Privacy Policy

We undertake to provide protection to the personal data of customers, by collecting only the necessary, basic information about customers/users that are necessary for the fulfilment of our obligations; we inform customers about how to use the collected data and regularly give customers the choice to use their data including the ability to decide whether or not to have their name removed from the lists used for marketing campaigns.

All user data is strictly kept and is only available to employees who need this information to carry out the work. All our employees and business partners are responsible for respecting privacy protection principles.

If you communicate with us, for example by e-mail or our customer service, here you will find information about data processing in communication.

If you open a user account on our website called “My Account” here you will find information about data processing for opening an online account.

Information about data protection related to our social media activities can be found here.

Please also pay attention to the privacy policies of the pages that you can visit through the links on the vallenssia-art.com

A. Data protection officer

IDZAJN Vl. Snjezana Blagsic, (below: “Vallenssia-art”) as the Data Protection Officer within the meaning of the General Data Protection Regulation (hereinafter: the “General Regulation”) we take the protection of your personal data very seriously and comply with the legal regulations on data protection.

B. Vallenssia-art.com and online services

Below we would like to inform you about what information about you we collect when you visit us on our website on Vallenssia-art.com (including integrated sites) or use our online services and for what purposes we use your data.

I. GENERAL ABOUT VISITING WEBSITES

As a rule, we collect and use personal data of our users if necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users is carried out on the basis of legal rights such as the contract concluded with the user, after the prior consent of the user or on the basis of our legitimate interest.

II. PROVIDING WEBSITES AND CREATING RECORD FILES

Every time we visit our websites, our system automatically collects data and information from the computer system of the computer from which the site is visited.

The following data are collected:

  • request (name of the requested file) (example: www.primjer.hr/index.html)
  • browser type/version
  • browser language (e.g. Croatian)
  • operating system used
  • internal resolution of the browser window
  • screen resolution
  • JavaScript activation
  • Java on/off
  • cookies on/off
  • color depth
  • reference harmonized content locator or referrer URL (address of the previously visited website)
  • IP address (anonymized)
  • access time
  • clicks
  • eventual form contents (for free text entry fields, e.g., password – only “filled in” or “unfilled” information is transmitted).
  • eventual location of access (e.g., when using the contact form, to the category, to the search, the master page, etc.).

The specified data are stored in the records of our system. Analyses of these data sets in record files in an anonymized form serve to detect errors faster and eliminate them as soon as possible and to show you the result of the search on ours. In this way, we can also manage the capacities of our servers and continue to improve our service. We use IP addresses only in exceptional cases for the purpose of analysing abuse. These purposes contain our legitimate interest in the processing of data in accordance with Art. 6th item 1. f) of the General Regulation, which is also the legal basis for processing. Data analysis for marketing purposes is not carried out in this context.

Data stored in record files is kept permanently or temporarily.

III. USE OF COOKIES AND OTHER TECHNOLOGIES

Our websites use cookies (cookies) and other technologies in several places. So-called cookies are small text files that are stored on your computer and that your browser can store. The data in these files will not be merged with other data sources, except when it serves to fulfil the contract concluded with you, when you have expressly approved or if there is a legal basis or other justified reason. If the user opens a website, then the cookie can be stored in the browser on the user’s device. This cookie contains a characteristic character order that allows unambiguous identification of the browser when reopening the website.

Most of the cookies we use are so-called “session cookies” (session cookies) that are deleted when you close your browser and interrupt a session. In addition, there are several long-lived cookies with which we recognize you again as a visitor. Cookies will not cause any damage to your computer and do not contain viruses.

In doing so, the following data or information are stored and processed in cookies:

  • login functionality (login), service life: one session
  • eventual reducing lifespan load: one session
  • shopping cart functionality, service life: 30 days from the last visit

In addition, we use monitoring measures to ensure that our websites comply with and continuous optimization of user needs. We also apply monitoring measures for the purpose of collecting statistics on the use of our websites and analysing the optimisation of our offer for you. If you have registered for “My Account”, we use the information we have collected about you to more accurately and better adapt your “My Account” to your needs and personalize it, and provide you with information that may interest you. More information about the “My Account” function can be found here.

You can manage your consent on the cookie settings page.

1. Technically necessary technologies

These technologies provide basic functions and are essential for the proper operation of our website.

