Privacy policy
Privacy policy
PRIVACY POLICY of High Low System Electronics Limited Liability Company
High Low System Electronics d.o.o., Križ, Trg Svetog Križa 4, PID 96719640881 (hereinafter: HLSE) collects and processes personal data of its service users in its operations and takes measures to ensure that the processing of personal data is legal, fair and transparent.
HLSE may have the role of Manager or Processor with regard to your personal data. HLSE collects your data primarily for the purpose of performing its activities. HLSE may collect information about you in various ways for the above purposes.
With these Privacy Policy, we want to inform you why and how we collect your personal data, how we use and protect it, with whom we share it and how you can contact us regarding the protection of your privacy.
Please be careful when submitting your personal information to us and ensure that you do not accidentally provide or enter incorrect or sensitive data and information.
Wherever there is a legitimate reason to collect personal data about you, we do not have to ask for your consent beforehand. However, wherever we do not have a legitimate interest, and wherever there is any doubt as to whether we have one, we will always ask for your consent to use your personal data, and we will only use it for the purpose for which you have given your consent.
Are you obliged to give us your personal data?
When you require us to provide certain services, it is necessary to provide us with your personal data, which is necessary for your identification, as well as for the conclusion and execution of the contract. Therefore, in these situations, the provision of your personal data is a legal and contractual obligation necessary for the conclusion and execution of the contract.
Legal basis for processing personal data
We collect your personal data:
- directly from you
- when concluding and executing mutual contracts (cooperation contracts, employment contracts, etc.);
- during actions that precede the conclusion of a contract (offers, inquiries, reservations, etc.);
- when you yourself make personal data available to us as a user of our services, by filling in forms or by sending electronic mail and in other similar situations in which you have chosen to provide us with data;
- arriving at our business premises;
- by sending us your CV;
- by reserving vehicles and/or machines;
- by telephone conversation with our authorized person, etc.
- indirectly
- based on the contract on the performance of some of our services
- data that is publicly available on websites that do not belong to us (eg posts on social networks, open forums);
- data obtained through the use of cookies, links and similar technologies.
We may ask you for your consent to process your data for a purpose that is not, by its ultimate purpose, a condition for the execution of the contract or our legal obligation, or is not necessary for the conclusion and execution of the contract, or is not in our legitimate interest (e.g. for the purpose of marketing activities, offering new products and services, etc.). You are not obliged to give consent for such processing, but you are free to give it and you can withdraw it at any time if you have given it. The request for consent must be presented to you in such a way that it can be clearly distinguished from other questions, in an understandable and easily accessible form using clear and simple language.
In what purpose do we process your data?
We process and use your data for the purposes for which they were collected, and to fulfill our contractual and/or legal obligations:
- for the purpose of executing a contract on the provision of some of our services;
- for the purpose of executing a contract in which you are a party (e.g. vehicle rental, machine rental, etc.);
- for the purpose of executing a contract to which you are a party (e.g. employment contract, work contract, copyright contract, etc.);
- if the processing is necessary in order to comply with our legal obligations (e.g. managing accounting affairs, delivering your data to the competent authority if an offense has been committed with the rented vehicle and/or machine, etc.);
- for the purpose of contacting you for employment if you have entrusted us with your resume;
- publishing your photos and/or videos on our internal and social pages if you participated in an event in our organization (e.g. an event or celebration) and
- in other situations based on our legitimate interest or your expressed consent.
Information we collect from employees during employment
We highly value the privacy of all our employees and do not collect their personal data without having a legitimate interest in doing so. Whenever we need the data of workers and their children in order to exercise certain rights, we always ask for the worker’s prior consent, if we need such consent and we do not have a legitimate interest in it.
Workers are obliged to provide us with the information that is determined by the regulations on records in the field of work and other regulations governing the said area. Workers are always obliged to update and submit correct data in a timely manner if the originally submitted data has changed. The workers themselves bear the harmful consequences of that omission.
Personal data of workers may be collected, processed, used and delivered to third parties if this is necessary for the exercise of rights and obligations from the employment relationship, i.e. in connection with the employment relationship. For this purpose, data provided by accounting regulations, regulations in the field of pension and health insurance, regulations in the field of occupational safety, laws and regulations passed for the purpose of implementing the Labor Law will be collected, processed, used and delivered to third parties.
We do not transfer employee data to anyone without the express consent of the employee, except in the case of legal obligations and execution of a contractual relationship with the employee.
We keep employee data as long as there is a legal obligation to keep said data, and we delete/destroy such data as soon as the legal prerequisites are met.
Information that we process representing our clients as a Processing Executor in the provision of production, repair, installation and maintenance services of machines
As a regular activity, HLSE provides services for the production, repair, installation and reflection of machines based on a contractual relationship with clients, and on the basis of this relationship processes your personal data according to the express instructions of its clients in the capacity of Processor. The manager of the database in the mentioned case is not HLSE but the client with whom HLSE enters into a contractual relationship.
