PRIVACY POLICY
The purpose of this Privacy Policy is to familiarize you and provide you with all relevant information about which personal data and how we collect it, how we use it and for what purposes we process it, how we store it and with whom we may share it, as well as your rights in connection with personal data.
By using the website of REVITA PLUS d.o.o. (hereinafter: REVITA PLUS), it is considered that users are familiar with this Privacy Policy at all times and that they fully understand and accept it.
I. INFORMATION ON THE PROCESSOR
REVITA PLUS d.o.o., Zagreb, Prilaz baruna Filipovića 23A, e-mail: info@revitaeu.com.
Any questions you may have regarding our Privacy Policy, the confidentiality of your personal data, the method of processing or your rights in relation to personal data will be answered by a person authorized by the Data Controller: Borna Stefanović, borna.stefanovic@revitaeu.com.
When processing your personal data, the controller undertakes all measures to protect personal data from personal data breaches, including all legitimate, technical, personnel and organizational personal data protection measures, to protect the data from any unauthorized processing, whether external (by other service users , unauthorized third parties), or internal, implying that they will fully comply with the requirements and principles of the General Data Protection Regulation.
II. TYPES OF DATA WE COLLECT
REVITA PLUS, in performing the activities for which it was founded, collects, processes and uses personal and other data about the users of the website obtained during its use, to the extent that you decide to share this data.
● Personal data
Your personal data is collected only if you voluntarily share it with us, and we collect it through purchases in the online store, subscription to our Newsletter and registration when visiting our website. This data includes: name and surname, residential address (street, house number, postal code, city and country), date of birth, e-mail address, and phone number.
At the time of registration on our website, the following data is also collected: Your IP address (anonymized so that your identity cannot be determined), as well as the date and time of registration. As part of the process of ordering products from our website, the following data are also processed: billing and delivery address, payment method and telephone number.
If you decide to buy from us online as a guest customer (without registering on our website), we need the following information for such an order: name and surname, address, date of birth, phone number, payment information. Your e-mail address is used for the purpose of communication with you.
When paying with a debit or credit card, we collect and process your personal data and forward them to the institution authorized to issue cards for the purpose of processing payments and fulfilling legal obligations. This is the following information: name and surname of the credit or debit card holder, card number, terminal number, card expiration date (month and year), card country of origin, customer’s date of birth, order number, customer’s e-mail address, customer number, address (street, house number, postal code, city and country) of the buyer, transaction ID and reference number, as well as description of purchased goods, amount and currency. Payment data is transmitted primarily for the purpose of processing payments and for purposes prescribed by law such as money laundering prevention and criminal prosecution.
When paying by cash on delivery, the following personal data are processed: first and last name, address (street, house number, postal code, city and country) of the buyer, e-mail address of the buyer, phone number and delivery address. The forwarding of payment data to the partner – the package distribution service provider, is carried out specifically for the purpose of payment processing and for the purposes prescribed by law, such as the prevention of money laundering and criminal prosecution.
Statement on the protection and collection of personal data and their use
REVITA PLUS d.o.o. undertakes to protect customers’ personal data, in such a way that it collects only necessary, basic data about customers/users that are necessary for the fulfillment of our obligations; informs customers about the use of collected data, regularly gives customers the opportunity to choose about the use of their data, including the ability to decide whether or not they want their name removed from lists used for marketing campaigns. All user data is strictly stored and is available only to employees who need this data to perform their work. All employees of REVITA PLUS d.o.o. and business partners are responsible for respecting the principles of privacy protection.
Statement on the protection of the transfer of personal data
Protection of personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679-Regulation and Implementation of the General Data Protection Regulation
Monri WSPay, as an executor of credit card authorization and billing, handles personal data in the capacity of processor and personal data in accordance with the General Data Protection Regulation of the European Parliament and the Council No. 2016/679 and according to the strict rules of the PCI DSS L1 regulation on data protection and data transfer.
Monri WSPay uses an SSL certificate of 256-bit encryption and TLS 1.2 cryptographic protocol as the highest level of protection for data entry and transfer.
Personal data used for the purpose of authorization and billing, i.e. in the performance of obligations from the Agreement or based on the Agreement, are considered confidential data.
The following personal data of the customer are required for the execution of the Agreement (authorization and payment): first and last name, e-mail, telephone, address, city, postal code, country, type of card, card number, duration of the card, CVV code of the card.
Monri WSPay does not process or use this personal data except for the purposes of executing the authorization contract and billing.
Monri WSPay guarantees the fulfillment of all conditions specified by the current regulations on the protection of personal data for the executors of personal data processing, and especially the undertaking of all necessary technical, organizational and security measures, and this is especially confirmed by the PCI DSS L1 certificate.
