Personal data protection

Privacy policy

This document explains who processes visitors’ personal data, which data we process, for what purposes, how long we keep it and how users can exercise their rights.

Version: 2.3 · Last updated:

01

Who is the data controller?

The data controller is the legal entity that determines the purposes and means of processing personal data connected with the Kisko website.

Company name
[full company name]
Registered office and address
[registered office and address]
OIB
[OIB]
Privacy contact
[email]
Data protection officer
[contact, only if one is appointed]

02

Which personal data do we process?

The list should match what the website actually does. At this stage it covers data sent through the contact form, technical logs needed for security and data related to optional cookies.

  • identification and contact details the user enters themselves
  • the content of the message and the type of enquiry
  • technical data such as IP addresses and server logs, if processed
  • data collected by analytics or marketing cookies, only if they are enabled

04

Recipients, processors and data transfers

List the categories or names of the hosting, maintenance, email, analytics and other providers that actually process the data. If data is transferred outside the European Economic Area, describe the destination and the safeguards applied.

05

Retention periods and security

For each purpose, state a specific period or the criteria used to set it. The description of security measures should stay clear to the user without revealing details that could put the system at risk.

06

Cookies and similar technologies

A summary of the use of essential and optional cookies goes here, with a link to the full Cookie policy and the consent settings.

07

Your rights

You can ask for access to your personal data, or for it to be corrected, erased, restricted or transferred. You can also object to processing or withdraw your consent. Some rights apply depending on the purpose and manner of processing.

08

How to exercise your rights and file a complaint

Requests are sent to [privacy contact]. Users also have the right to contact the Croatian Personal Data Protection Agency (AZOP) as the supervisory authority.

09

Changes to the Privacy policy

Explain how changes will be published and where the date of the last update can be seen.