Personal Data are collected and processed in accordance with Regulation (EU) 2016/679 and the Law on the Implementation of the General Data Protection Regulation.

The company, ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka, Vat ID: 88384451537 (hereinafter referred to as the Controller) collects and processes specific personal data in accordance with this Personal Data Protection Statement.

Personal Data Protection Statement is effective from 25 May 2018.

With this Personal Data Protection Statement, the Controller in order to ensure fair and transparent processing, wants to provide respondents with clear information about the processing and protection of their personal data and enable them to easily monitor and manage their personal data.

The Controller shall process your personal Data in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and national legislation arising from that Regulation, applying appropriate technical and securtiy measures to protect personal data from unauthorized access, misuse, discovery, loss or destruction.

General information

The Controller is committed to protecting the privacy and personal information.

With this Statement, the Controller describes what data it collects, how it processes it, for what purpose it uses it, as well as what your rights are regarding the processing of personal data.

The Controller collects and processes personal data primarily so it can provide services in its business.

Therefore, the Controller has a need to collect and process certain types of data on individuals who come into contact with him. The Controller handeles this personal data adequately, regardless how this data is collected, recorded, stored, and used – on paper, computer, or other material.

Collected data are stored adequately and the Controller ensures their confidentiality. Collected data shall not be transferred to the third parties and/or recipients without the user's permission, except in cases when it's necessary to perform Controller's statutory obligation, in cases of performing its own activities, or if there is a necessity in performing tasks in the public interest or in casec when the user has published this data himself, as well as in other competent regulation.

If you have any question regarding the protection of personal data please contact the Controller as the person responsible for the protection of personal data by e-mail: aspar-rigging@aspar-rigging.hr or by mail to: ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka.

We reserve the right to change this Statement at any time, for any reason. Respondents will be notified directly of any changes to this Personal Data Statement.

Type of personal data collected and used

• your basic data: forname and surname, address of residence, personal identification number, Tax number and contact data (e-mail address, mobile phone number), information on type of contractual relationship and content.
• other personal data that you or third persons can give when communicating by e-mail or phone regarding your inquires, which then we use when formulating quotations or making a contract or during the contractual relationship, for instance information from personal identification document or other identification document, bank account number, name and/or type of boat and similar. This does not include data on racial or ethnic origin, political or religious beliefs or worldview, genetic data or health data
• other non-personal information that you provide to us voluntarily, for example by answering questions in a survey.

Source of personal data

The stated personal data are usually collected from the respondents. The Controller processes personal data that are necessary for the above purposes and when they are not collected directly from the data subject, which we have received from third parties with whom the respondent is in a particular relationship, e.g. in the case of companies or skippers who are looking for offers for shipowners.

Transfering personal data

The Controller undertakes to keep your personal data in accordance with the highest applicable standards, which means that we will not disclose or make available to third parties, except when necessary for the purpose of carrying out its own activities, legitimate interest or with your consent:

• that the respondent has given consent to the processing of his or her personal data for one or more specific purposes
• that processing is necessary for the performance of the contracts to which the respondent is a party
• that processing is necessary to comply with the legal obligations of the Controller
• that the processing is necessary to protect the key interests of the respondent or other natural person
• that the processing is necessary for the performance of tasks in public interest or in the exercise of the official authority of the Controller
• that the processing is necessary for the legitimate interests of the Controller or a third party, except when those interests are stronger than the interests or fundamental rights and freedoms of the respondents who require the protection of personal data.

The period in which personal data will be stored

The Controller will keep your personal data until the purpose for which they were collected and all contractual rights and obligations, i.e. until the expiration of the deadlines prescribed by the positive regulations of the Republic of Croatia. The period in which personal data will be stored also depends on the legal obligation to keep the data.

Your rights

Right of access: each respondent has the right to request details about the personal data that the Controller processes in relation to him / her and the way in which he / she is processed.

Right to correction: If the Controller processes your personal data that is incomplete or inaccurate, you may at any time ask the Controller to correct or supplement it. Please inform us in case of any changes in your personal data by e-mail: aspar-rigging@aspar-rigging.hr or by mail to: ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka.

Right to erasure (“right to be forgotten”): You can ask the Controller to erase your personal data if he or she has processed it unlawfully or the processing constitutes a disproportionate interference with your protected interests. Please note that there are reasons that prevent immediate deletion, e.g. in the case of statutory archiving obligations.

Right to limit processing: you can ask the Controller to restrict the processing of your data:

• if you dispute the accuracy of the data during a period that allows the Controller to verify the accuracy of that data;
• if the data processing was illegal, but you refuse to delete it and instead request a restriction on data processing;
• if the data are no longer needed for the intended purposes, but are still needed to meet legal requirements;
• if you have complained about the processing of this data.

Right to data transfer: you can ask the Controller to provide you with the data entrusted to him in a structured form, in the usual machine-readable format if we process this data on the basis of the consent you have given and which you can revoke or because of executing the contract performed using automated processes.

In certain circumstances, each respondent also has the right to request the cessation of any unauthorized transfer of his personal data to third parties and to require that the Controller not transfer personal data relating to him to third parties.

Right to object: you have the right to object to the processing of personal data at any time, if the processing is based on our legitimate interests, including the creation of a profile or if we process your data for direct marketing purposes;

Right to complain: if you believe that the processing of your personal data has violated the General Data Protection Regulation or other regulations related to personal data, please contact our Personal Data Protection Officer to clarify the disputed issues. You certainly have the right to lodge a complaint with the national supervisory authority (the Data Protection Agency) or the supervisory authority within the EU.

Right to withdraw consent: when processing is based on consent, you have the right to withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before it is withdrawn.

Abuse of rights: If you exercise any of these rights too often and with obvious intent to abuse, the Controller may charge an administrative fee or refuse to process your request.

When you object to the processing of your personal data by the Controller or when you withdraw your previously given consent, it is important that you understand how the Company may continue to process your personal data to the extent required or otherwise permitted by law.

Achieving rights: If you wish to exercise any of these rights, please contact us using a written request to; aspar-rigging@aspar-rigging.hr or by mail to: ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka.

Authentication: In case of doubt, we may request additional information to verify your identity. It serves to protect your rights and the private sphere. If your requests are clearly unfounded or excessive, especially due to their frequent recurrence, we may charge an administrative fee or refuse to comply with the request.

If you withdraw your consent, we will no longer use your information for the stated purpose. If you want to give your consent, you can also do so again.