INTRODUCTORY PROVISIONS

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4.5.2016, p. 1, hereinafter: the General Data Protection Regulation), which has been in full force and effect since 25 May 2018 in the Republic of Croatia and all Member States of the European Union, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18, hereinafter: the Act), i.e. in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union and best European practice, KONEKTIVA Services is a limited liability company, with its registered office in the Republic of Croatia, Zagreb, Radnička cesta 34, registered in the court register of the Commercial Court in Zagreb under the registration number of the subject of registration (MBS): 081448269, personal identification number (OIB): 58993465592 (hereinafter referred to as: the Company), as the controller of personal data of its service users and customers, has developed a Privacy Policy for Service Users and Customers. The Privacy Policy is a unilaterally binding legal act based on the fundamental principles of personal data processing, which regulates which user and/or customer data is collected, how such data is processed, and for what purposes it is used. The Privacy Policy also informs service users and/or customers of their rights in the collection and further processing of personal data, all for the purpose of protecting their privacy in a broader sense.

The Privacy Policy is based on the following principles of personal data processing: the principle of lawfulness, transparency and best practice, the principle of limited processing and data minimization, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of integrity and confidentiality of data, the principle of accountability, the principle of trust and fair processing, the principle of opportunism (purpose of processing), the principle of processing in an anonymous form.

The Privacy Policy applies to all services offered by the Company, with the aim of the Policy to inform users and/or customers in a clear and transparent manner about the processing of their personal data and their rights. First of all, users and/or customers may contact the Company at any time with a request to amend or supplement and/or update the data relating to them, as well as with a request for a statement on the purposes for which they wish or do not wish their data to be processed.

The conference will be photographed and recorded, and by paying the registration fee, you approve the use of your photos and recordings for official purposes on the official pages of the Congress, HUD and KoNEKTIVA.

The Company is responsible for the processing of personal data:

KONEKTIVA Services is a limited liability company, headquartered in the Republic of Croatia, Zagreb, Radnička cesta 34, registered in the court register of the Commercial Court in Zagreb under the registration number of the subject of registration (MBS): 081448269, personal identification number (OIB): 58993465592.

Contact information for personal data protection:

Email: info@konektiva.eu

METHODS OF COLLECTION AND TYPES OF DATA COLLECTED

Certain services provided by the Company require the collection of personal data of users and/or customers, whereby basic data is collected in the following ways:

1. Directly by the users and/or customers themselves in a way that the users and/or customers themselves provide them with consent to the Company as the data controller in a certain scope of data that is essential for the provision of appropriate services. For the purpose of providing appropriate services, the user and/or customer is obliged to provide the Company with the following data that it needs to establish a contractual relationship for the purpose of providing a particular service and/or selling certain products from its range:

• first and last name;
• address;
• electronic mail contact details (e-mail address);
• employment data (job title, occupation, company, address, etc.);
• title;
• contact details of the telephone (mobile phone);
• interest;
• other personal data;

2. From other sources, namely from our business partners or from publicly available sources (for example, data available through access to the telephone directory and other publicly available services);
3. Automatically by visiting our online (web) pages, applications and Web-shop portal, which is data associated with network identifiers (Internet protocol addresses and cookie identifiers, such as Google Analytics for monitoring user and/or customer interaction).

A cookie is a small data file that is stored on a computer or mobile device when visiting a particular website. Cookies are used to provide a better user experience for each user and/or customer, to store user and/or customer preferences, to make websites work more efficiently, and to track and analyze the use and traffic of the Company’s website. Cookies are also used to track internet usage and create user profiles, and then to display tailored online advertisements based on user and/or customer preferences.

By disabling and/or blocking the storage of cookies, the user and/or customer can still browse the Company’s websites. However, there is a possibility that certain features and/or functionalities of the website will not be available to such a user and/or customer, or that the time required to access certain functions of the website will be longer than usual.

The network identifiers in question may leave traces that, in combination with other identifiers and information provided by Internet service providers, may be used to identify the user and/or customer. We also collect and process the following data for this purpose:

• IP address data;
• data on the use of individual applications;
• data on user and/or customer habits – we create this data for the purpose of profiling users and/or customers.