1.1 reCAPTCHA

In certain cases, for example, when filling out forms, we use Google Ireland Limited’s reCAPTCHA service on our website to distinguish personal inputs from automated, machining.

The legal basis for the processing of data related to the use of said service is Art. 6th item 1. f) of the General Regulation, based on overcoming our legitimate interest in ensuring the highest level of security of our IT systems or for the purpose of preventing interference on our site due to attacks.

1.2 Statistics

Statistical technologies store anonymized information that helps us understand how our websites are used and the “My Account” function to continually optimize our offer. We use these technologies only if you have given us your consent. The legal basis is your consent in accordance with Art. 6th item 1. a) of the General Regulations. Your consent is voluntary and can be revoked at any time with an impact on the future through Consent Management.

1.3 Enhanced features

If you have given us your consent, you can use the enhanced features below. The legal basis for this mentioned is your consent for a particular feature in accordance with Art. 6th item 1. a) of the General Regulations. Your consent is voluntary, and you can revoke it at any time through The Consent Management with an effect on the future.

1.4 Google Fonts

By visiting web site Vallenssia-art.com you access the content of the website that is might be written in remote Google fonts. The fonts used are linked to the Google Fonts page and used for writing content on the web page. If you visit our webpage your IP address data are transmitted by the Google Fonts technology. Visiting our web page Vallenssia-art.com you agree to the usage of the IP data by Google Fonts: https://fonts.google.com/

1.5 Marketing

The technologies listed below help us understand what content is relevant to you so that in the future we can contact you on our websites and on third parties in accordance with your interests.

In doing so, the technologies below apply if you have given your consent under Art. 6th item 1. a) of the General Regulations. Your consent is voluntary, and you can revoke it at any time with an effect on the future through Consent Management.

a. Facebook Pixel

Facebook Pixel is especially used for the purpose of displaying interest-oriented ads (“Ads”) to users of our websites during their visits to the Facebook social network (and the associated social network Instagram) on Facebook, Instagram and on the advertising network of Facebook (Audience Network), or on other internet stations, as well as for the purpose of measuring and optimizing the impact of display ads in terms of conversion. We also use Facebook’s Custom Audience function, which is based on website visits to share target groups with interested partners. In doing so, only the name and size of the target group are shared to ensure that interest-aligned ads are displayed. No personal data and/or statistics are exchanged with partners.

For this purpose, a Facebook tag has been implemented on the Vallenssia-art.com website. Through the aforementioned tag, a direct connection to the Facebook servers is established during the visit of a particular website, and the Facebook server is transmitted that you have visited this website and how you used it. Facebook associates this information with a personal Facebook account. When you visit Facebook and Instagram social networks or the page of a partner of Facebook’s advertising network Audience Network, you may see personalized ads that suit your interests. Depending on the specific purpose of processing between us and Facebook, there are different relationships with regard to the regulations governing data protection:

  • Facebook Ireland is our executor for processing personal data related to events with measurement and analysis services.
  • Facebook Ireland and we are joint Data Protection Officers for the processing of personal data on events used to create target groups to contact, provide commercial or transaction notices, personalize functions and content as well as to improve and secure Facebook products. In the context of the joint processing of your personal data, Facebook is primarily responsible for providing you with information about data processing and allowing you to exercise the rights that belong to you in accordance with the General Regulation. Here, in addition, you will find more information about the processing of personal data by Facebook, among other things, information about the legal basis of data processing and how you will ask Facebook to exercise your rights.
  • In the remaining part, Facebook Ireland and we are separately responsible for the processing of personal data.
b. Advertising through Google and tracking conversions

Tracking conversions through Google is an analytics service for Google Ireland Limited.

If you visit our website through ads on Google, Google places a Conversion Cookie on your device. It does not serve personal identification. If the cookie has not yet expired with us when visiting certain sites, we and Google can see if someone clicked on the ad and thus was redirected to our websites. Each Google Ads customer (interest-friendly advertising) receives a different cookie. Therefore, cookies cannot be tracked through Google ads customers’ websites.

The information collected by the conversion cookie is used to create conversion statistics for Google-Ads customers who have opted to track conversions. We, as a Google Ads customers, learn the total number of users who clicked on an ad and were redirected to a page that is marked with a conversion tracking tag. However, we do not receive any information through which personal identification of the user would be possible.

c. Advertising through Google and remarketing

We use technology to remarket Google Ireland Limited so that we can contact users who have already visited our websites on the pages of Google’s partner’s network through interest-aligned advertising.

