Cookies help us deliver our services. By using our services, you agree to our use of cookies.
English
Privacy policy
Protection of personal data
Benefit card aims to protect the personal data of customers, in such a way that it collects only the necessary, basic data about customers/users that are necessary for the fulfilment of our obligations. Furthermore, the company informs customers about the way the collected data is used, regularly gives customers the right to decide the extent of using their data, including the ability to decide whether they want their name removed from lists used for marketing campaigns. All user data are restricted and available only to the employees who need these data to perform their jobs. All company employees and business partners are responsible for respecting the principles of privacy protection.
Key4you takes technical and organizational security measures to protect your personal data from accidental or illegal destruction, loss, or alteration, as well as from unauthorized disclosure or access. The user data are available only to the employees who need these datato perform their work.
The customers can access their personal information on our website using the link they receive along with their purchased Benefit card. The customers are advised not to disclose the password to third parties. The customers must be aware that no data transmission over the Internet or any wireless network can be 100% secure. Although the company implements data protection measures, the company cannot guarantee the protection of any information transmitted to or from our website and is hence not responsible for any third party actions regarding such information.
Privacy policy on the web
Benefit card recognizes and values your right to data confidentiality and aims to preserve the security of the data it collects through the website.
Your personal data are collected and used only on the basis of the data you voluntarily provided, either by registration (personal data retrieved in the process of registration such as: first and last name, address, city, e-mail, phone number) or by browsing the website.
Collected personal data are stored in electronic form, and all appropriate technical and organizational measures are applied to prevent the violation of your data. The received e-mails with your personal data will be used by the company only for the purpose of fulfilling your requests.
Cookies
Cookies enable the collection of statistical data on user behaviour on the Internet (e.g. which parts of the website the users browse the longest and which the shortest), which Internet browser (e.g. Internet Explorer, Opera, Safari, Google Chrome, Firefox) they use, etc.
A cookie is a small data package sent from the server to the user's computer, and serves as an anonymous identifier. The purpose of cookies is to improve the user experience when using the website. Cookies on the company's website are anonymised and are not used to access user data or to track user activities after leaving.
The company monitors statistical visits to its website solely for the purpose of obtaining the necessary information about its attractiveness and success.
Owners of search companies inform you about how to manage cookies. Read more on the related links.
PRIVACY POLICY REGARDING PERSONAL INFORMATION
- Introduction
The company Key4you j.d.o.o. with headquarters in Kastav, Jurjenići 109b, PID 62309190286, must collect and use certain data about individuals in its operations.
The purpose of this policy is to ensure that the company fully complies with legal, organizational and technical obligations in relation to the protection of personal data.
All company employees are fully aware of the content of this policy and ensure its application when handling personal data or processing personal data. Employees whose tasks include working with personal data are adequately educated in relation to the protection of personal data.
This policy applies to all personal data held by the company related to any person, regardless of whether they have been, currently are or will be a client, supplier or contact.
This policy was created with the aim of preventing potential damage to the company Key4you j.d.o.o., as well as its employees and respondents, but also to ensure that the processing of personal data by the company is completely in accordance with the law and other regulations.
- Definition and implementation
Personal data are considered to be all data relating to an individual whose identity has been determined or can be determined, i.e. an individual who can be identified directly or indirectly, in particular with the help of identifiers such as name, identification number, location data, network identifier, or with the help of one or more factors inherent in the physical, physiological, genetic, mental, economic, cultural or social identity of said individual.
The processing of personal data means any procedure or set of procedures performed on personal data or on sets of personal data by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or modification, withdrawal, retrieval, inspection, use, disclosure by transmission, dissemination, publication or otherwise making available, matching or combining, restriction, deletion or destruction and the implementation of logical, mathematical and other operations with these data.
The company collects and processes personal data primarily for the purpose of providing services in its business. Therefore, the company needs to collect and process certain types of data about individuals who come into contact with Key4you (partners and respondents). The company handles this personal information adequately, regardless of how these data were collected, recorded, stored and used – on paper, computer or other material.
At the moment of submitting customer and partner data to Key4you, they consent to Key4you processing their personal data, in accordance with the indicated purpose. The protection of the privacy of the partner's data is permanent, and the respondent can exercise their rights at any time, which are listed and explained below.
The company Key4you collects and processes personal data of respondents in accordance with the Personal Data Protection Act (NN 103/03, 118/06, 41/08, 130/11, 106/12), other Croatian regulations, Directive 95/46/EC and General Data Protection and Regulation (GDPR) (EU Regulation 2016/679 of the European Parliament and Council of April 27, 2016).
The company stores the collected data in an appropriate manner and ensures their confidentiality. The company will not forward the collected data to third parties without the partner's permission, except in cases when it is necessary to fulfil legal obligations, when it is necessary for the fulfilment of tasks carried out in the public interest, or when the partner has already published such data, as well as in other cases determined by the authorised regulation.
