ENHR

Privacy Policy

Effective from 25 May 2018.

Personal data are collected and processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation) and the Croatian Act on the Implementation of the General Data Protection Regulation.

ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka, Croatia, VAT ID: 88384451537 (the “Controller”) collects and processes certain personal data in accordance with this Privacy Policy.

Through this Privacy Policy, the Controller — in order to ensure fair and transparent processing — provides you with clear information about the processing and protection of your personal data and enables you to easily monitor and manage it.

The Controller processes your personal data in accordance with the General Data Protection Regulation and the national legislation arising from it, applying appropriate technical and security measures to protect personal data from unauthorised access, misuse, disclosure, loss or destruction.

General information

The Controller is committed to protecting your privacy and personal information. This Policy describes what data we collect, how we process it, for what purpose we use it, and what your rights are regarding the processing of personal data.

The Controller collects and processes personal data primarily in order to provide the services within its business, and therefore needs to collect and process certain data about individuals who come into contact with it. This personal data is handled appropriately regardless of how it is collected, recorded, stored and used — on paper, on a computer, or on other media.

Collected data is stored securely and kept confidential. It will not be transferred to third parties without your permission, except where necessary to fulfil a statutory obligation, to perform the Controller's own activities, where required to carry out a task in the public interest, where you have made the data public yourself, or as otherwise required by applicable regulations.

If you have any questions regarding the protection of personal data, please contact the Controller by e-mail at aspar-rigging@aspar-rigging.hr or by post to ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka.

We reserve the right to change this Policy at any time. Respondents will be notified directly of any material changes.

Personal data we collect and use

We may collect and process the following categories of data:

  • Your basic data: first name and surname, address of residence, personal identification number (OIB), tax number and contact details (e-mail address, mobile phone number), and information on the type and content of the contractual relationship.
  • Other personal data that you or third parties provide when communicating by e-mail or phone regarding your enquiries, which we use when preparing quotations, concluding a contract, or during the contractual relationship — for example information from an identification document, bank account number, and the name and/or type of vessel. This does not include data on racial or ethnic origin, political or religious beliefs, genetic data or health data.
  • Other non-personal information that you provide voluntarily, for example by answering questions in a survey.

Source of personal data

Personal data is usually collected directly from the respondents. Where it is not collected directly from you, we may receive it from third parties with whom you are in a particular relationship — for example companies or skippers requesting quotations on behalf of vessel owners. We process only the personal data necessary for the purposes described above.

Transfer of personal data

The Controller keeps your personal data in accordance with the highest applicable standards and will not disclose or make it available to third parties, except where necessary to carry out its own activities, for a legitimate interest, or with your consent, on the following legal bases:

  • you have given consent to the processing of your personal data for one or more specific purposes;
  • processing is necessary for the performance of a contract to which you are a party;
  • processing is necessary to comply with the Controller's legal obligations;
  • processing is necessary to protect the vital interests of you or another natural person;
  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
  • processing is necessary for the legitimate interests of the Controller or a third party, except where those interests are overridden by your interests or fundamental rights and freedoms.

How long we keep your data

The Controller retains your personal data until the purpose for which it was collected has been fulfilled and all contractual rights and obligations have ceased, i.e. until the expiry of the periods prescribed by the applicable regulations of the Republic of Croatia. The retention period also depends on any legal obligation to keep the data.

Your rights

Subject to the conditions of the General Data Protection Regulation, you have the following rights:

  • Right of access: you may request details about the personal data we process about you and how it is processed.
  • Right to rectification: if we process personal data about you that is incomplete or inaccurate, you may ask us to correct or complete it at any time.
  • Right to erasure (“right to be forgotten”): you may ask us to erase your personal data where it has been processed unlawfully or where processing constitutes a disproportionate interference with your protected interests. Note that statutory archiving obligations may prevent immediate deletion.
  • Right to restriction of processing: you may ask us to restrict processing — for example if you contest the accuracy of the data, if processing was unlawful but you oppose erasure, if we no longer need the data but you need it to establish legal claims, or if you have objected to processing.
  • Right to data portability: where we process your data based on consent or for the performance of a contract by automated means, you may ask us to provide it to you in a structured, commonly used, machine-readable format.
  • Right to object: you may object at any time to processing based on our legitimate interests, including profiling, or to processing for direct marketing purposes.
  • Right to lodge a complaint: if you believe the processing of your personal data infringes the General Data Protection Regulation, please contact us. You also have the right to lodge a complaint with the national supervisory authority (the Croatian Personal Data Protection Agency, AZOP) or another EU supervisory authority.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Exercising your rights

To exercise any of these rights, please contact us in writing at aspar-rigging@aspar-rigging.hr or by post to ASPAR-RIGGING d.o.o., Kalina 4, 51000 Rijeka.

Authentication: in case of doubt, we may request additional information to verify your identity, in order to protect your rights and privacy. If a request is manifestly unfounded or excessive — in particular because of its repetitive character — we may charge a reasonable administrative fee or refuse to act on it.

If you withdraw your consent, we will no longer use your data for the stated purpose. You may give your consent again at any time.