Privacy Policy

Notice on the Processing of Personal Data via this Website www.twistermallconcept.com

The General Data Protection Regulation 2016/679 (GDPR) sets high standards for the protection of personal data. Respecting these requirements and applying recommended security standards and best practices, this privacy policy provides information on the collection and processing of personal data via this website, as well as processing based on legitimate interest. For further information, please contact us via the provided contacts.

I. DATA CONTROLLER
AVEO-TEAM Limited Liability Company for Trade and Services
Headquarters: Popovićev put 2C, Matulji
PIN: 62295173715

Contact: Phone: +385 1 7077202
Email: info@twistermallconcept.com

II. DATA PROTECTION OFFICER (DPO)
The data controller has appointed a professional Data Protection Officer. The Data Protection Officer can be contacted to request access to your data, file a complaint about the processing, or request additional information regarding the processing of your personal data.

Contact: feralis@feralis.hr

III. DATA COLLECTED AND PROCESSED

Purpose of Personal Data Collection
Through this website, personal data may be collected for the following purposes:

1. Responding to inquiries or requests
2. Improving the functionality of this website's features and providing a better user experience.

Categories of Personal Data Collected
The following categories of personal data may be collected through this website:

1. Identification data (e.g., name);
2. Contact information (e.g., email);
3. Other information you provide through messages.

Legal Basis for Personal Data Processing
This website uses the following legal grounds for personal data collection:

1. Performance of a Contract: Data is processed to fulfill a contract (service) or take action upon the data subject’s request before entering into a contract (providing a service). For example, responding to an inquiry or request.
2. Consent: Data processing may be based on your prior consent (e.g., via cookies). In such cases, you will be clearly informed of the purpose before processing begins to enable you to give consent. The absence of consent will not affect the provision of our services.
   Data collected for the purpose of responding to inquiries is considered necessary. Such data processing is essential for providing the requested service or taking actions before providing the requested service, making it lawful under the GDPR. Please note that if necessary data is not provided, we may not be able to fulfill your request.

IV. RECIPIENTS OF PERSONAL DATA

Collected personal data may be shared with IT and communication solution providers acting as our data processors, such as payment system providers. These processors provide reasonable guarantees and have taken appropriate technical and organizational security measures to ensure adequate data protection and compliance with GDPR requirements. Data processing agreements/contracts based on the European Commission’s Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors form part of these contracts. The processors cannot process personal data without our instruction or share them with third parties. Personal data is not shared with third parties for direct marketing purposes.

V. DATA STORAGE PERIOD

Personal data provided for responding to inquiries and requests are processed until the purpose for which they were collected is fulfilled. Once the purpose is fulfilled, the data will no longer be processed but may be stored for five years, which represents a general statute of limitations period. Personal data processed based on the user’s consent will be stored until the purpose is fulfilled or the user withdraws their consent.

VI. COOKIES

GENERAL TERMS

What are Cookies?
Cookies, also known as HTTP cookies, are small text files stored on the user’s device (such as a computer, mobile phone, or tablet) when visiting a website. These cookies allow the website to remember the user's actions and preferences over time. When the user revisits the same website, cookies are sent back to the web server, enabling the website to recognize the user and provide a personalized experience.

What Information Can Cookies Store?
Internet cookies can store various types of information related to the user and their website usage, such as identification data, user preferences, cart contents on e-commerce sites, login details, user activities on the website, interests for personalized content and ads, session duration, and security and authentication data. Cookies help websites improve user experience and offer personalized services.

What is the Purpose of Cookies?
Cookies aim to optimize and enhance user experience when visiting websites.

Cookies by Function:

• I Technical Cookies (always active) – necessary for the website’s operation and cannot be disabled. These cookies do not store personally identifiable information.
• II Functional Cookies (can be disabled) – enable enhanced functionality and personalization on the website.
• III Statistical Cookies (can be disabled) – allow tracking of visits and traffic sources to measure and improve the website’s effectiveness.
• IV Marketing Cookies (can be disabled) – used to track users across websites and show targeted ads.

HOW TO DISABLE COOKIES
You can manage non-essential cookies on the site via the control window. Additionally, you can accept or reject some or all cookies by adjusting your browser settings. Cookie settings can also be controlled and configured through the browser. The following links provide information on how to change settings for commonly used browsers:

• Chrome
• Firefox
• Internet Explorer 9
• Internet Explorer 7 i 8
• Opera
• Safari

ADDITIONAL INFORMATION ON DISABLING COOKIES
Some browsers allow browsing in "anonymous" mode, limiting the data placed on your device and automatically deleting persistent cookies at the end of your browsing session. Many third-party applications can be added to browsers to block or manage cookies. You can also delete previously set cookies by selecting the option to clear your browsing history, including the option to delete cookies.

More information on cookies and browser settings can be found at:

• http://www.allaboutcookies.org/
• http://www.youronlinechoices.eu/
• http://www.aboutads.info/choices/

VII. SECURITY OF PERSONAL DATA PROCESSING
We collect and process personal data in accordance with the General Data Protection Regulation (GDPR) in a manner that ensures appropriate security and confidentiality in their processing. Our goal is to facilitate the effective implementation of data protection principles, minimize the amount of data, limit the scope of their processing, reduce the storage period, and ensure their availability. To this end, we have implemented appropriate technical and organizational protection measures to ensure a level of security corresponding to the risks posed by data processing and the nature of the personal data being protected. When introducing these measures, we have particularly considered the characteristics and costs to achieve an optimal balance between data protection and practical applicability. We regularly review all data processing activities that may pose a risk to the rights and freedoms of individuals. We have taken appropriate protective measures to ensure that personal data is safeguarded against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access. We are especially focused on data protection when personal data is transmitted over a network and to prevent possible unlawful forms of processing.

VIII. EXERCISING YOUR RIGHTS

Right to Access
You can request confirmation at any time on whether your personal data is being processed, along with detailed information about the processing, such as its purpose, categories of personal data, and the recipients or categories of recipients.

Right to Rectification
You can request the correction of inaccurate or incomplete personal data without delay.

Right to Erasure
You have the right to request the deletion of your personal data. If justified and if not legally required to retain the data, it will be deleted without unnecessary delay.

Right to Restrict Processing
You can request the restriction of your personal data processing in cases stipulated by the GDPR.

Right to Withdraw Consent
You have the right to withdraw consent at any time. Please note that withdrawal does not affect the lawfulness of prior data processing.

Right to Object
You can object to the processing of your personal data at any time, especially when based on legitimate interest.

Right to Lodge a Complaint
If you believe your personal data has been violated, you can file a complaint with the supervisory authority, the Agency for the Protection of Personal Data, located at Selska cesta 136, Zagreb.

IX. CONTACT INFORMATION
For additional information on personal data processing or to exercise your rights, contact our Data Protection Officer or use other available contacts.

DPO Email: feralis@feralis.hr

Your request will be processed within 30 days of successful identification.

X. ADDITIONAL INFORMATION
This privacy policy is regularly reviewed, supplemented, and amended to always reflect the actual state of personal data collection and processing through this website. Please regularly check for such changes to stay fully informed about our privacy and data processing practices. In the event of changes that may affect your rights as a data subject or significantly alter the previous processing notice, especially if there is a change in the purposes of processing, data disclosure, or transfer to third countries, a notice of such changes will be displayed in a pop-up window when you visit this website. In this way, we aim to ensure that all our users are informed of any significant changes.

We continuously monitor best practices and regulations to ensure that our users' privacy remains at the highest level.

Last update: September 2024