Data privacy policy

MELLI AROMATICA doo as the Manager of the collection (hereinafter: manager) protects your privacy, which is made possible by the best and safest way to use the Internet. This document refers to the website https://www.melliaromatica.com/ and the management of the method of data collection and its use.

To help us protect your privacy, please read this text in its entirety to understand what information we collect from you and how we use it. In the sense of this text, we use the legal name Respondent for you as website users.

All questions regarding data confidentiality can be sent to the e-mail address: hello@melliaromatica.com or by contacting the Personal Data Protection Officer: Melli aromatica doo, Ljudevita Šmidhena 1a, 10430  Samobor.

Collection of personal data

MELLI AROMATICA doo collects personal data such as e-mail address, name, home or business address and telephone number, data received with your inquiry and when registering for a purchase on our site. MELLI AROMATICA doo also automatically collects data about your computer's hard drive or software. This data may include: your IP address, browser type, domain name, access time and website addresses. This data is used by MELLI AROMATICA doo to be able to offer its services, maintain their quality, and obtain general statistical data related to the use of the website.

Use of your personal information

MELLI AROMATICA doo collects your personal data and uses it to maintain the website and provide you with the services you are looking for. MELLI AROMATICA doo will not forward data to third parties, nor sell or rent user lists to third parties, unless it has your permission.

MELLI AROMATICA doo stores your personal data in accordance with the deadlines prescribed by binding legal regulations. If deadlines are not prescribed, then as much as is necessary to achieve the Purpose for which they were collected, including applicable statutes of limitations. After the expiration of certain deadlines, Personal Data is deleted or destroyed in another suitable way.

We inform you that in the event of a break-in to our system and theft of personal data, you will be notified within 72 hours. We inform you that you have the right to access your personal data that we have collected, processed and stored from you.

Registration on our website

The respondent has the option of registering on the leader's website with his personal data. Which personal data is transmitted to the controller is determined by the respective entries used for registration. Personal data entered by the respondent is collected and stored exclusively for internal use by the manager and for his own purposes.

By registering on the host's website, the date and time of the IP address assigned by the Internet Service Provider (ISP) and used by the respondent are also stored. The storage of this data takes place in the background, as this is the only way to prevent abuse of our services and, if necessary, to enable the investigation of committed violations. The storage of this data is necessary for the manager's insurance. This data is not transferred to third parties, unless there is a legal obligation to transfer data or if the transfer serves the purpose of criminal prosecution.

The registration of respondents, along with the voluntary indication of personal data, is necessary to enable the manager to offer content or services that can only be offered to registered users due to the nature of the subject. Registered persons can at any time change the personal data provided during registration or completely delete them from the manager's personal data collection. The manager of personal data processing must at all times provide information upon request to each respondent about what personal data is stored about the respondent. Furthermore, the manager of the collection of personal data will correct or delete personal data at the request or indication of the data holder (respondent), provided that there are no legal storage obligations.

Possibility of contact through the website

The website of the company MELLI AROMATICA doo contains information that enables quick contact via electronic media as well as direct communication that includes an email address. If the respondent contacts the manager of personal data processing via email or contact form, the transferred personal data is automatically saved. Personal data transferred voluntarily by the respondent to the manager of personal data processing are automatically stored for the purpose of processing or further communication with the respondent. There is no transfer of this type of personal data to a third party.

Routine deletion or blocking of personal data

The manager of personal data processing will process and keep the personal data of the respondent only for the time necessary to achieve the goals of keeping personal data, or until the deadline allowed by the EU Legislation or other legislators under the jurisdiction of the manager of personal data processing. If the reason for storing personal data cannot be fulfilled or the storage period determined by EU Legislation or other competent legislators expires, the personal data of the subject will be routinely blocked or deleted in accordance with legal requirements.