With cookies, we can analyse your interests during visits to our websites and then use them to advertise relevant products. If they suit your interests, our ads will be shown to you not only when you visit our websites, but also on some Google websites or Google partner’s network websites. In this case, we transmit the appropriate information to Google. In doing so, advertisements/means of advertising may contain e.g., products that you have previously viewed on our websites.

If you have consented that Google associates your log-in and search history with your account and that information from your Google Account may be used to personalize ads, Google will use this information to remarket across your devices. In this case, if you are logged in to Google during a visit to our websites, Google will use your data along with user data on Google to create and define lists of target groups for remarketing on all devices you use. Your personal data at Google’s disposal will also be linked to user data on Google for the purpose of creating target groups.

d. Cookies and other technologies, Revocation and complaint

Detailed information about cookies and other technologies that we use, also about selection and deselection options, can be found in our Consent Management.

You can manage your consent in the cookie settings.

Additional options for deactivation can be found below:

  • In the appropriate settings of your browser, you can define the cookies and tracking you want yourself.
  • For example, you can access a mechanism here that will allow you to select in the list of companies that are allowed to place cookies and other technologies in your browser for the purpose of personalization and analysis.
  • Information and options regarding deactivating personalized advertising with Google can be found here. In doing so, you must be signed in to Google.
  • Users here can also completely or partially deactivate Google ads for each browser and device.
  • You can also deactivate Facebook’s retargeting function. Information about deactivation options at Facebook can be found here under the  “Custom Audiences” retargeting function. In doing so, you must be logged in to Facebook.

IV. “My Account” / Customer-Guest

1. Description and scope of data processing

a. “My account”

You can register in our customer account (below: “My account”). In the “My Account”, we will inform you in detail, not only about everything related to shopping in Vallenssia-art.com online shop, but we will provide you with a personalized service and, for example, you will receive recommendations for products according to your needs and newsletters (if you give or have given your consent in this regard), personalized content, for example, such as coupons, easier ordering at Vallenssia-art online shop, etc.

And in particular, you can

  • order easily and quickly using an email address and password,
  • manage your personal data such as address, email address and password,
  • generally manage your account,
  • faster and easier to go through all the steps of the ordering process because we provide you with the possibility to choose the address and means of payment from your last order,
  • get an insight into all orders as well as the status of orders,
  • receive personalized product recommendations, personalized coupons as well as personalised content of advisory character,
  • manage newsletters that we have adapted to your needs,
  • participate in individually selected prize competitions that you have chosen yourself,
  • receive information about the actions of our products,
  • contact us,
  • use Vallenssia-art services associated with the account, e.g. function “My products”, “My wish list” function (if any), etc.

You can register to open your “My Account” on our website by entering your personal data. During the registration and purchase process, the above information is collected:

  • Name and surname
  • E-mail Address
  • Business name
  • Country/Region
  • Delivery address, account address
  • Town
  • Area
  • Zip code
  • Phone number
  • User name
  • Password
  • Order Details
  • Payment Data

At the time of registration, the following information is also stored:

  • Your IP address (anonymized)
  • Date and time of registration as well as each individual purchase

Information is stored about the type of payment and delivery address you entered on your last order and appears as suggestions for your next order. The legal basis in this regard is Art. 6th item 1.f) of the General Regulations in order to enable you to have a simpler ordering process on the next orders by downloading stored address information and the desired payment method.

b. Customer-Guest

In addition to the possibility to order products in our Vallenssia-art.com online shop through the “My Account” function, you also have the possibility to shop with us online as a customer-guest. For the order we need your following correct information: name, surname, delivery and payment address, telephone number, payment information. Your e-mail address is used for the purpose of communicating with you.

When you make a purchase, the following information is collected:

  • Name and surname
  • E-mail Address
  • Business name
  • Country/Region
  • Delivery address, account address
  • Town
  • Area
  • Zip code
  • Phone number
  • User name
  • Password
  • Order Details
  • Payment Data

At the time of purchase, the following information is also stored:

  • Your IP address (anonymized)
  • Date and Time of Purchase

2. Personal pickup

In the future, there might be a possibility to choose a personal pickup option where we will also use the data about your name, your email address and the products you have ordered to prepare your order. In case of delivery, information about your address, your e-mail address, phone number will  also be used by our delivery service provider.

