Privacy and Personal Data Protection Policy
Handmade Corner by Lucy, a design, production and retail business
GENERAL PRINCIPLES
The Handmade Corner by Lucy business takes all necessary technical and organizational measures in line with best practice and the obligations prescribed by the Croatian laws that govern its activities, and in particular, with regard to the protection and processing of personal data, those prescribed by the Personal Data Protection Act and the General Data Protection Regulation (EU 2016/679) – GDPR.
The information system used by the Handmade Corner by Lucy business is protected by state-of-the-art encryption and security standards.
The specific purpose and methods of processing your personal data largely depend on the type of business relationship on the basis of which the data is collected. In our business, we follow the fundamental principles of personal data protection, which means that data is processed lawfully, transparently and fairly, that processing is limited to the purpose for which the data was collected, and that only the data necessary for that purpose is processed.
Your personal data is kept only as long as necessary to fulfill the purpose of processing, except where certain legal regulations require personal data to be stored for longer, or where this is determined by the business's legal obligations.
Access to some of your personal data may be granted only to those processors who, as needed, are involved in intermediation and in ordering, making and delivering products, such as business partners, suppliers and courier services.
KEY INFORMATION
The data controller is the Handmade Corner by Lucy business, OIB 16238118224, MB:, authorized person Anita Jurić, OIB: 16238118224
You can send your inquiries to:
Handmade Corner by Lucy, a design, production and sales business
Oko sv.Kaje 16, 21210 Solin, or by email: shop@example.com
Purpose and legal basis for processing personal data
As the controller of personal data, the Handmade Corner by Lucy business protects your privacy and processes only the personal data that is necessary and obtained as part of its business activities, whether the data was obtained from you personally, from third parties or from publicly available sources, for the following purposes:
1. fulfilling contractual obligations – when processing is necessary for the performance of a contract to which you are a party or for taking steps at your request before entering into a contract
2. pursuing legitimate interests – when necessary, personal data is also processed outside a specific contractual relationship in order to pursue the legitimate interests of the Handmade Corner by Lucy business. For example, such a legitimate interest may be:
• conducting court proceedings and keeping records of them
• detecting perpetrators of criminal offenses and preventing fraud
• protecting people and property
• fulfilling your requests or the business's internal needs, such as auditing and data analysis
• responding to your inquiries and comments
3. complying with legal obligations – given its various business activities, the Handmade Corner by Lucy business must comply with numerous legal obligations, such as acting in accordance with the Anti-Money Laundering and Terrorist Financing Act, the Real Estate Brokerage Act and others.
4. processing personal data for one or more specific purposes only after receiving your consent to process personal data for such purposes. Your consent complies with the relevant provisions of the GDPR mentioned above, is unconditional and freely given. You also retain the right to withdraw it at any time.
What personal data do we collect and how do we obtain it?
The Handmade Corner by Lucy business processes personal data collected during the business relationship, such as first name, last name, OIB (personal identification number), address, etc. However, where necessary for the business's activities and unrelated to a specific contractual or business relationship, data is collected from public sources (Court Register, FINA) or legitimately disclosed to the business by contractual partners or third parties.
Are you obliged to provide us with personal data?
You are not obliged to provide your personal data, but please note that in that case the Handmade Corner by Lucy business will not be able to fulfill its legal obligations or enter into a legitimate business and contractual relationship with you.
Data retention period
The Handmade Corner by Lucy business will keep your personal data only as long as necessary to fulfill a contractual or legal obligation or the legitimate interest of the business, except in the case of processing based on consent, where processing stops when you withdraw your consent. You can withdraw your consent at any time by sending a request to the email address shop@example.com, bearing in mind that withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
If your personal data is no longer needed to fulfill the purposes stated above, it will be destroyed, unless further retention is required by law.
Who receives your personal data?
The Handmade Corner by Lucy business undertakes to safeguard your personal data and will not make it available to third parties without your specific consent, except:
• to service providers we engage as processors for tasks related to the performance of a contract to which you are a party
• to competent public authorities for the purpose of carrying out tasks within their competence
• when the data is required by a court or the competent state attorney's office, or by other bodies in equivalent legal proceedings
• when there is a legal obligation to provide such data
What are your rights regarding the processing of personal data?
Depending on the legal basis for processing, your rights may include:
• requesting access to the personal data relating to you, i.e. you have the right to information on the scope of the data collected, the purpose of processing, the categories of personal data processed, the recipients to whom the data is disclosed and the storage period
• requesting the correction of inaccurate or the completion of incomplete personal data
• objecting to the processing of personal data
• requesting the erasure of data when the purpose of processing has been fulfilled or when you withdraw consent as the only basis for processing, when necessary to comply with legal obligations to which the Handmade Corner by Lucy business is subject, and in the case of any unlawful processing. The right to erasure is not an absolute right and does not apply, for example, where processing is necessary to exercise the right to freedom of information and expression, to comply with legal obligations to which the Handmade Corner by Lucy business is subject, or to establish, exercise or defend legal claims, and similar
• restricting data processing if you contest the accuracy of the data, until its accuracy is verified
• transferring data to another controller if the processing is based on consent or the performance of a contract to which you are a party, or if the processing is automated and it is technically feasible
• filing a complaint with the national supervisory authority
Requesting access to or correction of your personal data
If you would like access to your personal data or believe that there has been an irregularity in the processing of personal data, please contact us at the address or email address given above.
Objecting to the processing of personal data
If you believe that the Handmade Corner by Lucy business has no legal basis to process your personal data, you can object at any time at the address or email address given above.