Social networks

Our site contains buttons from social media networks with which you can recommend MELLI AROMATICA doo offers. If you click on such a button, you may transmit the following data to website operators: IP address, browser and operating system information, screen resolution, installed browser plugins such as Adobe Flash Player, origin of the visitor, URL of the current page.

Rights of respondents

THE RIGHT TO CONFIRM PERSONAL DATA

Every respondent has the right, guaranteed by EU legislation, to receive confirmation from the manager of personal data processing MELLI AROMATICA doo whether his or her personal data is being used or processed. If the respondent wishes to use this right to confirmation, he or she can at any time contact the manager of personal data processing at the e-mail address hello@melliaromatica.com or by contacting the Personal Data Protection Officer: Ljudevita Šmidhena 1a, 10430 Samobor

RIGHT OF ACCESS TO PERSONAL DATA

Every respondent has the right, guaranteed by EU legislation, to receive free information about their stored personal data, as well as a copy of the requested personal data, at any time from the manager of personal data processing. Furthermore, European provisions and directives enable the respondent to access the following information:

- purpose of personal data processing;

-type of requested personal data;

-recipient or type of recipient with whom personal data is shared, especially recipients from third countries or international organizations;

-where possible, the expected period of personal data storage, or in case of impossibility, the criteria that determines that period;

- the existence of the respondent's right to request from the manager of personal data processing the correction or deletion of personal data, restriction of the processing of the respondent's personal data or the respondent's right to object against the processing of personal data;

- existence of the right to submit an appeal to the supervisory authority;

- if the personal data were not collected directly from the respondents, available information about the source of the personal data;

- the existence of an automated decision-making process referred to in Article 22, Paragraphs 1 and 4 of the General Regulation on the Protection of Personal Data, and in this case available information on the logic of automation, as well as the importance and expected consequences for the respondent.

Furthermore, the subject has the right to information if his or her personal data is transferred to third countries or international organizations. In this case, the respondent has the right to information about the security measures implemented in data transmission.

If the subject wants to use this right of access, he can at any time contact the manager of personal data processing by e-mail hello@melliaroamtica.com or by contacting the Personal Data Protection Officer: Ljudevita Šmidhena 1a, 10430 Samobor.

RIGHT TO CORRECTION OF PERSONAL DATA

Every respondent has the right, guaranteed by the EU Legislation, to obtain correction of inaccurate personal data at any time from the manager of personal data processing. Bearing in mind the purpose of personal data processing, the respondent has the right to have his/her incomplete personal data completed, among other things, by means of a supplementary statement.

If the respondent wants to use this right to correction, he can at any time contact the manager of personal data processing by e-mail hello@melliaroamtica.com or by contacting the Personal Data Protection Officer: Ivan Gorana Kovačića 5, 10430 Samobor.

RIGHT TO DELETE PERSONAL DATA (RIGHT TO BE FORGOTTEN)

Every respondent has the right, guaranteed by European legislation, to request the deletion of personal data related to the respondent at any time from the manager of personal data processing without delay. The manager of personal data processing has the obligation to delete personal data without delay where at least one of the conditions is applicable, as long as the processing is not necessary:

-Personal data is no longer necessary in terms of the purpose for which it was collected or processed.

- The respondent has withdrawn consent for the processing of personal data based on Article 6, Paragraph 1 or Article 9, Paragraph 2 of the General Regulation on the Protection of Personal Data, and where there is no longer a legal basis for data processing.

- The respondent objects to data processing according to Article 21, Paragraph 1 of the General Regulation on Personal Data Protection, and there is no legal basis for data processing, or the respondent objects to data processing according to Article 21, Paragraph 2 of the General Regulation on Personal Data Protection.

- Personal data were processed illegally.

-Personal data must be deleted according to the legal obligation under EU Legislation or the laws of the member state of which the personal data controller is a citizen.

-Personal data was collected in connection with the offer of information society services according to Article 8, Paragraph 1 of the General Regulation on the Protection of Personal Data.