The amount or scope of personal data that the Company collects depends on the type of service that the Company provides to its users and/or customers, as well as the legal basis on which it collects the data. The Company constantly takes care to collect only the necessary scope of personal data that is necessary to achieve the legally established purpose for which the data is processed.

The conference will be photographed, and by paying the registration fee, you approve the use of your photos for official purposes on the official websites of HUD and the Congress.

FOR WHAT PURPOSES IS PERSONAL DATA COLLECTED AND FURTHER PROCESSED?

The Company collects personal data in order to provide, maintain, protect and improve its services related to the purchase of certain products, to understand how users and/or customers use the services provided and use the Company’s website, and for the purpose of fulfilling the Company’s contractual obligations. The Company collects such data based on the consent given by the user and/or customer for one or more specific purposes, as well as in one of the following cases.

Execution of contractual obligations

The company collects and further processes personal data of users and/or customers for the purpose of entering into and executing contracts, delivering ordered products, providing advice and assistance with product use, providing appropriate additional and/or extended product warranties, resolving user and/or customer complaints, and other actions related to entering into and executing contracts in accordance with applicable regulations.

The legal basis for processing personal data of users and/or customers for the above-mentioned purposes is the necessity of concluding a contract, i.e., in the event that the user and/or customer refuses to provide essential data, the Company will not be able to conclude a contract and/or take certain actions related to the execution of the concluded contract.

Fulfilling legal obligations

The Company is obliged, based on a written request submitted by users and/or customers to the above-mentioned address of the personal data protection officer, to provide them with access to the personal data it processes about them, correction of inaccurate personal data, deletion of personal data or restriction of processing of personal data, as well as to inform them of the possibility of objecting to the processing of personal data and the right to data portability.

Direct marketing

Contact information of users and/or customers may be used to send promotional information about the Company’s products and services if the user and/or customer has given consent to such processing or if there is a legitimate interest of the Company in such actions, unless these interests are overridden by the interests or fundamental rights and freedoms of the user and/or customer that require the protection of personal data.

The Company may use contact information and personally contact users and/or customers whose personal data it already possesses, based on a legitimate interest in sending promotional information about all products and services it provides, using all available promotional channels, unless the user and/or customer objects to such processing.

In order for the user and/or customer to receive notifications that match their wishes and habits, it is necessary for the Company to use certain user and/or customer data to create personalized advertising notifications, until the user and/or customer explicitly objects to such data processing, or withdraws their previously given application for processing.

The legal basis for processing personal data for the above purposes is the legitimate interest of the Company, unless such interest is overridden by fundamental rights and freedoms that require data protection.

Internal purposes

The Company uses certain user and/or customer data exclusively for its own records, in order to protect the legitimate interests of users and/or customers and/or the Company. For example, the above includes the use of personal data for the purpose of creating offers that meet the needs and wishes of users and/or customers, market research and analysis.

DATA ON POTENTIAL USERS

The Company is also authorized to collect data about potential users and/or buyers of its services and/or products. This data includes basic information (name and surname, email address) but also the interests of potential users and/or buyers who contact the Company with the desire to be informed and/or offered certain products and services.

The legal basis for collection in the described case is the consent of the user and/or customer.

DURATION OF STORAGE AND PROCESSING OF PERSONAL DATA

Depending on the purpose and legal basis on which the personal data of users and/or customers is collected, the Company is in certain cases obliged to store personal data for the period of time (period) prescribed by the relevant regulations for a particular purpose or upon the termination of the purpose for which it was collected. Upon the expiry of the legal period that obliges the Company to store certain personal data or upon the termination of the purpose, they are deleted.

In cases where the basis for collecting and processing data is the legitimate interest of the Company or the consent of the user and/or customer, personal data is stored for the following periods of time:

• data on existing users and/or customers: for the duration of the contractual relationship and 6 months after termination;
• data on potential users and/or customers: 3 months;

Data processed based on the legitimate interest of the Company and/or the consent of users and/or customers may be deleted even before the expiry of the period specified in this Policy, in the event that such deletion is requested by the user and/or customer, or when the user and/or customer objects to such processing.

