Privacy Policy

This Privacy Policy of the company Magic forest d.o.o. (OIB: 97953104218) is effective from May 1, 2021.

1. In May 2018, a new Data Protection Regulation (GDPR - General Data Protection Regulation) came into force, which grants you greater rights to the protection and privacy of your personal data.

Magic forest d.o.o. informs you with this Privacy Policy how we collect, process, and store personal data. Below you can read the Privacy Policy in its entirety and feel free to contact us with any questions at the email address provided in the Policy.

This Policy describes which data we collect, how we process it, and for what purposes we use it, as well as your rights regarding your data.

The contact person for data protection can be reached via email: email info@project-o2.org tel: +385(0) 91 3459 977

The personal data we collect includes: name and surname, address, contact telephone number, email, personal identification number (OIB), cookies, and other personal data that you or third parties provide to us during business cooperation, such as videos, photographs, etc.

General information about cookies

This website stores small text files called cookies on your computer to improve your browsing experience. This practice is found on at least 90% of websites worldwide, but according to the EU Directive of May 2011, we are required to obtain your consent before storing cookies. By using the website, you agree to the use of cookies, and if you block them, you can still browse the site, although some features may not be available. After May 25 and the start of the application of the GDPR, every website must allow the user to easily withdraw their consent for the use of cookies. To withdraw your consent on our website after clicking 'I Agree', simply click on the 'Cookies - change settings' button and then click 'I do not agree'. It may happen that certain website functionalities become disabled after withdrawing consent for the use of cookies.

A cookie is a small file that a website you visit stores on your computer. A cookie notifies the website that an 'existing' user has reconnected by remembering their settings. Cookies record your preferences and settings, populate web forms, and store information for logged-in users.

Cookies can store a wide range of information, but such information can only be stored if the user permits it – websites cannot access information that the user has not provided, nor can they access other files on the user's computer. Cookies do not contain any personal data or information that could identify you. The user can change their settings online and decide whether to allow or deny requests to store cookies, and whether saved cookies should be automatically deleted upon closing the web browser, etc.

By disabling cookies, you decide whether to allow their storage on your computer. Cookie settings can be controlled and configured in your web browser. For information on cookie settings, select the web browser you are using. Browsers:

Internet Explorer 8 and newer, Firefox 3.5 and newer, Google Chrome 10 and newer, Safari 2 and newer, Opera 10.5 and newer. By blocking cookies, you can still browse websites, but certain functionalities may not be available.

Persistent cookies - Persistent or stored cookies are saved on the disk (your computer) and remain there even after closing the web browser. They store data such as username and password, so you do not have to log in each time you visit a particular site.

Session cookies - Session cookies are temporarily stored on the disk and are deleted after closing the web browser. They allow websites to store temporary data such as items in a shopping cart.

First party cookies - 'First party cookies' come from the website being visited by the user and can be either persistent or session cookies. Websites use these cookies to store information that will be reused the next time the user visits that site.

Third party cookies - Third party cookies come from other, partner websites that you visit. Third parties can collect data about users from various websites and use it for marketing and analytical purposes.

Our website and the use of cookies - We primarily use cookies to enable a better user experience on our website.

Types of cookies we use - Session cookies that expire (and are automatically deleted) when you close your web browser, which we use to enhance the user experience for visitors.

Persistent cookies, which usually have an expiration date far in the future and will remain in your browser until they expire or are manually deleted, are used to better understand user habits so that we can improve the website according to your usage patterns. This information is anonymous.

Third party cookies - There are several external services that store limited cookies for the user. These cookies are not set by our website, but some are used for the proper functioning of certain features that facilitate user access to content. We currently allow:

Social networks: Users can log in and register using their own social network accounts, such as Facebook. Also, sharing articles on social networks sets cookies for the user.

Traffic measurement: This website uses the Google Analytics service for measuring traffic. If you wish to prevent this service from storing cookies, you can disable it at the following link:

https://tools.google.com/dlpage/gaoptout

Additional information on disabling cookies

There are currently several websites that allow you to disable the storage of cookies for various services, and you can find more information at the following links:

https://www.allaboutcookies.org/

https://www.networkadvertising.org/

We process personal data for the purpose of:

• Providing our services, which includes communicating with you regarding the provision of services, responding to your inquiries, entering into contracts, and fulfilling obligations arising from such contracts, as well as issuing invoices for the services rendered.
• For the purpose of marketing communication, including notifications about new services, upgrades to existing services, and events that we organize.
• Your data will be transferred to third parties only when justified by a legal interest to ensure safe and lawful operation (our trusted accounting service which meets the legal requirements in relation to the GDPR) and to fulfill legal obligations (e.g., in the case of tax obligations that may include the transmission of your personal data to the Tax Administration). Your data will be transferred to a third party for the purpose of executing vehicle transportation services and vehicle repair services by the responsible company. We have signed a contract with them and are legally bound by conditions that comply with GDPR requirements and that reflect your data privacy and the security of obligations towards clients.
• Carrying out legal claims and dispute resolution. In order to protect our business and enforce and/or protect our rights, personal data may be disclosed. We will disclose your personal data only in a manner and under conditions as prescribed by law.
• For the purposes of statistical analysis, in order to improve the experience of visiting our website.

