Privacy Policy

RAW BAG® , vl. Mirjam Krajina Obrt za dizajn, proizvodnju i trgovinu, HR39494845451, as the manager of processing your personal data, uses and protects all information provided by Users when using the website www.raw-bag.com and other services, especially regarding the processing of personal data in the provision of its services.

Personal data is any information that relates to a specific natural person or an identifiable natural person. In particular, personal data is considered to be all data used to determine the user’s identity (for example, first and last name, e-mail address, residential address, etc.).

Processing of personal data is any action or set of actions performed on personal data, whether by automatic means or not, such as collection, recording, organization, storage, adaptation or modification, retrieval, inspection, use, disclosure through transmission, publication or otherwise made available, classification or combination, blocking, deletion or destruction, and implementation of logical, mathematical and other operations with this data.

We collect your personal data, among other things, in the following cases:

• if you contact us directly via website to request information or an offer for our services, via our contact form
• if you respond to our direct marketing campaigns, for example by filling out the contact form for data entry on our website
• if our partners provide us with your data in a permitted manner
• if you participate in prize games organized by us
• if you are under 16 years of age, please do not provide us with any information without the consent of a parent or guardian.

The use of personal data in accordance with the regulations on the protection of personal data must be justified on the basis of one of the legal bases, and here we determine the bases for the use of personal data that we collect through the website.

Justified bases for data processing are, among others, legitimate interest, contractual obligation, legal basis and consent. We use processing based on legitimate interest to promote and provide information about our services, in order to maintain the highest standards of selling products from our offer. The fundamental rights and freedoms of existing and potential users are measured in relation to interest in processing data for the stated purpose.

Personal data can be transferred to third parties, provided that there is a justified basis for the transfer, such as the fulfilment of a service, the forwarding of data concerning and related to the delivery of goods, transportation and the like.

Consent for direct marketing, which we may ask you for using the same, can be withdrawn at any time.

We are subject to the laws of the Republic of Croatia, as well as supranational regulations, and we are obliged to adhere to them, including the provision of your data to law enforcement authorities, regulatory and judicial authorities, and third parties. parties in connection with proceedings or investigations anywhere in the world where requested. Where permitted, we will make such a request directly to you or notify you in advance of a response, unless it would affect the prevention or detection of crime.

Providing personal data for the purpose of compliance with binding requests for your data represents a legal obligation that depends on the specific request.

We use various security measures, including encryption and authentication, to protect and maintain the security, integrity and availability of your data.

Among other things, we use the following measures:

• strictly limited personal access to your data according to the principle of “necessary access”
• safe transfer of collected data,
• installation of firewalls on IT systems for the purpose of prohibiting unauthorised access
• permanent monitoring of access to IT systems in order to detect and prevent misuse of personal data.

All your data is stored on our secure servers and the secure servers of our partners and is accessed and used in accordance with our rules and security standards. Protection of the privacy of your data is permanent, and we take all necessary measures for their protection. We process personal data in a secure manner, including protection against unauthorized or illegal processing and loss.

by registering or filling out any contact form on the website https://raw-bag.com, we will ask for your consent to process your personal data specified in the contact form for a specific purpose/s. The purposes that we can highlight in the contact forms require a separate consent for each.

We undertake to protect the privacy of your personal data and to treat them in accordance with the General Data Protection Regulation (679/2016) of the EU, the Law on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018 ) and other applicable regulations. The collected personal data of users and website visitors may not and will not be used or made available to third parties without authorization, except in cases where a special law allows it, if it is our legal obligation or is necessary for the purpose of realizing contractual obligations.

We undertake not to misuse personal data from the contact form or collected through cookies, nor to hand them over to third parties without your permission, except in cases where it is expressly prescribed the law and in cases where it is necessary to fulfill obligations. Personal data is considered to be all data used to determine the identity of the User (for example, first and last name, e-mail address, residential address, etc.), which are used to respond to the User’s inquiries, statistics, and possibly send special offers. and newsletters, with specially obtained consent.

All user data is strictly protected and is available only to employees who need this data to perform their work. All employees and business partners are responsible for respecting the principles of privacy protection. We undertake to protect your personal data in such a way that we only collect basic data that is necessary to fulfil the purpose of the given consent or legitimate interest, contractual or legal basis.

The data that is automatically recorded when accessing the website (IP address, domain name, browser type, number of visits, time spent on the pages, etc.) will be used exclusively for the purpose of evaluating the number of visits to the website and in order to improve its content and functionality, i.e. for statistical purposes.

