Privacy and Security Statement

Privacy and Security Statement

Da-Mogu d.o.o. as the owner of these websites, takes the protection of your personal data very seriously. By Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data and the free movement of such data and repealing Directive 95/46 / EC (Official Journal of the European Union L 119, 4.5.2016, page 1, hereinafter: General Regulation on Data Protection – GDPR), which is in full application from 25 May 2018 in the Republic of Croatia and all EU member states, as well as the Act on the implementation of the General Regulation on Data Protection (Official Gazette No. 42/18, hereinafter: the Act), ie by the legal framework for personal data protection in the Republic of Croatia and the European Union and best European practice, the company:

Da-Mogu d.o.o.
Marko Marulić Square 12, Zagreb 10000
OIB: 56216842434
MBS: 5451817
Management: Tatjana Aćimović
Director and responsible person: Tatjana Aćimović

undertakes not to misuse personal data from the order form and other contact forms, nor to forward them to third parties and their business partners, and she has prepared this Privacy and Security Statement.

The Privacy and Security Statement is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates which data of users and/or customers are collected, how such data are processed, and for what purposes they are used. The privacy and security statement also informs service users and/or customers of their rights in the collection and further processing of personal data, all to protect their privacy in a broader sense. The privacy and security statement is based on the following principles of personal data processing: the principle of legality, transparency and best practice, the principle of limited processing and reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of data integrity and confidentiality, the principle of trust and fair processing, the principle of opportunity (purposes of processing), the principle of processing in an unnamed (anonymized) form.

The Privacy and Security Statement applies to all services offered by Da-Mogu d.o.o., whereby the Statement aims to inform users and/or customers clearly and transparently about the processing of their personal data and their rights. First of all, users and/or customers can contact Da-Mogu d.o.o. at any time, with a request to amend and/or update the data relating to them, as well as with a request to comment on the purposes for which they want or do not want their data to be processed.

The company responsible for the processing of personal data is:

Da-Mogu d.o.o.
Marko Marulić Square 12, Zagreb 10000
OIB: 56216842434
MBS: 5451817
Management: Tatjana Aćimović
Director and responsible person: Tatjana Aćimović

Contact details of the person responsible for the protection and management of personal data is Irena Domitorvić – info@damogu.org

Personal data are all data that establish the identity of the customer, and we process the following personal data that we declare as basic personal data:

– Name and surname
– Housing address (place and city)
– Contact phone number
– Contact e-mail
– Legal information of the company if the customer requests an R1 invoice

The stated personal data of the company Da-Mogu d.o.o. processes and archives at its headquarters specified in this Statement, in the Republic of Croatia.

We do NOT explicitly and exclusively PROCESS the following personal data:

– Natural person OIB
– Date of birth
– Gender
– Other data from the identity card of a natural person
– Data on bank account and credit / debit card number of natural persons
– Data on the habits of users or customers

Da-Mogu d.o.o. will not submit or disclose the customer’s personal data to a third party, except in cases where so expressly prescribed by law and in cases where this is necessary to fulfill legal obligations. All customer data is strictly kept and is only available to employees who need this information to do the job. All employees of Da-Mogu d.o.o. and business partners are responsible for adhering to the principles of privacy protection of their users and customers. Da-Mogu d.o.o. undertakes to provide protection of personal data of customers by processing only the basic data on customers that are necessary for the fulfillment of obligations / orders, which are listed.

Data that are automatically recorded by accessing the website, and are not personal data (types of search engines, number of visits, time spent on the site, etc.) Da-Mogu d.o.o. has the right to use it solely to assess website traffic and to improve its content and functionality, and do not include any form of personal data.

In case of a change in any of the personal data recorded during registration, the customer is obliged to notify the company Da-Mogu d.o.o. In case of unreported changes to the entered data, Da-Mogu d.o.o. is not responsible for any defects in terms of ordering or delivery of products.

