This privacy policy (“Policy”) explains how company Blue rain d.o.o., Osmih Mediteranskih Igara 5, Split, Croatia, VAT: 51945853294 (hereinafter: “BLUE RAIN”) collects, uses and manages your personal data that are located on the website and that are available to BLUE RAIN due to your use of the website: www.mandrach.hr
BLUE RAIN is committed to protecting and respecting your privacy. Read this Policy carefully to understand why and how we collect your personal data and how they will be used. In terms of personal data that we collect, BLUE RAIN is the “Controller”, i.e. the one who determines the needs for which and the means by which personal data are processed.
BLUE RAIN, as the service provider of the website www.mandrach.hr, is committed to protecting personal data privacy.
If you wish to contact us regarding this policy or regarding your personal data, please use the following contact details:
Blue rain d.o.o.
Osmih Mediteranskih Igara 5
Split, Croatia
VAT: 51945853294
You can contact the Personal Data Protection Officer at: info@mandrach.hr
How and when do we collect your personal data?
BLUE RAIN collects personal data for the purpose of improving our business operations and your user experience. For these reasons, BLUE RAIN has a comprehensive privacy program designed to respect and protect the right to data privacy, project analysis and implementation, marketing and other types of technical support.
We treat your personal data as confidential data and they are properly protected by BLUE RAIN and/or our reliable partners.
We process your personal data in order to comply with legal obligations, if this is necessary for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract, or for legitimate interests, except when interests or fundamental rights and freedoms of data subjects that require personal data protection are stronger than those interests.
What data do we collect directly from you?
When a user engages in certain activities on the website www.mandrach.hr such as researching BLUE RAIN’s projects, and/or when you want to send us an inquiry, and/or when you want to send us your CV, BLUE RAIN may ask the user to provide certain additional personal data. In this case, before providing personal data, the user is obliged to study this Privacy Policy and agree to its application in relation to additional data.
Depending on the types of activities, some of the requested data are defined as mandatory and some as voluntary. If the user does not want to provide mandatory data for the activity that requires them, he/she will not be allowed to engage in that activity.
BLUE RAIN collects and uses personal data in order to enable users to use the activities via the website www.mandrach.hr, improve the work of the website www.mandrach.hr, create a user database for the purpose of improving the service and/or marketing, and improve advertising and promotional activities. Also, personal data can be used to solve problems, perform administrative tasks and establish contact with users.
On the website www.mandrach.hr, BLUE RAIN collects personal data of data subjects such as: name, surname, gender, e-mail address or other contact, working place and IP address.
In addition to the personal data we process when you visit the website, below is the list of other types of personal data, purposes of their collection and use, all of which we collect and process during the performance of our regular obligations related to the registered activities of BLUE RAIN:
- BLUE RAIN collects and processes personal data of its employees and other associates for the purpose of performing employment contracts signed with employees and consulting contracts and/or work contracts signed with associates, which relate to personnel, administrative or other business/contractual business purposes. In the latter case, we collect and process data such as: name, surname, gender; marital status, citizenship, residence, date and place of birth, personal identification number; vocation, occupation, data on professional training and courses, data related to health insurance, work experience; data on the account number (IBAN), photograph and signature.
- From suppliers, sponsors and other clients, for the purpose of fulfilling contractual obligations, we collect and process data such as: name and surname of the responsible person in the legal entity; contact details of the person in charge of communication and performance of contractual obligations; academic and professional qualifications of the responsible persons in the legal entity and the signature of the responsible person.
- From job candidates, all for the purpose of possible employment, the data collected and processed by BLUE RAIN may include: name, surname, address, contact data (e-mail address, telephone number, mobile phone number), photograph, level of education, citizenship, vocation and occupation, information on previous work experience, information on professional training and courses, and test results that may reflect the candidate’s ability to perform all job responsibilities that a particular position for which he/she is applying requires from him/her.