USER/CUSTOMER RIGHTS

Right to access personal data

The Company, as the data controller, undertakes, based on a written request submitted by the user and/or customer, which request may also be in the form of an e-mail, to provide access to the personal data it processes about them, to inform them about the purpose of the personal data processing for which they are processed, about the type of personal data being processed, about the recipients or categories of recipients to whom the personal data has been disclosed or will be disclosed, about the envisaged processing period or about the criteria used to determine that period.

Right to correction of inaccurate data

The Company, as the controller, will enable the correction of inaccurate personal data in each individual case when it is determined that the collected personal data about the user and/or customer is incorrect or that the user and/or customer data has changed.

Right to delete personal data

The Company will delete the personal data of the user and/or customer in the following cases:

• when the personal data of the user and/or customer are no longer necessary to fulfill the purpose of the processing, or upon termination of the purpose of the processing;
• when the user and/or customer withdraws consent as a legal basis for data processing, and there is no other legal basis for data processing;
• when the user and/or customer objects to data processing (see more under the heading Right to object)
• when personal data has been processed unlawfully;
• when personal data must be erased in order to comply with legal obligations under the law of the European Union or a Member State to which the data controller is subject;
• when personal data are collected in connection with the provision of information society services in relation to the consent of the child.

Right to restriction of data processing

The Company will ensure the restriction of the processing of personal data in cases where the user and/or customer disputes the accuracy of the data, when the processing is unlawful and the user and/or customer opposes the deletion of the data and instead requests the restriction of their use, when the controller no longer needs the personal data for the purposes of the processing but the user and/or customer requests the data to satisfy legal claims, as well as in cases where the user and/or customer objects to the processing of personal data based on the legitimate interest of the Company, including the creation of user and/or customer profiles.

Right to lodge a complaint

The user and/or customer has the right to object to the processing of personal data relating to him/her if the data is processed for the purposes of the legitimate interests of the controller. In such a case, the Company, as the controller, will cease processing the personal data, unless it proves that there are compelling legitimate grounds for processing the personal data in relation to the rights of the user and/or customer, or in the case where the processing of the data serves the establishment, exercise or defence of legal claims.

If the user’s and/or customer’s personal data is processed for direct marketing purposes, the user has the right to object to processing for direct marketing purposes at any time, especially if the personal data is used for the purpose of creating a profile.

WHERE PERSONAL DATA IS PROCESSED

The Company processes personal data of users and/or customers in the Republic of Croatia.

UNDER WHAT CONDITIONS ARE PERSONAL DATA TRANSFERRED TO THIRD PARTIES?

The Company forwards personal data of users and/or customers to third parties (including competent authorities) only in the following cases:

• user and/or customer consent;
• to fulfill the Company’s legal obligations;
• when such processing is necessary to protect the vital interests of users and/or customers.

CONSENT MANAGEMENT

The active role of the user and/or customer in privacy protection is reflected in the provision of consent as a voluntary, specifically informed and unambiguous expression of the wishes of the data subject, by which he/she, by a statement or clear affirmative action, gives consent to the processing of personal data. Consent management implies the possibility for the user and/or customer, by an active and unambiguous action, to authorize the Company to collect and process certain personal data for one or more purposes (data subject consent), or to withdraw previously given consent for the collection and processing of personal data for one or more purposes in the same way.

WHO TO CONTACT

In case of any questions about the protection of personal data by the Company, users and/or customers may contact the Personal Data Protection Officer via email at the email address specified in this Privacy Policy or in writing at the following address:

KONEKTIVA Services Ltd.
n/a Mirela Hison Bartolic
Radnicka cesta 34
10000 Zagreb

AMENDMENTS TO THE PRIVACY POLICY

The Company reserves the right to amend and supplement this Policy at any time, without giving any special notice to interested parties. For this reason, it is recommended that all interested parties regularly check the content of the Company’s website to be informed about the updated content of this Policy.

In Zagreb, January 1, 2025.
KONEKTIVA Services Ltd.