Privacy policy
GEOPREM d.o.o., Trg Lava Mirskog 1, 31000 Osijek, OIB: 59050409077, as the Data Controller, hereinafter referred to as the “Company”, in accordance with the principle of transparency and the provisions of the General Data Protection Regulation (GDPR), hereby adopts the following Policy as of 25 August 2026:
PERSONAL DATA PROTECTION POLICY
1. INTRODUCTION
The protection of personal data is of particular importance to GEOPREM d.o.o. The purpose of this Privacy Policy is to explain clearly and simply what personal data we collect, how long we retain it, why we collect it, who has access to your data, what rights you have, and how you can exercise those rights.
Whenever we collect your personal data or you share it with us, we use it in accordance with this Policy. You will be informed in a timely manner of any amendments or updates to this Policy, including through publication on the Company’s website.
Please read this Policy carefully. If you have any questions or concerns regarding your personal data, please contact us at: geoprem@geoprem.hr.
2. WHAT IS PERSONAL DATA?
Personal data is any information that can be used to identify you directly (e.g. your name) or indirectly (e.g. through a pseudonym).
In other words, personal data includes information such as your email address, home address, mobile phone number, OIB (Personal Identification Number), financial information, and similar data.
Personal data may also include numerical identifiers such as a computer IP address, a mobile phone MAC address, or cookies.
3. HOW DO WE COLLECT PERSONAL DATA?
We collect data directly from you (e.g. when you are our client, request a quotation from us, contact us by telephone and/or visit our offices), automatically through our websites, or from third parties, such as publicly available sources, open databases, or other publicly available data.
4. WHY DO WE COLLECT YOUR DATA (PURPOSE AND LEGAL BASIS FOR PROCESSING)?
A)
Purpose of data collection: Fulfilment of contractual obligations
Legal basis: Processing is necessary for the performance of a contract to which you are a party.
Categories of personal data: First and last name, financial information, contractual information.
B)
Purpose of data collection:
Communication with you, including processing for the purposes of:
responding to your inquiries;
suggesting products that we believe may be of interest to you;
sending quotations;
sending/delivering notifications from us during the term of the contract;
responding to complaints arising from your business relationship with us.
Legal basis: Processing is necessary for the performance of a contract to which you are a party.
1. /2. /5. / Legitimate interest
Processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
Processing is necessary for the performance of a contract to which you are a party.
Categories of personal data:
Data provided in the contact form
Previous purchase information and contact details
Contact details
C)
Purpose of data collection: Debt collection
Legal basis: Legitimate interest
Categories of personal data: First and last name, contact details, financial information.
D)
Purpose of data collection: Protection of our property and ensuring the safety of our property and third parties.
Legal basis: Legitimate interest
Categories of personal data: Data collected through video surveillance.
E)
Purpose of data collection: Sending promotional content via newsletter.
Legal basis: Your consent
Categories of personal data: First and last name, email address.
F)
Purpose of data collection: Protecting our websites against cyberattacks and other threats.
Legal basis: Legitimate interest – enhancing the security of the Company and preventing fraud.
Categories of personal data: Technical data (IP address, operating system information, information about visits to our websites).
G)
Purpose of data collection: Compliance with our legal obligations.
Legal basis: Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
Categories of personal data: First and last name, financial information, information relating to concluded contracts.
H)
Purpose of data collection: Analysis of the performance and organization of our business, including processing for reporting and management analysis purposes. We also process your personal data for internal management purposes, business audits, and the implementation of business controls.
Legal basis: Legitimate interest
Categories of personal data: First and last name, transaction information, information relating to concluded contracts.
5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
Depending on the purpose for which your data is collected, we may share it with third parties that assist us in providing digital and e-commerce services, advertising and marketing agencies, digital advertising and social media advertising providers, third parties required for product delivery, such as postal and delivery service providers, third parties providing technical support, payment service providers, legal representatives, and similar service providers.
We may also disclose personal data as part of a business transaction, such as a merger or sale of assets, as well as to competent government authorities and public bodies.
6. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We retain and process your personal data only for as long as necessary to fulfil a specific lawful purpose, unless applicable regulations require a longer retention period for a particular purpose.
The criteria used to determine personal data retention periods include:
For what purpose do we collect personal data?
What is the legal basis for processing personal data?
How long is the personal data required to fulfil a specific lawful purpose?
Are we subject to a legal obligation to retain personal data? In such cases, we retain the data for the period prescribed by law.
7. SECURITY AND STORAGE OF PERSONAL DATA
We process personal data within the European Economic Area.