If at least one of the above-mentioned reasons is applicable, and the respondent requests the deletion of personal data collected by the website of MELLI AROMATICA doo, he or she can contact the manager of personal data processing by e-mail hello@melliaroamtica.com or by contacting the Personal Data Protection Officer: Ljudevita Šmidhena 1a, Samobor.

The manager of personal data processing shall ensure that the deletion of personal data is carried out immediately.

In places where the manager of personal data processing has allowed the publication of personal data, and according to Article 17, Paragraph 1, the deletion of said personal data is mandatory, the manager of personal data processing will take reasonable steps, including technical measures, taking into account the technical feasibility and costs of application, in order to informed other managers of personal data processing that the respondent requested the deletion of all links, copies or replicas of personal data, until their processing is no longer necessary. The manager of personal data processing on the website of the company MELLI AROMATICA doo will ensure the implementation of the above measures in each individual case.

THE RIGHT TO LIMIT THE PROCESSING OF PERSONAL DATA

According to EU legislation, each data subject has a guaranteed right to obtain from the personal data controller the right to limit the processing of personal data in cases where the following is applicable:

The accuracy of the personal data is contested by the respondent, which enables the personal data controller to verify the accuracy of the personal data.

The processing of personal data is illegal, and the respondent objects to the deletion of personal data and instead requests the restriction of the use of said personal data.

The personal data controller no longer needs the personal data for processing, but the data subject needs them for the establishment, implementation or defense of legal claims.

The respondent objected to the processing of personal data according to Article 21, Paragraph 1 of the General Regulation on the Protection of Personal Data pending verification of whether the legal basis of the personal data processing manager overrides that of the respondent.

If at least one of the above-mentioned reasons is applicable, and the respondent requests the restriction of the processing of personal data collected by the website of MELLI AROMATICA doo, he or she can contact the manager of personal data processing at hello@melliaromatica.com or by contacting the Personal Data Protection Officer data: Ljudevita Šmidhena 1a, 10430 Samobor. The manager of personal data processing will ensure the limitation of personal data processing.

THE RIGHT TO PORTABILITY OF PERSONAL DATA

Every respondent has the guaranteed right under the EU Legislation to receive personal data relating to him or her from the manager of personal data processing, in a structured, commonly used and legible format. The respondent has the right to transfer said personal data to another personal data processor than the current personal data processor without any hindrance, as long as the processing of personal data is based on consent according to point A, Article 6, Paragraph 1 or point A, Article 9, Paragraph 2 of the General Regulation on the Protection of Personal Data, or by contract according to Point B, Article 6, Paragraph 1 of the General Regulation on Data Protection, and data processing is performed automatically, as long as the data processing is not necessary for tasks of public interest or for the performance of the official duty of the data controller personal data.

Furthermore, according to the existing right to the portability of personal data from Article 20, Paragraph 1 of the General Regulation on the Protection of Personal Data, the respondent has the right to have his or her personal data transferred directly between personal data processors where this is technically feasible and where this procedure does not endanger the rights and freedoms of other respondents.

In order to exercise his right to portability of personal data, the subject can at any time contact the manager of personal data processing of the MELLI AROMATICA doo website at e-mail: hello@melliaromatica.com or by contacting the Personal Data Protection Officer: Ljudevita Šmidhena 1a, 10430 Samobor

RIGHT TO OBJECT

Every respondent under EU Legislation has a guaranteed right to object based on his own situation, at any time, to the processing of personal data relating to the respondent, based on points E and F of Article 6, Paragraph 1 of the General Regulation on the Protection of Personal Data. It may also apply to profiling based on this Regulation.

Website of MELLI AROMATICA company  doo will not continue the processing of personal data in case of objection, except in the case where there is a serious legal basis for processing personal data, which can override the interests, rights and freedoms of the respondents, or for the establishment, implementation or defense of legal claims.

