Privacy Policy (EU)

Ta izjava o zasebnosti je bila nazadnje posodobljena 14/04/2025 in se nanaša na državljane in osebe s stalnim prebivališčem v Evropskem gospodarskem prostoru in Švici.

Ova izjava o privatnosti govori Vam što možete očekivati kada društvo Mikroedra d.o.o., Zagreb, Ivana Kukuljevića 20, OIB 05257771514 (u daljnjem tekstu: MIKROEDRA), vlasnik web stranice www.najnaj.eu, prikuplja osobne podatke o Vama kada koristite usluge našeg društva. MIKROEDRA se obvezuje zaštititi Vaše osobne podatke kada koristite naše usluge. Kad god pružite takve informacije, Vaše ćemo podatke koristiti samo u skladu sa svim primjenjivim zakonima o zaštiti podataka, uključujući Opću uredbu o zaštiti podataka (GDPR). Vaši će se podaci čuvati u sigurnom okruženju, a pristup će biti ograničen. 

We promise to collect, use and store your personal data in a secure manner. We promise to use your personal data transparently and only for specified purposes. We promise to inform you about how we use your data and to whom we provide it.

1. What data do we collect?

Our website uses cookies and other related technologies to collect data. A cookie is a small, simple file that is sent along with the pages of this website and stored by your browser on the hard drive of your computer or other device. The information stored in them may be returned to our servers or to the servers of relevant third parties during a subsequent visit. Some cookies are essential for the basic functionality of the site, others enhance your experience by remembering your settings, some help us analyse site usage, and some enable personalised content based on your interests. Learn more about cookies here.

2. How do we use the collected data?

MIKROEDRA will use your personal data for multiple purposes, including the following:

· For the purpose of prior actions necessary for concluding a contract.

· For the purpose of concluding and fulfilling the contract on the use of our products and services.

· To fulfil our legitimate business interests, in which case we will always take your interests into account as well.

· For the purpose of fulfilling legal obligations in accordance with applicable legislation.

· To provide you with feedback on your enquiries and complaints.

· To send you marketing communications about the products and services of our company. We will do so only if you give us clear consent that you wish to receive them. The legal justification for sending marketing notifications about our products and services is that you have given clear consent for your personal data to be used for that purpose. You always have control over your data, and you can opt out of receiving further marketing notifications in the same way you opted in.

We will keep your data within our company and our trusted third parties, except in cases where disclosure is required by law, e.g. to government bodies and law enforcement agencies.

Mikroedra does not share personal data with third parties, except in cases where the individual (data subject) has given explicit consent or where the obligation to forward personal data is stipulated by law.

Data processors:

Kategorija	Ime izvršitelja	Namen	Država
Delivery	I don’t see any Croatian source text to translate in your message. Could you please provide the Croatian text you’d like me to translate into English?	Delivery of ordered products	Croatia
Payment processing	myPOS, Aircash, KEKS Pay	Processing and collection of online payments	EU
Marketing and Communication	Brevo	Sending marketing and transactional email messages	EU (France)
Analytics and advertising	I’d be happy to help with the translation, but I don’t see any Croatian source text to translate. Could you please provide the Croatian text you’d like me to translate into English?	Analysis of website usage and online advertising	Ireland / USA

Mikroedra d.o.o. prihvaća plaćanja putem myPOS sustava. Prilikom procesa plaćanja, neki od Vaših podataka prolaze kroz sustav myPOS, uključujući informacije obvezne za obradu procesa plaćanja, kao i ukupan iznos i podatke o naplati. Za privatnost i sigurnost podataka u sustavu myPOS kliknite ovdje.
U svrhu sajamske prodaje, plaćanje karticama obrađujemo na POS uređaju Zagrebačke banke ili myPOS te Vaše osobne podatke čuvamo samo na “slip” potvrdama plaćanja koje u uredu čuvamo na posebnom mjestu/registratoru kojem pristup imaju samo ovlaštene osobe s ključem.

Since we are responsible for your personal data, we always ensure that your data remains protected and secure during transmission.

3. What rights do I have over my personal data?

Under the General Data Protection Regulation, you have the right to request from us:

· Access your personal data by submitting an access request.

· Correction, Deletion and Restriction of processing of your data if justified

· Data transfer

· Right to complaint

· The right to lodge a complaint with the supervisory authority.

3.1 Accessing your personal data by submitting an access request

 Svaki ispitanik ima pravo na informaciju o tome, jesu li njegovi osobni podaci obrađivani i ukoliko jesu, o kojim je podacima riječ. Ispitanik također ima pravo na informacije koje se odnose na svrhu obrade podataka, pravnu osnovu obrade, kategorijama osobnih podataka, otkrivanju trećim stranama i trajanju pohrane.