In carrying out the aforementioned activities, we will always present ourselves as the executor of a specific ordered service.
In the aforementioned communication, if you wish to exercise your rights in accordance with the GDPR, you must directly contact our client (your Employer or Principal), but we are willing to provide you with all the help and information in this regard.
In this capacity, we never collect your personal data. All personal data is submitted by our client as the Data Processing Manager, and HLSE processes the submitted data according to the express instructions of the client (your Employer or Principal), but within the legal framework of the activity that HLSE performs.
All your personal data that we process based on the contractual relationship with your Employer and/or Principal are deleted from our system upon completion of the work.
We delete personal data that we have received from the client for the performance of our professional activities based on the contractual relationship with the client, immediately after the completion of the task received from the client, unless otherwise prescribed by law due to the performance of repair, installation and/or service of machines under warranty.
Information we collect and process when using our machine and equipment rental service, without operators and items for personal use and household
As a provider of machinery and equipment rental services, we are obliged to collect data for the purpose of concluding a contract for the rental of machinery and/or equipment in which we have a legitimate interest. For this purpose, we collect your personal data (name and surname, place of residence, PID, data from driver’s license, identity card or passport, etc.), data necessary for communication (address, e-mail, phone number), data necessary for payment our services (contact information, credit card number and bank information, etc.) etc.
When concluding a contract on the rental of machines and/or equipment, we collect only the most necessary data about you, which we legally need to conclude the contract. However, in certain cases, this data may be of a sensitive nature, such as misdemeanor fines, accident reports, etc.
If you refuse to provide us with your personal data, we may refuse to provide you with the machine and/or equipment rental service.
For the purpose of renting the machine and/or equipment, we will have to inspect your personal identification documents, which you are required to present to us. Identification documents will be returned to you immediately after entering the data into the appropriate system.
Information we collect and process as a landlord
As a landlord, we are obliged to record your data in the appropriate online system (eg eVisitor). All landlords and other accommodation service providers are obliged to register or de-register tourist arrivals in the mentioned system. For tourists from outside the European Economic Area, an additional report to the police department is also required. For this purpose, we are obliged to obtain personal data from you, and this right and duty derives from our legal obligation.
If you refuse to provide us with your personal data, we may refuse to provide you with the accommodation service.
If a tourist wants to take advantage of the possibility of being exempted from paying the residence tax, he is obliged to provide us with information on the basis of which he would use this benefit, such as disability.
In the eVisitor system, it is possible to enter other data and to provide the possibility to be contacted for marketing purposes, but we need your express consent for such collection and processing.
In order to register as a tourist, we will have to inspect your personal identification documents, which you are required to present to us. Identification documents will be returned to you immediately after entering the data into the appropriate system.
Do we share your data with third parties?
As a rule, we do not give information about you to third parties without your permission, but there are exceptions to this rule:
- when it is our obligation according to the law or in response to legal proceedings, or to the request of competent law enforcement institutions in connection with misdemeanor, criminal or court proceedings;
- adi protection of our rights, privacy, safety or property and the public;
- to register tourists (e.g. eVisitor system, police department when reporting foreigners);
- for administrative or technical assistance (e.g. for rent through one of our partners, for providing help/assistance through our partners, etc.);
- in order to seek appropriate legal remedies and limit the damage that may be caused to us;
- in order to process information on our behalf for the above purposes (e.g. repair of machines, etc.). Our service providers act solely on our instructions, in accordance with our policies and are subject to appropriate confidentiality and security obligations;
- for legal and/or business purposes, such as for governmental and competent authorities for the purpose of compliance with positive legal regulations and to meet the reasonable requirements of these authorities, professional advisors who enforce or protect our legal rights, etc.;
- we can share anonymized, aggregate or general data, according to which you cannot be identified, with any third party (eg partners, advertisers, media, public, etc.);
- we can forward the employee’s information to competent authorities for the purpose of realizing rights and obligations from the employment relationship (institutions for pension and health insurance, etc.);
- in other cases with your consent.
In case of data sharing with third parties, HLSE will prohibit these parties from using your personal data for purposes other than those agreed upon and will oblige the business partner to maintain the confidentiality of personal data.
How long do we keep your personal data?
The period of keeping and storing your data depends on the type/category of data, the purpose for which they were given or collected, and the laws and/or legal obligations to which we are subject. We keep personal data for as long as required by law or as long as it is necessary to provide the requested service or to carry out the purpose for which you have given your consent, unless the law provides otherwise (eg in connection with an ongoing legal proceeding).