3. Payment methods

a. Automated decision-making

For your purchases in Vallenssia-art online shop we offer you the following payment options:

a) direct payment to bank account (International and Croatia)

b) payment on delivery (MBE Rijeka) — (Croatia only)

c) PayPal Payments (International and Croatia)

We reserve the right to omit some payment options and refer to others.

As we do not know our customers personally, we are referred to the automated verification process to reduce non-payment. For payment methods not listed below, no further data processing occurs.

Deletion is carried out in accordance with obligations, especially those under tax and commercial regulations, as a rule, after 11 years.

c. Processing of personal data when choosing a payment option on the delivery

When paying on delivery, personal data are processed such as the name, address, contact e-mail, telephone and delivery address if applicable.

The forwarding of payment data to our contract to the partner of the package distribution service provider is carried out specifically for the processing of payments and for the purposes prescribed by law, such as anti-money laundering and prosecution. Legal basis for data processing: Art. 6th item 1 b) GDPR to verify and process your payment to us as a trader.

We are currently cooperating in connection with the package distribution with: MBE Rijeka, Antuna Barca 7, 51000 Rijeka, e-mail: rijeka@mbe.hr.

After processing the payment, your data will be stored in accordance with the legal retention periods and then deleted, Art. 6th item 1.c) of the GDPR. Any further processing of data due to legal regulations remains unchanged (e.g. money laundering regulations).

d. Processing of personal data when choosing the option of payment to a bank account

When you make a payment to our bank account, your data – name and address, except us, processes also the bank where we have an open account and the payment service providers you choose. Please inform your chosen service provider about the details of the data processing it is carrying out.

We process personal data specifically for the purpose of processing payments and for the purposes prescribed by law, such as anti-money laundering and prosecution. Legal basis for data processing: Art. 6th Item 1. b) GDPR to verify and process your payment to us as a trader.

After payment processing, your data will be stored in accordance with the legal retention periods and then deleted, Art. 6th item 1. c) of the GDPR. Any further processing of data due to legal regulations remains unchanged (e.g. money laundering regulations).

4. Legal basis for processing / deleting data

In order to make the service “My Account” available to you and to process your order (as a registered user or customer-guest), we process your data on the basis of a contract. The legal basis for data processing is Art. 6th item 1. b) of the General Regulations.

If you delete your account (“My Account”), your personal information will be deleted immediately. You can do this at any time. It is also possible to change the information in your account at any time (“My Account”). If you made your purchase through your account (“My Account”) or as a guest customer, information about that purchase (such as name, address, payment information, product information, etc. ) will be kept for 11 years on the basis of tax and commercial obligations. The retention period starts on January 1st in the year following the year of purchase and expires 11 years later. The data shall be deleted accordingly after the expiry of the specified deadline. The transmission of payment data takes place primarily for the purpose of processing payments and for the purposes prescribed by law, such as anti-money laundering and prosecution. Legal basis for the processing of data: Article 6(1.b) of the General Regulation for the verification and processing of your payment to us. After processing the payment procedure, your data will be stored in accordance with the legal retention periods and then deleted, Article 6 1. b), (see above), c) of the General Regulation.

5. Data processing under the Explosive Substances Regulation

As of February 1st 2021, the new Explosive Substances Regulation (EU) 2019/1148 applies. This Regulation is used to prevent illegal homemade explosives. In the online shop, there is an opportunity to sell products containing partially regulated explosives precursors (substances available in certain quantities and/or concentrations that can be used to make explosives) within the meaning of this Regulation, such as painting and drawing agents, various varnishes that serve as a finishing layer on canvas or other artistic material and the like. From this, several obligations arise for the Vallenssia-art online shop, in particular reporting suspicious purchases, thefts and losses to the responsible state criminal police office with the participation of our legal adviser.

In case of suspicious purchase, we process your name, your address or delivery address, and the type and quantity of the ordered items based on the information you provided when ordering as a customer-guest or registered customer in your user account, in order to fulfil the obligations of reporting in accordance with the Explosive Substances Regulation. The legal basis is Art. 6th item 1. c) of the General Regulation in relation to Art. 9th item. 4 of the Explosive Substances Regulation.

We store all inquiries and notifications electronically.