We inform the Users about the way of using the collected data and use the same for marketing campaigns only with specially obtained consent.

According to the prevailing national and supranational legislation, in order to protect the confidentiality of personal data, we are especially committed to handling your data in accordance with the law and in good faith, to collect data exclusively in precisely determined and legitimate purposes, not to forward data to any third party without your prior consent, not to forward personal data to countries outside the EU if that country does not provide an adequate level of data protection; ensure appropriate, safe storage of personal data, in such a way that it does not exceed the purpose for which the data was collected and for which it is processed; ensure the accuracy of personal data; to ensure the processing of personal data only for the time and purpose for which it is necessary; undertake all necessary and appropriate technical and organisational measures to prevent the destruction, damage or loss of the User’s personal data.

Your rights are as follows:

1) The right to access data – You have the right to request information on whether we are processing your personal data, which data we are processing, and to request access (insight) to your personal data that we are processing. If it is about a larger amount of data, we could ask for a more precise specification of the request for the delivery of certain groups of data.

Right to rectification – If you notice that we are processing inaccurate or incomplete data about you, or if you want to change it, you have the right to request the correction of that data or the addition of incomplete personal data. In order to ensure that we always process only accurate personal data, it is necessary that you notify us of any changes to them without delay.

3) Right to erasure – Deletion of personal data can be requested, for example, if you have withdrawn your consent to the processing of certain data, when your personal data are processed illegally or when they are no longer necessary in relation to the purposes for which they were collected or in any way converted. However, please note that we will not be able to delete the data if it is necessary to fulfil legal obligations, contractual obligations or other legal bases from the General Data Protection Regulation.

In all situations where it is possible, we will irreversibly delete all your personal data from our systems and leave only general statistical data that cannot be linked to your identity in any way.

4) The right to restriction of processing – You have the right to obtain a restriction of the processing of your personal data, which can be requested, for example, if you have filed an objection to data processing, if you have doubts about the accuracy of the personal data being processed or the legality of their processing, but You don’t want that data to be deleted, or do you still have it? necessary for the fulfillment of legal requirements.

5) The right to data transfer – If the processing is based on your consent or is carried out for the purpose of executing a contract concluded with you, and at the same time is carried out by automated means, you have the right to receive your personal data that we have received from you. If you request it, we will transfer your personal data directly to another data controller, if the same is technically feasible.

6) The right to object – At any time, considering your particular situation, you are authorized to file an objection to the processing of personal data relating to you, which is why we will limit the processing thereof. Also, we will delete the mentioned data and stop processing it, unless we prove that there are reasonable and justified legal grounds for the processing. In addition, at any time there? the right to object to the processing of your personal data for the purpose of direct marketing. After submitting a complaint, your personal data will stop being processed for the stated purpose.

7) The right to withdraw consent – If the processing of your personal data is based on your consent, you have the right to withdraw it at any time, without any negative consequences.

In the event that you no longer want us to process your data in any way, request the deletion, correction or transfer of your data, inform us about this by e-mail mail messages to the e-mail address: info@raw-bag.com.

We could contact you to verify the authenticity of the request.

You can ask us at any time:

• difficulty of access to public internal acts;
• Confirmation of whether data is being processed in relation to you and the possibility of viewing personal data contained in the personal data storage system;
• Forwarding of your personal data contained in the data storage system;
• Providing a list of third parties to whom personal data was transferred, when it was transferred to them, on the basis of what and for what purpose;
• Providing information about the choices on which the records are based, which personal data the storage system contains about the individual and the method of processing;
• Providing information on the purpose of processing and the type of personal data being processed, as well as all necessary explanations in this regard;
• Explanation of technical or logical-technical decision-making procedures if it performs automated decision-making by processing personal data of an individual.

The storage period for User data submitted through the contact form lasts 5 (in words: five) years, or until the request for deletion is received by the individual to whom the personal data refers, after which the personal data is deleted, while other data collected through cookies are stored in accordance with the Cookie Policy as specified for each separate purpose. We keep personal data for longer than the specified period only if this is required by the regulations in force in the Republic of Croatia or supranational legislation.

For statistical purposes, we store the data indefinitely.

Personal data that are no longer needed are either irretrievably anonymized or destroyed in a secure manner.

If you have objections to the processing of your data, you can submit your objection to the competent state body, i.e. the Personal Data Protection Agency, Zagreb, Martićeva 14, in accordance with the General Regulation on Data Protection. protection of personal data and the Law on the Implementation of the General Regulation on Data Protection.