The company Demode doo is the owner of the Ummarama Internet store -> link ummarama
Manager of personal data processing
The manager of personal data processing is the company Demode doo with headquarters in Zagreb, Varšavska 1, registered in the court register of the Commercial Court in Zagreb under registration subject number (MBS): 080670661, personal identification number (OIB): 75084434892 (hereinafter: "Demode doo").
Demode doo, as the manager of personal data processing, determines the purpose and means of personal data processing and is responsible for the storage and use of personal data in paper and/or electronic form.
Personal Data Protection Officer (DPO)
In accordance with legal and regulatory requirements, Demode doo has appointed a Personal Data Protection Officer whom you can contact regarding all issues related to the processing of personal data or exercising the right to personal data protection. Our personal data processing officer will examine all your inquiries and, if possible, try to answer them within 30 days, provided that your request is legally justified. The dynamics of the response depends on the nature of your inquiry and, in general, on the amount and nature of other possible inquiries.
DPO: Demode doo
Address: Varšavska 1; 10000 Zagreb, CROATIA
Contact: info@demode.hr
1. Personal data we collect
Personal data is any data relating to an individual whose identity is known or can be determined. An individual whose identity can be established is a person who can be identified directly or indirectly, especially on the basis of an identification number or one or more characteristics specific to his physical, psychological, mental, economic, cultural or social identity.
The personal data we collect depends on: the type of service we provide to our users, the user's intention to use our services, the type of contract we conclude with the user, as well as the user's intention to exercise their rights based on legal and regulatory provisions on personal data protection. First of all, it is about the data without which we cannot perform the service, and they include at least:
- basic information about the user (name and surname, address, date of birth, delivery address);
- contact information and information about the user's communication with the Ummaramma shop web store (e-mail address, telephone number, date, time and content of postal or e-mail communication, date, time and duration of telephone calls)
- data on the user's orders and issued invoices (date of order receipt and execution, purchased products, prices of purchased products, payment method, delivery address, invoice number and date, identifier of the person who issued the invoice, etc.) and information on handling product complaints ;
- information about the source through which the customer-user came into contact with the Ummaramma shop web store
- data related to the use of the website www.ummaramma.com
- data related to the use of the Ummaramma shop web store
- user geo-location data that may become available when you search and use the www.ummaramma.com website based on the IP address or GPS data on the device
- data required for making online card payments when purchasing on the Ummaramma shop web store
- data from voluntarily filled forms by the user
- other data that the user voluntarily fills in when requesting certain services that require this data
- other personal data necessary for the exercise of user rights
- Demode d.o.o. does not collect or process personal data, except when users enable it by giving consent, i.e. when ordering products, or when there is a legal basis for collecting personal data or Demode d.o.o. has a legitimate interest in the processing
2. Purpose of collecting and processing personal data
Demode d.o.o. collects and manages personal data for the purpose of a) creating a user profile on the website, b) establishing a sales relationship for products and services from its own offer c) implementing card payments during purchases d) signing up for the newsletter, e) communicating with users, e ) analysis of the way users use our services and content for the purpose of the need for better insight and understanding of the individual needs and requirements of users, all with the aim of providing the highest quality service and increasing user satisfaction) to fulfill legal and regulatory obligations and for the purpose of realizing one's own legitimate interests legal business, g) for other purposes, with the user's consent
Demode doo will not publish the collected personal data to the public. We are careful about who we give user data to and will not disclose it to third parties for their own independent marketing or business purposes without the user's consent. The user's personal data will be processed by authorized employees of Demode doo, and they are not authorized to process the same for any other purpose without the user's prior consent or if there is no legal and/or contractual basis for the processing.
3. Access to personal data
Demode doo undertakes technical and organizational measures to ensure that collected personal data is processed only in a manner consistent with the stated purpose. Demode doo guarantees that the user's personal data will not be made available to third parties without their consent. The delivery service, the authorized service of the executive power of the Republic of Croatia, is excluded from the above, for the purposes of investigative actions based on a valid court order, for the purpose of performing the service, protecting the interests of users and preventing possible abuses. In this case, all third parties, except state and public authorities, are obliged to process personal data exclusively according to the instructions of the company Demode d.o.o.