Our customers and partner are entitled to the following rights with regard to their personal data processed by Key4you:
Customer and partner rights: | Explanation |
Right to information | The partner has the right to request notification at any time whether and by whom their personal data are being processed and for what purpose, to retrieve contact details of the data protection official, to know which categories of personal data are being processed, for what period they are being processed or stored, through whom their personal data were obtained, who all the recipients of their personal data are, as well as the right to be notified of their other rights specified in this policy (right of access, right to rectification, right of erasure, right to restriction of processing, etc.). |
Right of access | The partner has the right to receive confirmation from Key4you as to whether personal data relating to them are being processed, as well as to obtain access to these data and information about: - processing purposes, - categories of personal data that are processed; - recipients or categories of recipients to whom the data have been or will be disclosed; - if possible, about the period for which the data are stored, i.e. about the criteria that determine said period; - requesting the correction or deletion of personal data or the restriction of the processing of personal data relating to the customer or partner, or the right to object to such processing; - the right to submit a complaint to the supervisory authority; - if personal data are not collected from the partner, any available information about the data source; - the existence of automated decision-making, which includes profile creation, with consequences. |
Right to rectification | The partner has the right to obtain the correction of incorrect personal data relating to them without undue delay. The partner has the right to supplement incomplete personal data, by providing an additional statement. |
Right to erasure / right to be forgotten | The partner has the right to have the company delete personal data relating to them without delay if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the partner withdraws the consent on which the processing is based and there is no other legal basis for the processing, if the partner files an objection to the processing, if the personal data have been unlawfully processed, if the personal data must be deleted in order to comply with a legal obligation under EU law or the law of a member state to which the company is subject, if the personal data have been collected in connection with the offer of information society services to a child. The above does not apply if the processing is necessary (and to the necessary extent) for the exercise of the right to freedom of expression and information, for compliance with a legal obligation requiring processing under EU law or the law of a member state to which the company is subject, or for the performance of a task in the public interest, or when exercising the company's official authority. |
Right to submit a complaint to the supervisory authority | The partner has the right, based on their specific situation, to file an objection to the processing of personal data relating to them at any time, including the creation of a profile, in cases where the processing is necessary for the performance of a task of public interest or in the exercise of the company's official authority, i.e. if the processing is necessary for the purposes of legitimate interests of the company or a third party. The company may no longer process personal data unless there are compelling legitimate reasons for data processing that go beyond the interests, rights and freedoms of the partner or to establish, exercise or defend legal claims. If the personal data are processed for the purposes of direct marketing, the partner has the right at any time to object to the processing of personal data relating to them for the purposes of such marketing, which includes profiling to the extent related to such direct marketing. |
Right to data portability | The partner has the right to receive personal data relating to them, which they have provided to the company in a structured, commonly used and machine-readable format. The partner also has the right to transfer this data to another controller if the processing is based on their consent and if processing is carried out in an automated way, without interference from the company. The partner has the right to direct transfer from the company to another data controller if this is technically feasible, and it does not negatively affect the rights and freedoms of others. |
Rights related to automatic decision-making and profiling | The partner has the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects that relate to them or similarly significantly affect them, unless that decision is necessary for the conclusion or execution of a contract between the respondent and the company, if permitted by EU law or the law of the member state to which the company is subject or based on the expressed consent of the partners. |
Right to withdraw consent | The partner's consent is one of the legal bases for the processing of data related to them. The partner has the right to withdraw the consent they have given at any time. The withdrawal of consent does not affect the legality of data processing that was carried out before the withdrawal of consent. |
Right to restriction of processing | The partner has the right to request the restriction of the processing of their personal data: if they dispute the accuracy of their personal data - for the period necessary for the company to verify the accuracy, if the processing of their personal data is illegal and does not request deletion but only restriction of processing, if the company no longer needs their personal data, but the existence of the data is necessary for the fulfilment of legal requirements, if they have objected to the processing, they have the right to request a restriction of processing for the period until it is determined whether the company's legitimate reasons for processing exceed the partner’s reasons for the objection. |
In order to exercise their rights, the respondent should contact us by e-mail using the e-mail address provided by the company or by ground mail to the address: Kastav, Jurjenići 109B.
- Principles of personal data protection:
Key4you firmly stands for the principle that the legal and proper treatment of personal data is very important and therefore ensures that personal data is treated legally and correctly. For this purpose, the company fully supports and complies with the data protection principles.
The data protection principles require that personal data:
- must be processed fairly and legally and, in particular, must not be processed if the conditions specified by the regulations are not met;
- are collected only for one or more specific and lawful purposes and may not be further processed in any way that would be incompatible with those purposes;
- processing must be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed, and the data must be accurate and up-to-date;
- may not be retained longer than necessary for the applicable purpose;
- must be processed in accordance with the rights of the data subjects, which are in accordance with the applicable regulations:
- appropriate technical and organizational measures must be taken against unauthorized or illegal processing of personal data and against accidental loss, destruction or damage of personal data;
- may not be transferred to a country or territory outside the EU, unless that country or territory ensures an adequate level of protection of the data subject's rights and freedoms in relation to the processing of personal data.
The company Key4you can publish the content of cookies on its website for advertising and tracking traffic statistics based on the interests of visitors to the company's website from social networks. If the respondent uses content on the company's social networks or applications, a cookie from the aforementioned networks and applications could be stored on the respondent's device from which they access the company's website. The website visitors have the right to turn off cookies. Internet browsers are usually programmed to accept cookies by default, but respondents can easily adjust this by changing their browser settings. If the data subject wishes to limit or block all cookies that include the company's websites/applications (which may disable the use of certain parts of the website) or other websites/applications, the data subject can do so in the browser settings.
In the event of a personal data breach that is likely to cause a high risk to the rights and freedoms of the data subject, the company shall notify the data subject of the personal data breach without undue delay, unless the company has taken appropriate technical and organizational protection measures and these measures have been applied to the personal data affected by the personal data breach, especially those that make personal data incomprehensible to any person who is not authorized to access them, i.e. if subsequent measures have been taken to ensure that it is no longer likely that there will be a high risk to the rights and freedoms of the data subject, i.e. if this would require a disproportionate effort, in which case the company will apply public notification or a similar measure that informs the respondents in an equally effective way.
- Review and verification:
Key4you reserves the right to update this policy as necessary to reflect best practice and to ensure compliance with any changes or modifications regarding the protection of personal data.