We take all necessary organizational and technical measures to keep your personal data secure and protect it against loss, destruction, alteration, falsification, manipulation and/or unauthorized access.
We undertake to notify you and the competent authority in the event of a personal data breach. We take measures to ensure that the data we collect and process is handled in accordance with this Policy and applicable legal requirements.
Where we share personal data with third parties, we use appropriate legal and technical safeguards to protect your personal data against breaches.
8. LINKS TO THIRD-PARTY WEBSITES
If you visit other websites through links contained on our website, please note that those websites have their own privacy policies and that we have no control over, and accept no responsibility for, those policies.
9. BROWSING THE WEBSITE
Our website uses cookies and similar technologies. The purpose of cookies is to ensure the proper functioning of the website and to improve our services so that they are as effective as possible.
Cookies are small text files that may be stored on your computer and are used by your web browser.
Information collected through cookies and similar technologies may include login information, location, IP address, browser information, device information, duration of visits, advertisements viewed, pages visited, and similar information.
Most of the cookies we use are so-called “session cookies”, which are deleted when the individual browser session ends. We also use certain persistent cookies that allow us to recognize you as a returning visitor.
You have the right to disable cookies through your web browser settings. For more information about cookies, please read our Cookie Policy.
10. YOUR RIGHTS
10.1. Right to withdraw consent
Where the processing of personal data is based on your consent, you have the right to withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You may withdraw your consent by contacting us at geoprem@geoprem.hr or in writing at the Company’s registered office.
10.2. Right of access to personal data
You have the right to request confirmation as to whether we process your personal data and, if so, to obtain access to that data as well as information regarding the purposes of processing, categories of personal data, recipients or categories of recipients, the envisaged period for which the data will be stored or the criteria used to determine that period, the existence of your rights, and the existence of automated decision-making.
You may submit a request for access to your data by email at geoprem@geoprem.hr or in writing to the registered office of GEOPREM d.o.o.
For the purpose of processing your request, we reserve the right to request verification of your identity.
10.3. Right to rectification of inaccurate or incomplete data and right to erasure
If your personal data is inaccurate and/or out of date, you have the right to request that we correct it.
You may submit a request for rectification by email at geoprem@geoprem.hr.
In certain circumstances, you have the right to request the deletion of your personal data, also known as the “right to be forgotten”.
Please note that the right to be forgotten is not an absolute right. In other words, we may refuse your request for erasure if we have a legitimate interest, legal obligation and/or legal right to retain certain data.
You may submit a request for erasure by email at geoprem@geoprem.hr.
For the purpose of processing your request, we reserve the right to request verification of your identity.
10.4. Right to object to processing based on the legitimate interests of the Data Controller
You may object to the processing of your personal data at any time where such processing is based on legitimate interests.
Following an objection, we may no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the data is processed for the establishment, exercise or defence of legal claims.
For the purpose of processing your request, we reserve the right to request verification of your identity.
10.5. Right to information and data portability
We are required to process your personal data transparently and clearly, and you have the right to receive easily understandable information about how we use your data.
For this purpose, we have published this Policy to explain as simply and transparently as possible what data we collect and why.
For any additional questions and/or clarification regarding the protection of your personal data, you may contact us at geoprem@geoprem.hr.
You also have the right to transfer data from our database to another Data Controller. This right applies only to data you have provided to us on the basis of a contract or consent and where the processing is carried out by automated means.
For the purpose of processing your request, we reserve the right to request verification of your identity.
10.6. Right to lodge a complaint with the competent supervisory authority
You have the fundamental right to lodge a complaint with the competent supervisory authority, the Croatian Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb, if you believe that your personal data protection rights have been infringed.
You are also welcome to contact us directly if you believe that we are in any way infringing your rights.
10.7. Right to restriction of processing
You have the right to request restriction of the processing of your personal data where:
A) you contest the accuracy of the personal data, for a period enabling the Data Controller to verify its accuracy;
B) we no longer need the personal data, but you require it for the establishment, exercise or defence of legal claims;
C) you have objected to processing based on legitimate interests, pending verification of whether the legitimate grounds of the Data Controller override your rights; or
D) the processing is unlawful, but you oppose the erasure of the personal data and request restriction of its use instead.
For the purpose of processing your request, we may request verification of your identity.
11. CONCLUSION
Under no circumstances will we misuse your personal data. When processing personal data, we act in accordance with applicable law and the General Data Protection Regulation.
We process personal data only for specified and lawful purposes and respect your rights.
If you have any questions about how we process your personal data or would like to exercise the rights described in this Policy, please contact us at geoprem@geoprem.hr or in writing at the registered office of GEOPREM d.o.o.