- when you send us any inquiry related to our offer, we will process your contacts and / or other information that you provide to us when you are calling or sending an inquiry,
- when you want to reserve a place, we collect and process, for the purpose of fulfilling contractual obligations, data such as: name and surname, telephone and e-mail
The following persons may have access to personal data in the performance of their scope of work: legal entities participating in the execution of legal relations with users such as IT support and other companies related to BLUE RAIN, public bodies that require the submission of personal data in accordance with regulations binding on BLUE RAIN, of which BLUE RAIN keeps the prescribed records of processing activities.
What privacy rights do you have?
BLUE RAIN respects that every user should be able to ensure the accuracy, completeness and up-to-dateness of their personal data. If a user believes that his/her personal data are incomplete, inaccurate or not updated, he/she can contact BLUE RAIN by sending an e-mail to info@mandrach.hr
Please note that at any time you have the right to request the following from BLUE RAIN:
| To give you access to your personal data | You can ask BLUE RAIN which of your personal data it uses, and you can also request access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we store, the authorities or categories of authorities with whom we share your personal data, the data retention period, as well as the source of data in case the data are collected indirectly. You can contact us if you want a copy of some or all of your personal data we are keeping. |
| To request correction of incorrect data | We want your personal data to be accurate and up to date. You can ask us to correct or remove data you believe are inaccurate or out of date. |
| To request erasure of personal data | You can ask BLUE RAIN to stop processing or even erase your personal data. If we need your personal data to perform a contractual obligation towards you, BLUE RAIN may cease to be able to perform such contractual obligations. Also, if your personal data are necessary in order to be able to fulfill certain legal obligations (e.g. tax liabilities), your request may not be able to be fulfilled. |
| To restrict access to your data (to us and/or third parties) in certain processes or in full | If you wish to challenge the accuracy of the data, or we no longer need personal data for the purpose of processing, but you need them to establish, implement or process legal claims or you have objected to processing on grounds we deem legitimate, you have the right to request a restriction of personal data processing. |
| To file an objection to the manner in which we use your data | Remember that you have the right to object to the processing of personal data based on a legal basis that BLUE RAIN considers legitimate |
| To request data transfer to another processor (portability of rights) | If the processing is based on your consent or is performed by automatic means, you have the right to request from BLUE RAIN the transfer of data to another processor. |
To exercise any of the above rights, please use the contact information provided at the beginning of the Privacy Policy.
If you are not satisfied with how we have collected or used your personal data, you can lodge a formal complaint to the Personal Data Protection Agency.
Where are your personal data stored?
We store the personal data we collect about you in a secure environment. Your personal data are protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual. The processed data are stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.
BLUE RAIN will ensure that personal data are kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons.
The data collected for the purposes specified in this Policy will be stored only for as long as is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than BLUE RAIN reasonably deems necessary to achieve the purpose for which they have been collected or processed. BLUE RAIN will store certain personal data for a period of time prescribed by law or a regulation obliging BLUE RAIN to keep data.
In the event that you have given us consent, we will process your personal data until the consent is withdrawn. If you make a founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to point out the following; if judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including a possible period for declaring legal remedies. BLUE RAIN will store certain personal data for a period of time prescribed by law or a regulation obliging the Controller to keep data.
Does BLUE RAIN exchange data with third parties?
Privacy protection is important to us, so we will never share your personal data with third parties except for the purposes described in this Policy.
BLUE RAIN cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that provides an adequate level of protection in accordance with EU legislation.
In some cases, our partners providing services on behalf of or for BLUE RAIN may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to treat your data with special security measures in accordance with the regulations in force in the Member States of the European Union. In the event of a transfer of data to the United States, we will ask for your permission in view of the consequences of the “Schrems II” judgment and the invalidation of the Privacy Shield. Also, if our contract partner is based in the US, we will review existing contracts and check the security standards that our partner guarantees to ensure the protection of all our respondents with the latest standards approved and suggested by the relevant institutions.
In addition to all of the above, we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of BLUE RAIN, for example, for the needs of marketing, financial, advertising and other services inside and outside BLUE RAIN. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your data and to consider them a trade secret.
