BASIC INFORMATION

The data controller is CHROMOS boje i lakovi d.d., Radnička cesta 173d, 10 000 Zagreb, Croatia.

Data Protection Officer (DPO): gdpr@kansai-helios.eu

Definitions

GDPR or General Regulation: Refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) – terms defined in the GDPR are also used in this policy.

WHAT ARE MY RIGHTS AND HOW CAN I EXERCISE THEM?

At any time, you may exercise the following rights regarding your personal data with us:

You have the right to:

  • · access your personal data;
  • · correct or update your personal data;
  • · delete your personal data when there is no longer a legal basis (or legal obligation) for its storage or when you have given us your consent;
  • · restrict the processing of personal data (in certain cases);
  • · object – when processing is based on legitimate interests;
  • · data portability – in the case of a contract or personal consent and when processing is carried out by automated means.

You can exercise your rights in writing to the data processor or via email at gdpr@kansai-helios.eu with the subject: GDPR – www.chromos.eu – “Your Country”. In certain cases, we may ask you to verify your identity.

Right to Complain: If you believe that your rights are not being properly respected, we kindly ask you to contact us first. If that is not sufficient, you may file a complaint or report to the competent data protection authority: https://azop.hr

PURPOSES OF PROCESSING

If you filled out the contact form

We appreciate every message you send. In this case, our communication will be based on our legitimate interest, which is reflected in the communication between the Data Processor and the public. If you choose not to disclose your personal data, unfortunately, we will not be able to respond to your inquiry. You may end the communication at any time (by notifying us), which will also result in the deletion of your personal data.

___________

Details

Legal basis: Legitimate interest (communication with the public) – Article 6(1)(f) GDPR

GDPR

Categories of recipients: Web hosting provider, content delivery network (Cloudflare)

Retention period: Until the end of the communication. You may request to end the communication earlier – in that case, your personal data will be permanently deleted (unless there is another legal basis for further processing, e.g., a contract).