6. Transfer to the parcel delivery service provider of your e-mail address, telephone number, delivery address and the amount payable in case of payment on delivery

a. Scope and description of data processing

If you order products with delivery to your home address in our online shop, you will receive a confirmation of the order and delivery at your e-mail address or telephone number, as well as a text notification from MBE Rijeka, the delivery service provider, at the time your package is about to be delivered.

b. Legal basis and deletion

The legal basis for transferring to the parcel delivery service provider of the e-mail address, telephone number, delivery address and the amount paid when picking up the package is Art. 6th item 1.b) of the General Regulation and is based on your purchase, and also our legitimate interest in offering our customers a notification service in order to adapt delivery to the needs of customers as much as possible.

7. Newsletters by e-mail

a. Ad newsletters

We send newsletters with ads by e-mail only in case when you have previously explicitly confirmed to us within the framework of your registration or your account that we need to activate the service of sending you one or more newsletters. The legal basis for sending newsletters is Art. 6th item 1. a) of the General Regulations.

If you have given us your consent to send one or more newsletters, then we may occasionally send you information about new products, deals, discounts, prize contests and similar information that aligns with your needs. The legal basis for this is Art. 6th item 1. b) of the General Regulation.

If later, you would no longer like to receive newsletters, you can withdraw your consent at any time with an impact on the future, without incurring costs other than the cost of sending a message according to basic tariffs. To unsubscribe from receiving the newsletter, click on the unsubscribe link that you can find in each newsletter, or contact our customer service using the enquiry form you can find here. Immediately, after you request the termination of the delivery of the newsletter, we will no longer send them to you.

b. Notification newsletters

We are obliged to inform you about product recalls, for example. In this case, you will also receive emails of informative character even though you have not given your consent. Processing of your contact data with which it has a legal basis in Art. 6th item 1.b) of the General Regulations.

c. Subscription newsletters

On our website, we provide an offer for the new subscribers to earn various discounts (if any) on future purchases. When a new subscriber enters his email address, he/she will receive the coupon code through the email he/she stated in the subscription form. With this subscription, we collect only the subscriber’s email address and IP address. Processing of your contact data with which it has a legal basis in Art. 6th item 1. b) of the General Regulations.

8. Competitions

a. Scope and description of data processing

We offer you to participate in prize contests that we organize through your account (“My account”) or without your account (“My Account”). The rewards are sent by Vallenssia-art.com. If this will not be possible due to the nature of the prize in individual cases, e.g. because direct contact must be made with the winner of our prize draw or the package must not jeopardize additional transport routes, we will forward your data in exceptional cases to the parcel delivery service provider with whom we cooperate, which we also indicate in the terms of the prize draw.

If you participate in the prize draw, Vallenssia-art will process your following data for the purpose of conducting and prize competition:

  • First and last name
  • E-mail Address
  • Social media profile (Facebook, Instagram, and others)
  • Address (state, area/municipality/county, street, house number/staircase/gate, zip code, city)

The prize and competition are creative in nature and the selection of the winners is made by choosing the best solution, the most creative solution, the most suitable solution or solution that serves a purpose according to the opinion of the owner of the online shop, which does not include games of chance.

b. Legal basis and deletion

We use the information you have provided to participate in the prize competition exclusively for the purpose of running the prize competition. The legal basis for the processing of data related to the prize competition is Art. 6th item 1 b) of the General Regulations. Your data are permanently kept when no shorter period is specified or a shorter retention period is necessary on the basis of legal regulations. The legal basis for the transfer of data to the relevant business partner is Art. 6th item 1.b) of the General Regulations.

9. Prize and competition “Try this product”

a. Scope and description of data processing

Vallenssia-art, together with its suppliers, offers a prize competition for product testing on this website. While conducting the “Try this product” contest, you can test the products for free.

If you participate in the prize competition, Vallenssia-art will process the following data for the purpose of conducting and conducting it:

  • First and last name
  • E-mail Address
  • Address (state, area/county/municipality, street, house number/staircase/gate, zip code, city)
  • Social media profile (Facebook, Instagram and others)

b. Legal basis and deletion

The information you have provided to us about yourself is forwarded exclusively to our parcel delivery and packaging service providers. Your data are permanently kept when no shorter period is specified or a shorter retention period is necessary on the basis of legal attributions.

The legal basis for processing operations during the conduct and running of the prize competition “Try this product” is according to Art. 6th item 1. b) of the General Regulation contract that you have entered into with Vallenssia-art online shop. Participation is not possible if you have not made the necessary information available to us.