3.2 Correction, Deletion and Restriction of Processing of Your Data if Justified

Every data subject has the right to request the correction, deletion or restriction of the processing of personal data, as well as the supplementation of incomplete personal data.

3.3 Data Transfer

The data subject has the right to transfer the aforementioned personal data to another personal data controller from the current personal data controller without any hindrance.

3.4 Right to complaint

Every data subject is, under EU legislation, guaranteed the right to object based on their own situation, at any time, to the processing of personal data relating to the data subject, based on points E and F of Article 6, Paragraph 1 of the General Data Protection Regulation. In order to exercise the right to object, the data subject may at any time contact the data controller.

At any time, it is possible to lodge an objection to the processing of personal data for the purpose of direct marketing, in which case the personal data will no longer be processed for that purpose.

3.5 Right to lodge a complaint with a supervisory authority

The data subject has the right to file a complaint regarding the violation of rights related to the processing of personal data with the competent authority, namely:

Agencija za zaštitu osobnih podataka
Martićeva 14
10000 Zagreb

4. Data Disclosure Practices

We disclose personal data if we are required to do so by law or court order, in response to a law enforcement agency, to the extent permitted under other provisions of the law, to provide information, or for an investigation into a matter relating to public safety.

If our website or organisation is taken over, sold or involved in a merger or acquisition, your data may be disclosed to our advisors and potential buyers and will be forwarded to the new owners.

4.1 Data processing through Google services

We have concluded a Data Processing Agreement with Google for website analytics. Google may not use the data for any other Google service, and we block the inclusion of the full IP address.

Additionally, in order to optimise term management in our customer centre, our website uses the Google Calendar API to link our online booking system with our staff’s internal Google calendars. When a staff member connects their Google account, we request access permission that is used exclusively for the following purposes:

• Automatic addition of new appointments: When a client books an appointment, it is automatically created as an event in the Google Calendar of the corresponding staff member.
• Updating and cancelling appointments: If an appointment is changed or cancelled, the corresponding event in Google Calendar will automatically be updated or deleted.

We emphasise that we do not read, store, analyse or share any other personal events or calendar data of our staff that are not directly related to appointments booked through our website. Access is strictly limited to the functionality required for appointment synchronisation.

5. Data security

Predani smo sigurnosti Vaših osobnih podataka. Poduzimamo odgovarajuće sigurnosne mjere kako bismo ograničili zlouporabu i neovlašteni pristup osobnim podacima. Time se osigurava da samo potrebne osobe imaju pristup Vašim podacima, da je pristup podacima zaštićen i da se naše sigurnosne mjere redovito provjeravaju.

Korištenjem određenih usluga, kao što su Google Analytics, Google Ads, Meta platforme i Brevo, vaši osobni podaci mogu biti preneseni na poslužitelje koji se nalaze izvan Europskog gospodarskog prostora (EGP). Takvi prijenosi provode se isključivo uz primjenu odgovarajućih zaštitnih mjera u skladu s GDPR-om, kao što su Odluke o primjerenosti Europske komisije (npr. EU-SAD Okvir za zaštitu privatnosti podataka) ili korištenjem standardnih ugovornih klauzula (SCC) odobrenih od strane Europske komisije, čime se osigurava razina zaštite podataka istovjetna onoj unutar EU.

6. Third-party websites

This privacy statement does not apply to third-party websites linked from our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend that you read the privacy statements of these websites before using them.

7. Amendments and supplements to this privacy statement

We reserve the right to make changes and amendments to this privacy statement. It is recommended that you review this privacy statement regularly so that you are aware of any changes. In addition, we will actively inform you wherever possible.

8. Data access and amendment

Podrobne informacije o kategorijah osebnih podatkov, namenih zbiranja in pravni podlagi ter Vaših pravicah in njihovem uveljavljanju se nahajajo v našem Pravilniku o načinih obdelave in uporabe osebnih podatkov, ki Vam je na voljo na naši uradni spletni strani na povezavi https://najnaj.eu/gdpr-pravilnik/.

To exercise your rights related to the processing of your personal data, or if you believe that the processing of personal data we carry out is contrary to personal data protection regulations, please notify us in writing at the following address:

Mikroedra d.o.o., Zagreb, Ivana Kukuljevića 20, OIB 05257771514 ili putem [email protected] 

O vsaki spremembi Pravil zasebnosti boste obveščeni na naši spletni strani www.najnaj.eu.

9. Contact information

Mikroedra d.o.o.
Radnička cesta 34a, 10000 Zagreb, Croatia, Croatia
Web-stranica: https://najnaj.eu
E-pošta: [email protected]
Broj telefona: +38514822132

10. Data requirements