection by submitting a request:

• in person
• via email at info@vtm.hr

The right to file a complaint with the supervisory authority

In addition to filing a complaint about the processing of personal data with the Service Provider, a complaint about the processing of personal data can also be submitted to the Personal Data Protection Agency, Martićeva 14, Zagreb, 00385 (0)1 4609 999, azop@azop.hr , www.azop.hr