Data for which the laws or other regulations do not prescribe a storage period, are stored for a reasonable period, taking into account the category of data and the purpose for which they were collected. Data collected for a specific purpose will be used only for that purpose and will be deleted after the purpose is fulfilled. When providing this data, you will be informed of the storage period, i.e. the criteria by which the storage period of this data is determined.
Data that we store on the basis of consent is permanent, that is, until you withdraw such consent. You have the right to inform us at any time that you withdraw the consent you have given us for the processing of personal data. With the withdrawal of consent, you can also request the deletion of your personal data and other rights according to the General Regulation for the Protection of Personal Data. We are obliged to keep part of the personal data according to positive regulations of the Republic of Croatia (e.g. personal data required for issuing invoices). In any case, you have the right to be informed why we cannot delete certain personal data. At the end of the storage period, we delete personal data permanently or anonymize them so that they can no longer be linked to you.
International transfer of your data
We process your data within the European Economic Area. In case of the need to transfer personal data outside that area, such transfer will only take place if the European Commission has confirmed that the third country meets a certain level of data protection or if there are appropriate protection measures in accordance with positive legal regulations.
Marketing communication
When you voluntarily provide us with your contact information for the purpose of performing our marketing activities, this communication with you may include sending details about our latest products and services, etc. We will use your information for marketing purposes only based on your express consent.
Protecting your data
We take many measures to protect your data from unauthorized access and use, for example:
- Only our employees who need this information to perform our business activities have access to your information;
- We save data in specially separated folders, with clearly defined access rights;
- We have implemented appropriate technical and organizational measures to prevent the loss of your data, modification, theft or access by an unauthorized third party;
- We have provided appropriate physical, electronic and management systems with which we protect and store the data we collect over the Internet.
Cookies
Our websites use the so-called cookies – text files placed on the user’s computer by the internet server used by the user.
You can adjust your browser settings so that you do not save cookies. However, in some cases some of the functionality of our website requires cookies and may not function if you choose not to accept them.
Since the purpose of cookies is to improve and enable the use of our websites and their processes, please note that by preventing or deleting cookies, you may disable the functionality of these features or cause them to work and look differently in your browser.
Automated data processing and profiling
HLSE does not apply automated decision-making or create profiles of you.
Children’s privacy
According to the current regulations in the Republic of Croatia, we consider all persons under the age of 16 to be children. We do not collect personal data from children without the consent of their parents or guardians.
If a parent or guardian has questions related to our processing of their children’s personal data, the same rights as adults apply.
Requests by judicial authorities
In certain cases, we are allowed to share your personal data without your knowledge or consent, such as in the following cases:
- crime prevention or detection;
- arrest or prosecution of violators;
- assessment or collection of taxes or fees;
- by order of the court or any law.
Your rights
At any time, without any negative consequences, you can:
- withdraw your consent for any kind of marketing communications and other processing;
- request confirmation of processing (about the purpose of processing, source, category of personal data, recipients or categories of recipients to whom personal data is or may be transferred, as well as the location of such transfer, the intended period of storage of personal data, the use of any automated decision-making and profiling);
- inspect your personal data;
- request correction or addition of personal data;
- object to further or excessive processing of personal data;
- block illegal processing of personal data;
- request deletion of your personal data;
- request the transfer of personal data to another controller.
You can fulfill your requests by simply unsubscribing from our list or by contacting us with your request to our e-mail address info@hlse.hr
We will consider each of your requests in accordance with all applicable positive legal regulations governing the protection of personal data. We reserve the right to charge costs for processing requests in those cases where such requests are unreasonable. We will deliver the answer to each request no later than within 30 days from the date of receipt of the request.
The right to submit a complaint to the supervisory authority
At any time, you can submit an objection to the processing of your personal data if you are of the opinion that during the processing of your data we have violated Croatian or European regulations on the protection of personal data to the competent supervisory body, the Croatian Agency for the Protection of Personal Data, or in the event of a change in the applicable regulations to another body that will take over its jurisdiction, and from May 25, 2018, also to the supervisory authority within the EU.
Limitation of liability
Although we take available technical, organizational and personnel measures to protect personal data from accidental or intentional misuse, destruction, loss, unauthorized change or access, we cannot guarantee that some of the personal data we collect will never be accidentally disclosed, contrary to the provisions of this Privacy Policy.
To the maximum extent permitted by law, we exclude liability for damage caused to users or third parties by accidental disclosure of personal data.
Since we have no control over the personal data you submit when accessing or using other portals, or directly to third parties (e.g. when participating in sponsored activities), we exclude responsibility to the maximum extent permitted by law for damage that may occur to you or third parties due to the submission of personal data.
Contact
Processing manager:
HLSE d.o.o.
Trg Sv. Križa 4, 10340 Križ
e-mail: info@hlse.hr
In the case of complaints related to compliance with these rules and other regulations in the field of personal data protection, we will fully investigate all elements of the complaint and will try to resolve them as soon as possible.