Security and transfer of personal data
In order to protect personal data, Demode doo has taken all the necessary and appropriate technical and organizational measures that, among other things, protect the user's personal data from loss, manipulation or unauthorized access. The measures taken are regularly checked and continuously adjusted to the current state of the art. In the event of a breach of the user's personal data that may pose a great risk to their rights and freedoms, in accordance with applicable regulations, Demode doo will notify the user.
5. User rights
At any time, you have the right to request the following from Demode doo:
The right to access your personal data
At any time, you can request access to your personal data from the company Demode doo, that is, request information about the purpose of processing your personal data, the type of your personal data that we store, the third parties or groups of third parties with whom your personal data is shared, the period of time during which we retain data, as well as the method of collecting data that was not collected directly from you.
The right to correct personal data
In case of incorrect data, you can ask the company Demode doo for an appropriate correction, and in case of incompleteness, their addition. Demode doo will inform you about the correction of your personal data.
Right to erasure of personal data ("right to be forgotten")
At any time, you can request the deletion of personal data relating to you from the company Demode doo, and Demode doo is obliged to delete your personal data without undue delay if the conditions for data deletion prescribed by the General Data Protection Regulation are met. The right to deletion does not apply when the processing of personal data is a consequence of the legal obligation of Demode doo. Demode doo will inform you about the deletion of your personal data no later than 30 days from the date of receipt of your request, and about the deletion it will also inform potential recipients of personal data.
The right to a copy of personal data
Demode doo provides a copy of the personal data it processes, and you can exercise the right to obtain a copy of your personal data provided that the issuance of the copy does not negatively affect the rights and freedoms of other respondents.
The right to limit the processing of personal data
In certain cases, it is possible to request a limitation of processing from the company Demode d.o.o., for example, in the case when the accuracy of personal data is disputed, for the period necessary for their verification, when it is considered that the processing is illegal, and the deletion of personal data is opposed and instead requested limitation of their use, in the case when an objection has been filed. If it is possible to obtain a processing restriction, Demode doo is obliged to inform the user about the setting and cancellation of this restriction.
The right to object
At any time, you have the right to object to the processing of your personal data by the company Demode doo. , Demode doo will decide on your complaint within one month from the day of its receipt. You can exercise your aforementioned rights as follows:
by delivering a written request to the address: Varšavska 1; 10,000 Zagreb
by email to: hello@ummarama.com
The right to complain
It is possible to file a complaint with the Agency for Personal Data Protection against the decision of the company Demode doo, which decides on one of your rights related to the protection of personal data.
6. Storage of personal data
The time period of keeping the user's personal data depends on the purpose for which they are collected and processed, and they are kept only as long as it is necessary to achieve the purpose on the basis of which they were collected and processed.
Demode doo stores personal data collected for the purpose of performing a contractual relationship with the user for the period of time necessary for the execution of the contract and for another 5 years after the termination of the contract (from the date of the last transaction in which they were used), except in the case where between the contracting parties ( company Demode doo and the user) there is a conflict regarding the contract. In this case, Demode doo keeps the data for 5 years after the final court or arbitration verdict or settlement, and in the event that there was no court dispute, Demode doo keeps the data for 5 years after the date of peaceful resolution of the dispute.
Personal data that is processed on the basis of the personal consent of the user or legal interest, is kept permanently by Demode doo until the termination of the consent by the individual, i.e. until the termination of processing is requested. The said data will be deleted before the termination of consent by the individual, only if the purpose for which they were collected has been achieved.
Data collected due to processing based on a legal basis are stored in accordance with the time limits of the provisions of the law in question (for example, the Accounting Act, etc.)
7. Cookies and monitoring of internet activities
A cookie (cookie - hereinafter: "cookie/s") represents information that is stored on the user's computer by the website that the customer visits. Cookies usually store user settings and settings for the website, such as preferred language or address. Demode doo uses cookies to facilitate and improve visitors' access to the functions provided by the shop.clarusacta.hr website. The information we collect with cookies is used to remember settings and user activities on websites, such as browsing articles, moving around pages, placing products in the cart, interesting articles or articles for comparison, etc.
The user can delete or block cookies at any time in the settings of his internet browser. By using the ummaramma.com website without changing settings that would deny consent to the storage of cookies on the user's computer, the user accepts the use and storage of cookies on his computer. If the user does not agree to the storage of cookies, the storage of cookies on the user's computer will be disabled, and the user will still be able to use the ummaramma.com website, but certain features of the website will not be available.