● Technical data
In order to improve the offer of our website, we collect and store some available data without processing personal data. This is anonymous data that is analysed for internal statistical purposes and for the technical management of websites. This data is stored separately from personal data and is in no way connected to your personal data, which means that it is not possible to identify an individual based on this data.
This data includes: the page from which the file was requested and the name of the file, the date and time of the request, the time spent on the page, the amount of data transferred, the IP address of the computer (anonymized in such a way that your identity cannot be determined), a description of the type and version of the Internet browser.
III. LEGAL BASIS AND PURPOSE OF PERSONAL DATA COLLECTION
We process your personal data that you have voluntarily given us in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council dated April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95 /46/EC (General Data Protection Regulation).
We process personal data based on your consent for the purpose of filling out the purchase order for ordering and purchasing REVITA PLUS products on our website, signing up for our Newsletter or registering when visiting our website. We collect and process personal data that you send us directly via e-mail for the purpose of responding to your inquiry.
REVITA PLUS will not use any data obtained for other purposes, except for the one for which it was collected and which is stated in this Privacy Policy.
IV. WHO HAS ACCESS TO YOUR DATA
Authorized REVITE PLUS employees may have access to your data if it is necessary to fulfil the purpose for which the data was collected, in accordance with point III. of this Privacy Policy.
REVITA PLUS will not transfer collected data to a third party without the user’s consent, except in the case of payment for REVITA PLUS products by debit or credit card as described in point II. this Privacy Policy and when such an obligation is regulated by law or at the request of a state authority based on law.
We may share personal information with authorized third-party service providers who perform certain activities on our behalf, such as providing search results and links, site administration, troubleshooting, and customer service. With such persons, we enter into appropriate contracts or addenda to the contract in accordance with regulations on personal data protection.
V. PERSONAL DATA SECURITY
We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables effective application of data protection principles, reduction of the amount of data, scope of their processing, storage period and their availability. Data stored on our servers and in our databases are protected and can only be accessed by authorized persons.
We take all appropriate technical and organizational security measures to prevent accidental or illegal destruction, loss, alteration, unauthorized use, disclosure, insight or access to data.
VI. PERSONAL DATA STORAGE PERIOD
The period of personal data storage depends on the purpose for which it was collected. We process your personal data until the purpose of personal data processing is fulfilled. After the end of the purpose for which your personal data was collected, we no longer use them, and we store them in accordance with the regulations for the storage of individual documentation, that is, until you cancel your subscription or request the deletion of your subscription to newsletters.
If the regulation does not specify otherwise for individual personal data, personal data are deleted, destroyed or anonymized after the purpose of processing has been fulfilled.
VII. USE OF COOKIES
Cookies are small text files that are stored on your computer or other electronic device when you visit our website. Cookies are created when the browser on the user’s device loads the visited web destination, which then sends data to the browser and creates a cookie. The browser loads cookies from the computer’s local disk when the user returns to it, which allows the site to adjust the site viewing experience to your last settings. We use cookies to provide you with the best user experience.
Cookies are used for the purpose of improving the user experience, monitoring and analysing your visits to the website, based on which the content of the website is adapted to the wishes of the user and optimization of the use of the website. They also serve to prepare anonymous statistical data that help us understand the user’s use of the website and thus help to improve the content of the website.
The storage of cookies is under the full control of the user’s browser, which can limit or disable the storage of cookies as desired. All cookies, with the exception of essential cookies, are loaded into your web browser only based on your express consent. Therefore, you can choose them or reject them.
Our website uses technical cookies (mandatory or essential cookies, they cannot be turned off) that are necessary for the website to function.
The cookies currently used are:
Mandatory cookies
Marketing cookies
Functional cookies
VIII. YOUR RIGHTS REGARDING DATA PROCESSING
You have the right to information about the processing of your personal data, and you can request confirmation of whether data relating to you is being processed (right to access personal information). On the basis of such a request, you are given access to your personal data and you are given the following information regarding the processing of personal data: the purpose of processing, the type/category of personal data being processed, the recipients or categories of recipients to whom your personal data has been disclosed and the expected period retention of personal data or, if this is not possible, the criteria used to determine that period.
You have the right to withdraw your consent at any time, the right to request the correction or addition of your personal data so that they are up-to-date and complete, the right to delete your personal data when they are no longer needed for the aforementioned purposes, and the right to limit the processing of personal data.
You also have the right to submit a complaint regarding the processing of your personal data to the competent supervisory body: Personal Data Protection Agency, tel. 01/4609-000, e-mail: azop@azop.hr.
VIII. YOUR RIGHTS REGARDING DATA PROCESSING
We regularly update the privacy policy so that it is accurate and up-to-date, and we reserve the right to change its content if we deem it necessary. You will be informed about all amendments in a timely manner through our website in accordance with the principle of transparency.