Privacy Policy

Information on the processing of personal data

With this Privacy Policy, Veritec holding d.o.o. from Rijeka, Vukovarska 88, OIB: 63895123057, protects the privacy of its clients and shows concern for their personal data based on Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of individuals regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Act on the Implementation of the General Data Protection Regulation (NN 42/2018), and other regulations governing the area of personal data protection. Veritec holding d.o.o. commits to processing personal data in accordance with the principles of the Regulation.

Statement on the protection and collection of personal data and their use

Veritec holding d.o.o. is committed to protecting the personal data of customers by collecting only necessary, basic information about customers/users that is essential for fulfilling our obligations; informing customers about how the collected data will be used, regularly providing customers with the option to choose the use of their data, including the option to decide whether or not they want their name removed from lists used for marketing campaigns.

All user data is strictly kept confidential and is only accessible to employees for whom this data is necessary for performing their job. All employees of Veritec holding d.o.o. and business partners are responsible for adhering to the principles of privacy protection.

Personal Data

According to the Regulation, personal data is any information relating to an identified or identifiable individual (“data subject”), and an individual or data subject as referred to by the Regulation is a person who can be identified directly or indirectly.

Processing

According to the Regulation, processing means any operation or set of operations performed on personal data or sets of personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data Collection

Veritec holding d.o.o. collects and processes personal data based on law, contracts, legitimate interest, or consent. Data is collected through registration for the use of the web shop and through available web forms for receiving notifications (newsletters), consents given by the customer for marketing purposes, for optimization needs, targeting, or in contact with employees of Veritec holding d.o.o.

The collection of data is necessary for providing web shop services, billing, and delivery of purchased products, and it is collected based on laws and terms of use.

By creating a user account and managing it, the following data is collected: first name, last name, email address, postal code, city, address, phone number.

The information collected during the creation of a user account on the Veritec holding d.o.o. website is used as follows:

first name, last name, email address — used for user identification and re-access to the online store;
email address — used to contact you in case of an incomplete product purchase, sending notifications about the availability of the product you wish to buy;
first name, last name, email address, phone number, postal code, city, and address — used for processing and tracking the order, including the delivery of products to the specified address;
first name, last name, email address, phone number — used to manage disputes related to the purchase.

Purpose and Insight

Personal data is used exclusively for the stated purposes and will be accessible to external processors during the processing procedure. External processors are reputable organizations from the EU that Veritec holding d.o.o. engages to perform outsourced functions such as accounting, equipment hosting, logistics, and delivery. Additionally, based on legal obligations, personal data will be made available to representatives of the relevant legal authorities.

Web Cookies

Cookies are small text files that our web server places on the web browser of your computer or mobile device for the purpose of tracking selections of specific language variants of pages, as well as when accessing parts of the site that require the entry of a username or password. Any reference to or mention of cookies in this Information also includes other types of automated access or storage of information on your device. Cookies cannot be used to run programs or place viruses on your computer. Some cookies set by our web server are automatically deleted from your computer at the end of the session, that is, the moment you leave our pages.

For more information about the cookies we use, as well as user cookie settings, please refer to the Cookie Policy document.

Through the Veritec holding d.o.o. website, you can subscribe to our newsletter with news and tips in the field of digital marketing. For this, we need your email address and confirmation that you accept receiving the newsletter.

At any time, you can withdraw your consent to receive the newsletter via the link in the newsletter itself or by email at gdpr@oromo.eu. In that case, we will delete your data regarding the delivery of the newsletter as soon as possible.

Data collection for order delivery

The provision of logistics services is entrusted to the company Rock and Work d.o.o. from Varaždin, and typically consists of services such as storage of goods, commissioning, handling of goods, unpacking goods from transport packaging, packing goods for delivery to customers, organizing delivery or pickup of goods, handing over packages to courier services, and all other services related to the aforementioned. The logistics service provider may process personal data only in accordance with the documented instruction of the data controller, unless the law stipulates that it may act outside such instruction in a specific case, and is always required to act in accordance with GDPR and the concluded Agreement on the provision of logistics services between the data controller and the processor.

Social Networks

Veritec holding d.o.o. has a company profile on social media platforms Facebook, Instagram, YouTube, and TikTok. If you use the mentioned social networks, please read the privacy policy of the social network you are accessing and be aware of the purpose and scope of data collection, further processing, and use of data by the respective social network, as well as your related rights and privacy settings options. Veritec holding d.o.o. applies the same rules for processing personal data on social media as it does on its website.

Data Retention and Protection

Personal data will be stored, processed, and deleted within legal or default timeframes.

Veritec holding d.o.o. applies appropriate technical and organizational measures to protect personal data. We always do our best to safeguard your personal data, and once we receive it, we strive to operate in accordance with best practices through strict procedures and security features to prevent unauthorized access to your data.

In accordance with the General Data Protection Regulation, Veritec holding d.o.o. does not allow registration or other information society services to individuals under the age specified by the General Regulation or the Law on the Application of the General Regulation for the specific country.

Rights of the Data Subjects

Data subjects have the right to information, correction of personal data, deletion of data, and withdrawal of consent.

Information, correction, deletion – to exercise your right to information, correction of inaccurate data, or deletion of data, please contact gdpr@oromo.eu. Your request will be resolved as soon as possible.

Correction – to change incorrect information, please log in to your user account and make the necessary changes yourself.

Deletion – to request the deletion of your personal data, please contact gdpr@oromo.eu. Please note that even if you request deletion, we will only delete data that we are not required to retain based on contractual and legal obligations. Your request will be resolved as soon as possible.

Data export in standard format – upon request from the data subject, we will export all your personal data that we store into .xml format and deliver it to the client as soon as possible. Please send your request to gdpr@oromo.eu.

Withdrawal of consent – if you no longer wish to receive our newsletter, simply click on Unsubscribe at the bottom of the newsletter or send us an email to cancel your subscription.

Resolving misunderstandings or additional questions

To resolve any possible misunderstandings or to ask additional questions, please use gdpr@oromo.eu.

Contact

For any additional questions, you can contact us at:

VERITEC HOLDING d.o.o.
Vukovarska 88, 51000 Rijeka, Croatia
OIB: 63895123057
Phone: 051/123-456
e-mail: gdpr@oromo.eu