If the website of the company MELLI AROMATICA  doo processes personal data for marketing purposes, the respondent has the right to object at any time against the processing of personal data used for these purposes. This also applies to closely related profiling for the purposes of such direct marketing. If the respondent expresses an objection against the processing of personal data for direct marketing purposes, the MELLI AROMATICA website  doo will no longer process personal data of respondents for the purpose of direct marketing.

In addition, the respondent has the right, based on his own situation, to object to the processing of personal data by the MELLI AROMATICA website  doo, which are used for scientific research or statistical purposes according to Article 89, Paragraph 1 of the General Regulation on the Protection of Personal Data, unless data processing is necessary for the purpose of public interest.

In order to exercise the right to object, the respondent can at any time contact the manager of personal data processing of the MELLI AROMATICA website  doo, you can send a complaint to the e-mail address hello@melliaromatica.com or by contacting the Personal Data Protection Officer: MELLI AROMATICA doo, Ljudevita Šmidhena 1a , 10430 Samobor

In addition, the respondent in the context of using information society services, despite Regulation 2002/58/EC, can exercise his right to object by automated means using technical specifications.

AUTOMATED DECISION MAKING, INCLUDING PROFILING

Every data subject has the guaranteed right under EU Legislation not to be the subject of decisions based solely on automated processing of personal data, including profiling, which may create legal or similar consequences for him or her, as long as the decision (1) is not part of an agreement between of the data subject and the manager of personal data processing, or (2) is not permitted by the laws of the EU or individual member states that adopt appropriate measures that will protect the rights, freedoms and interests of the data subject, or (3) is not based on the express consent of the data subject.

If the decision (1) is necessary for the contract between the data subject and the personal data controller, or (2) is based on the data subject's express consent, the MELLI AROMATICA website doo  will implement measures that will protect the respondent's rights, freedoms and interests, the minimum right to human intervention by the personal data manager to whom he will express his position and challenge the decision.

If the data subject wishes to exercise the rights related to automated individual decision-making, he can at any time contact the manager of personal data processing of the MELLI AROMATICA website  doo to the e-mail address: hello@melliaromatica.com or by contacting the Personal Data Protection Officer: MELLI AROMATICA doo, Ljudevita Šmidhena 1a , 10430 Samobor

RIGHT TO WITHDRAW AND REVOCATE CONSENT

Every respondent has the guaranteed right under EU legislation to withdraw and/or cancel their consent to the processing of personal data at any time.

If the subject wants to use the right to withdraw and/or cancel his consent, he can at any time contact the manager of personal data processing of the company's website, you can send a message to the e-mail address: hello@melliaromatica.com by contacting the Personal Data Protection Officer: MELLI AROMATICA doo , Ljudevita Šmidhena 1a, 10430 Samobor

MELLI AROMATICA  doo undertakes to respect the anonymity and privacy of the users of the melliaromatica.com online store and will use and process the data exclusively for the purposes specified in these Terms. MELLI AROMATICA  doo can collect personal data of the user, such as name, address, OIB, telephone number or e-mail address only if the user voluntarily provides them to MELLI AROMATICA doo

MELLI AROMATICA will use the above data exclusively for the purpose of fulfilling contractual obligations and better insight and understanding of the individual needs, habits and requirements of users, as well as further development and better provision of all services.

MELLI AROMATICA collects, processes and publishes data about users related to the way of using melliaromatica.com without revealing the identity of the user and/or personal data that enable the discovery of the identity of the user.

melliaromatica.com collects and records data about the user's IP address (Internet Protocol Address) or about the location of the computer for the purposes of system administration, troubleshooting, content download confirmation or improvement of technical aspects of the Internet service. melliaromatica.com will automatically record data on the user's habits of using melliaromatica.com, including a log file on visits to certain pages and/or content. Such data will be used by melliaromatica.com exclusively for the purpose of improving its service and adapting and individualizing promotional activities according to the needs of individual users.