The period for which we store personal data is determined by the purpose for which it is processed:

We retain personal data in accordance with the applicable Data Protection Act. We store them for as long as necessary for the purpose for which they are processed or as required by law. Personal data processed on the basis of your consent are stored until you withdraw your consent.

they are necessary for calculating the cost of work, and we can process them only until the statute of limitations applies in accordance with the general regulations governing contractual relations,

• This Privacy Policy of the company Magic forest d.o.o. (OIB: 97953104218) is effective from May 1, 2021.
• in the event that legal proceedings for the forced collection of unpaid claims have been initiated,
• if a complaint regarding a product or service has been lodged within the deadline, until the final resolution of the complaint procedures in accordance with applicable regulations (e.g., the Consumer Protection Act, etc.).

It is possible that, instead of being deleted, the data will be anonymized.

In processing your personal data, we may use service providers outside the EU. We will do so only if there is a decision by the European Commission regarding the adequacy of that third country or if we have agreed with the service provider to adhere to binding data protection regulations.

We treat the personal data that you provide to us via contact forms or email confidentially. Your data is used to process your inquiry. We process your personal data based on your consent.

Protection of personal data:

In order to protect your personal data from unauthorized access, use, or accidental loss, we implement all technical and organizational security measures in accordance with our capabilities and the GDPR, ensuring that only authorized persons have access to your personal data, and only when it is necessary and in accordance with the purpose for which the personal data was collected.

Examples of such measures include:

• monitoring, reviewing, and maintaining IT infrastructure
• making backups
• protecting computers with antivirus software
• rule of opening emails from unknown sources
• etc.

Data collected in electronic form is protected by an SSL certificate that encrypts the data, ensuring that communication between the user's computer and our website occurs via a secure protocol. We take data protection seriously and implement various precautionary measures to secure personal data. Unfortunately, no data transfer over the Internet or any wireless network can be 100% secure. As a result, although we implement reasonable security measures to protect data, we cannot guarantee the security of any information transmitted to or from the website, nor are we responsible for the actions of any third party that receives such information.

Your rights:

Right of access to personal data:

At any time, you may request access to your personal data from us.

Right to rectification (amendment, modification) of inaccurate personal data:

If we process your personal data that is incomplete or inaccurate, you may request at any time that we correct or complete it.

Right to be forgotten, or deletion of personal data:

At any time, you may request the deletion of your personal data, but please note that there may be reasons that prevent immediate deletion, such as legally mandated archiving obligations. You may withdraw the consent you have given at any time.

If you withdraw your consent, we will no longer use your data for the specified purposes, which may result in the inability to use certain additional benefits associated with them.

If you wish to give your consent again, you can do so by providing consent again. ovdje

The processing of data is necessary for concluding business cooperation with us or fulfilling a concluded contract. If you do not provide us with such data, we will not be able to fulfill our obligations to you or conclude a contract with you.

Right to object to the processing of personal data:

If we process your data for the performance of tasks carried out in the public interest or by public authorities, or if we rely on our legitimate interests during processing, you may object to such processing if there is an interest in protecting your data.

Right to restriction of processing:

You may request from us a restriction on the processing of your data:

• if you contest the accuracy of the data during a period that allows us to verify the accuracy of such data,
• if the data processing was unlawful, but you refuse deletion and instead request a restriction on its use,
• if the data is no longer necessary for the intended purposes, but you still require it for the assertion of legal claims, or
• if you have lodged an objection regarding the processing of such data,

Right to lodge a complaint:

If you believe that we have violated Croatian or European data protection regulations in the processing of your data, please contact us via the email address provided so that we can clarify any issues. You also have the right to lodge a complaint with the data protection authority, or in the event of a change in applicable regulations, with another body that takes over its jurisdiction, and from May 25, 2018, with the supervisory authority within the European Union.

If you wish to exercise any of the aforementioned rights or have questions regarding your personal data, please contact us by sending a written request concerning the exercise of rights related to personal data to the email address of the Data Controller: info@project-o2.org

For reliable identification, in the event of exercising your rights related to personal data, we may request additional information to verify your identity, and we may refuse to process your request in case of evident intent of misuse.

We will respond to your request for exercising your rights, concerning the aforementioned personal data, without undue delay and in any case within 30 days of receiving your request.