10. Image submission competition “Be inspired”

a. Scope and description of data processing

Vallenssia-art, offers a prize competition for submission of the photographs on this website and social media profiles. “Be inspired” is the online social media and website call for subscribers and non-subscribers, users registered with “My Account” or not registered with “My Account” to send their photographs that will be used as the inspiration board for creative and artistic projects. Users send their photographs, and then Vallenssia art chooses the best photograph that will be used for creating the product “Vallenssia Colour Palette”. “Vallenssia Colour Palette” is the mood board that includes photographs and extracted colours and their codes in RGB, HEX and CMYK. It is to be used as the inspiration for everyone who wishes to do some creative work or artwork in relevant colours. After Vallenssia-art chooses the most suitable photograph, it will be used as part of the “Vallenssia Colour Palette” and shared across social media. By submitting their photographs all users confirm that they own the copyright to the relevant image or they have obtained it online with the relevant license. All responsibilities related to the legal status of the photographs are to be borne by the users. Vallenssia-art shall not be responsible in any circumstances for any legal aspects of the photographs.

If you participate in the Call for “Be inspired” submission of photographs, Vallenssia-art will process the following data for the purpose of conducting it:

  • First and last name
  • E-mail Address
  • Address (state, area/county/municipality, street, house number/staircase/gate, zip code, city)
  • Social media profile (Facebook, Instagram and others)

b. Legal basis and deletion

The information you have provided to us about yourself is forwarded exclusively to our Vallenssia-art. Your data are permanently kept when no shorter period is specified or a shorter retention period is necessary on the basis of legal attributions.

The legal basis for processing operations during the conduct and running of the prize competition “Be Inspired” is according to Art. 6th item 1. b) of the General Regulation contract that you have entered into with Vallenssia-art online shop. Participation is not possible if you have not made the necessary information available to us.

V. Enquiry forms/ Communication with Vallenssia-art online shop

Regarding communication with us, please pay attention to the Information on Personal Data Protection in communication with the Vallenssia-art online shop that you will find here.

VI. Social media buttons , YouTube videos and QR codes

1. Description and scope of data processing

On our websites, social media buttons are integrated (e.g., Facebook, Instagram). These buttons take you directly to our social media pages. In addition, YouTube videos can be turned on in different places.

After clicking on the integrated graphics or video, you will be redirected to the website of the respective service provider, i.e., to the website of the respective service provider. Only then will the user data be transferred to the relevant service provider.

In addition, in various places on and off our websites, there may occasionally be a set QR codes. These QR codes represent links to different websites. After scanning a particular QR code, the corresponding website opens. Only then will the user data be transferred to the relevant service provider.

Information about the processing of your personal data during the use of websites available through the QR code can be found in the Privacy Policy of the relevant service provider or website operator.

2. Legal basis for data processing

Based on our legitimate interest, we process your data in accordance with Art. 6th item 1. f) of the General Regulations so that we can provide you with this functionality.

VII. Categories of recipients and transfer of data to third countries

Your personal data with us is securely transmitted through coding. In doing so, we use the TLS coding system. Through technical and organizational measures, we ensure our websites and other systems against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

VIII. Categories of recipients, transfer to third countries

As a rule, we do not transfer your data to third parties unless we are legally obliged (for example, in calls from law enforcement authorities) or if we need third parties to conduct business processes or provide us with services under a data processing contract. These include, for example, parcel delivery service providers, payment service providers, service providers, order handling service providers, hosting providers on internet, communication agencies, external call centres or also IT service providers. In all cases, we strictly comply with the legal regulations. In this context, it is also possible to transfer data to other countries in which the above contractual partners may have their registered office or process data. These are primarily European economic area (EEA) countries and in individual cases non-EEA countries whose data protection rules may be different or provide a lower level of protection against European Union regulations. The consequence of this may be, for example, that your data may be processed by government authorities for the purpose of control and supervision, perhaps without the possibility of legal protection. In the event that personal data is processed outside the European Union and there is no decision by the European Commission on adequate data protection, we implement appropriate safety measures, including the contracting of standard contractual data protection clauses in the EU.

The text of the Standard Contractual Data Protection Clauses in the EU can be found on the European Commission’s website available here.

