Privacy Policy

Privacy Statement

Purpose of the Statement

Our privacy policy relates to our commitment to treating personal data of employees, customers, stakeholders and other interested parties with utmost care and confidentiality.
This Statement ensures that we collect, store and process personal data fairly, transparently and respecting the individual rights.
The purpose of this Statement is full compliance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, GDPR for short (mandatory from 25/05/2018).

Scope

This statement applies to all stakeholders (employees, job candidates, customers, suppliers, etc.) who provide us with any kind of personal information.

Who is covered by this Privacy Statement?

The Company employees must always act in accordance with this Statement. Contractors, consultants, partners and any other external stakeholders are also covered by the Statement. In general, the rules in this Statement apply to anyone we work with or who acts on our behalf and may need occasional access to personal information collected.

Elements of the Statement

Part of our business includes the collection and processing of certain personal data. This information includes any offline or online information that identifies a person, such as: name, address, OIB, usernames and passwords, “digital footprints”, photos, social security numbers, financial information, etc.
Our company collects and processes this information in a transparent manner and only with the full cooperation and knowledge of stakeholders. Once this information is available to us, the following rules and principles apply.

Principles of personal data protection

Our data is:

• always accurate and up to date
• collected fairly and for lawful purposes only
• processed by the company within legal restrictions and moral limitations
• protected from unauthorized or illegal access by internal or external stakeholders.

Our data will not be:

• used and communicated unofficially
• used for other purposes, without the knowledge of the data subject, except for the purpose for which they were collected
• stored longer than the pre-determined time
• transferred to organizations, countries or states that do not have appropriate data protection policies
• delivered to any stakeholders other than those approved by the data owner (except for legitimate requests from law enforcement authorities)

In addition to the ways in which data is processed, the company has also direct obligations to the people to whom the data belongs. We must take into consideration to:

• let people know which of their personal data is collected
• inform people how their data will be processed
• inform people about who has  access to their data
• have provisions for dealing with cases of lost, damaged or compromised data
• allow users to request modification, deletion, reduction or correction of data contained in our databases

Activities

In order to achieve everything related to personal data protection, we are committed to:

• restrict and monitor access to sensitive data
• develop transparent data collection procedures
• train employees on measures to achieve privacy on the Internet and on security measures
• implement network security to protect network data from cyber attacks
• establish clear procedures for reporting privacy breaches or misuse of data
• include contract clauses on data processing
•  establish data protection practices (document shredding, security locks, data encryption, frequent backups, access authorization, etc.).

Disciplinary action

All stakeholders must strictly adhere to all the principles described in this Statement. Violation of these data protection guidelines will result in disciplinary action and possibly other legal action.

Adopted on: 20/10/2019