How long will BLUE RAIN keep your personal data?
BLUE RAIN will not keep your personal data for longer than the period for which the data is needed to fulfill the purpose of their use, but for a maximum period of 3 years.
What will we use your data for?
We may use your personal information in several different ways, mainly to perform our contractual and other obligations to you, but sometimes to improve your experience of using the website, direct marketing and security reasons.
Cookies
To maintain the website and ensure that its functionality is at the expected level, BLUE RAIN uses technology known as “cookies”.
Cookies are small files that we send to your computer and that we can access later. They can be temporary or permanent. Thanks to cookies, you can easily search our website and display results that are relevant to you. Cookies show us what interests you and other visitors to our website, which helps us improve it.
You can read more about the name and purposes of the cookies we use in our Cookies Policy.
Other websites
This Privacy Policy applies only to the use and utilization of data collected by BLUE RAIN from users (data subjects). Other websites that can be accessed via the website www.mandrach.hr have their own data confidentiality and collection statements, and the manners of data use and publication.
BLUE RAIN shall not be responsible for the methods and working conditions of third parties.
BLUE RAIN collects and processes personal data via user interactions on social networks such as Facebook and Instagram. BLUE RAIN or responsible persons appointed by BLUE RAIN have access to messages and/or publications on the mentioned social networks, however, personal data collected through them, especially those contained in messages, are not stored and further processed by BLUE RAIN, except for the purposes specified in this Policy.
BLUE RAIN uses a business profile using Facebook and Instagram services, and you can review the Privacy Policy or privacy statements, as well as the way they use your personal data at:
| FACEBOOK ONLINE | https://www.facebook.com/policy.php |
| INSTAGRAM ONLINE | https://help.instagram.com/519522125107875 |
If you have any questions regarding the collection and processing of data by Facebook and/or Instagram or you wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:
| FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | |
| Contact of the Data Protection Officer: | https://hr-hr.facebook.com/policy.phphttps://www.facebook.com/help/contact/540977946302970 |
| If you are not satisfied with the way your personal data are being collected and processed, you can contact the lead supervisory authority for Facebook, the Irish Data Protection Commissioner or the Croatian Data Protection Agency. | |
| FOR INSTAGRAM:FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland | |
| Contact of the Data Protection Officer: | https://hr-hr.facebook.com/policy.phphttps://www.facebook.com/help/contact/540977946302970 |
| If you are not satisfied with the way your personal data are being collected and processed, you can contact the lead supervisory authority for Instagram, the Irish Data Protection Commissioner or the Croatian Data Protection Agency. | |
A social network is a place of social networking on the Internet, an online community that typically allows users to communicate with each other in a virtual space. The social network serves as a platform to share opinions and experiences, or to provide the Internet community with personal or business-related information. Facebook allows its users to create private profiles, upload images and connect through friend requests.
Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person using Facebook lives outside the United States or Canada, the Controller of personal data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA is a independent Controller.
By opening www.mandrach.hr, the respondent’s browser will display the appropriate Facebook component, which is a consequence of using the Facebook plugin. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. During this technical procedure, Facebook was provided with information about a specific subpage visited by the respondent.
In case you are registered as a respondent on Facebook, at the same time Facebook can detect every review of your website www.mandrach.hr. This information is collected through the Facebook component and credited to the respondents Facebook account. If the respondent clicks on any Facebook button integrated on the www.mandrach.hr website, for example the “Like” button, or if the respondent sends a comment, then Facebook transfers the information to the respondent’s personal Facebook account and thus saves personal data.
Each time the respondent is logged in to Facebook and at the same time accesses the www.mandrach.hr website, Facebook will receive information about it via the Facebook component. This will happen regardless of whether the respondent clicks on the Facebook component or not. If the respondent does not want to transfer this type of information, he can also prevent it by logging out of his Facebook account before accessing the www.mandrach.hr website.
Entry into force and change of the Privacy Policy
This Policy shall enter into force upon its publication on the website.
BLUE RAIN reserves the right to amend the Privacy Policy and it will be published on the website.