C. Data subject rights and data protection officer

I. Data subject rights

1. In general

Our visitors have the right to information about the personal data relating to them, the right to data portability as well as – if applicable – the right to deletion, correction, restriction of processing and/or objection to the processing as well as the right to file a complaint with the Croatian supervisory authority:

Personal Data Protection Agency, Selska cesta 136, 10000 Zagreb, Telephone: 00385 (0)1 4609-000, e-mail: azop@azop.hr

2. In more detail about your rights

You have the right to:

  • pursuant to Art. 15. of the General Regulations request information about the personal data related to you, which we process. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been disclosed or will be disclosed, the planned storage period, the existence of the right to correction, erasure, restriction of processing or objection, the existence of the right to appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information on the details of profiling,
  • pursuant to Art. 16. of the General Regulations immediately request the correction of inaccurate or incomplete personal data relating to you, which are stored with us,
  • pursuant to Art. 17. of the General Regulations request the deletion of stored personal data relating to you with us, unless processing is necessary for the purpose of exercising the right to freedom of expression and information, for the purpose of fulfilling a legal obligation due to the public interest or for the exercise, enforcement or defence of legal claims,
  • pursuant to Art. 18. of the General Regulations request a restriction on the processing of personal data relating to you if you dispute the accuracy of the data if the processing is illegal, but you oppose their deletion, and we no longer need the data, but you need it to exercise, enforce or defend legal claims or you are in accordance with Art. 21. of the General Regulations object to the processing,
  • pursuant to Art. 20. of the General Regulations obtain personal data relating to you, which you have provided to us, in a structured, normal and machine-readable format, or request that they be transferred to another Data Protection Officer,
  • pursuant to Art. 7th item 3. of the General Regulations at any time the consent you have given. As a result, in the future, we must no longer carry out data processing based on this consent,
  • pursuant to Art. 77. of the General Regulations to lodge a complaint with the supervisory authority.

3. Specific information with the right to lodge a complaint in accordance with Art. 21 of the General Regulations

On the basis of your special situation, you have the right at any time to object to the processing of personal data relating to you, which is processed in accordance with Art. 6th item 1. f) of the General Regulation (data processing for the purpose of protecting the legitimate interest). This also applies to profiling based on the same legal basis (Art. item 4, 4. of the General Regulations).

If you object, we will no longer process your personal data unless we can prove that there are compelling and justified reasons for processing that go beyond your interests, rights and freedoms or that the processing serves to establish, exercise or defend legal claims. If your complaint were to concern the processing of your data for advertising purposes based on Art. 6th item 1. f) of the General Regulations, we will discontinue processing without delay without further verification. This also applies to profiling that occurs in such circumstances.

II. Data Protection Officer

All inquiries related to data protection or your personal data at Vallenssia-art can be referred to our Data Protection Officer

by e-mail to: privacy@vallenssia-art.com

or by mail at:

IDIZAJN Vl. Snježana Blagšić
Data Protection Officer
Blažićevo C 19
51000 Rijeka

For communication with us, you also have at your disposal a contact form.

Answers to frequently asked questions can be found below:

How do we collect your data?

We collect your data through our phones, websites, e-mails, forms, applications, devices, or in other ways when you contact us.

Your information may also be provided to us by a third party who has entrusted us with the service of carrying out a particular job. We are then obliged to process your data in accordance with the privacy policy of the persons who have provided the data to us for processing.

How long do we keep your data and how do we decide on the storage time?

We will keep your personal data for the entire duration of the contractual relationship or in accordance with the regulations set by the deadlines for keeping certain documentation or for the duration of (there is) our legitimate interest or until the data subject cancels the application or requests the deletion of the newsletter subscription or after the expiry of the period of inactivity.

In the event that your data are in our possession because they are processed in proceedings before the competent authorities, we will keep them until the decisions are final in the proceedings initiated, in which the information collected by the Data Protection Officer’s surveillance device was used as evidence or until the statute of limitations for the initiation of these procedures expires.

The Data Protection Officer will make a copy of the personal data, which he shall provide to the competent authorities as evidence in the proceedings for the purpose of carrying out the proceedings.

After the expiry of the deadline, we will destroy the collected data in the most appropriate way: by deleting it from the carrier or if this is not possible, by destroying the data carrier in the legally provided way by the code of authorized persons, or the data will be anonymized so that the subjects cannot be identified.

After the expiry of the deadline set for storing your data, they will be deleted or anonymized in an appropriate manner.

Last updated: March 2023