Ways of processing basic personal data

Directly by the users or customers in the process of ordering products or establishing contact through the contact forms on our website, in order to provide timely and quality service and / or feedback on the product and special offers to users who have expressed interest in our products.

Purpose of processing basic personal data

  1. Fulfillment of contractual obligations: delivery of ordered products, advice and assistance in the use of ordered products, providing additional product guarantees, maintaining product quality, resolving customer complaints, and other actions related to the conclusion and execution of contractual obligations in accordance with applicable regulations.
  2. Fulfillment of legal obligations
  3. Direct promotion to users who have expressed interest and consent to marketing communication and promotion to existing customers to maintain product quality and timely information on special conditions and current promotions – with the aim that the user can get accurate and precise information that suits his wishes by visiting the website www.damogu.org
  4. Internal purposes – the company Da-Mogu d.o.o. uses the stated basic personal data exclusively for its records, and to protect users and customers and maintain the quality of service and product quality.

Data of potential customers – users

Da-Mogu d.o.o. processes data on potential customers, and with the purpose of giving them timely and accurate information on current special offers and promotions, with the given consent, exclusively in products for which potential customers have expressed interest. For this purpose, we process only basic personal data (name and surname, contact phone number, contact e-mail, and product in which interest is expressed) and, in case of a complaint, the necessary data for its implementation, the date of the order, order code, method of payment, item name, date of the complaint, reason for complaint, description of the complaint.

A request for a stored personal data

The user may at any time request a printout of all personal data provided by Da-Mogu d.o.o. collects and processes to provide a better and higher quality user experience – by requesting a request to print stored personal data by clicking on this link: info@damogu.org.

Limited storage and processing of basic personal data

The basic personal data of customers are kept throughout the use of our products, until the moment when the customer has explicitly and distinctly stated that he is no longer a user of our products or expresses the right to be forgotten.
Basic personal data of potential customers, ie users are kept for 3 months from the moment of processing the stated basic personal data, or shorter if the user first expresses the right to be forgotten.

The right to be forgotten

Da-Mogu d.o.o. informs customers about how the processed data is used and regularly gives customers a choice about the use of their data, including the ability to decide whether or not to have their name removed from the lists used for marketing purposes and to maintain product quality.
If you want to delete the above basic data from our database, please send a request to delete all basic personal data by clicking on this link: info@damogu.org.

The right to object

The user and/or the customer has the right to object to the processing of personal data relating to him if the data are processed for the purposes of the legitimate interest of the controller. In that case, the company Da-Mogu doo, as the controller, will stop processing personal data, unless it proves that there are convincing legitimate reasons for the processing of personal data about the rights of users and/or customers, or in the case when data processing serves to set, realization or defense of legal claims.

If the basic personal data of the user and/or customer are processed for direct marketing, the user has the right at any time to object to the processing for direct marketing, especially if the basic personal data is used for profile purposes.

The user can file a complaint by sending a request or complaint by this link: info@damogu.org.

Responsibility

The above provisions on personal data protection apply exclusively to the home page under www.damogu.org and all pages within the damogu.org domain, and not to external pages to which links on the damogu.org domain refer, for which pages www.damogu.org is not competent or responsible for which pages damogu.org does not collect or process user data.
Except in the case of electronic ordering, in other cases Da-Mogu d.o.o. will not send e-mails to the customer if the customer has not explicitly agreed to that, or given his consent.

Cookies

For our website to work properly, to be able to make further improvements to the site, to improve your experience and quality of service, this site must store a small amount of information (Cookies) on your computer. Over 90% of all websites use this practice, but according to the regulations of the European Union from 25.05.2018. we are obliged to ask for your consent before storing the Cookie. By using the website, you agree to the use of cookies. By blocking a cookie, you can still browse the site, but some of its features will not be available to you.

What is a cookie?

A cookie is an information stored on your computer by a website you visit. Cookies usually store your settings, settings for a website, such as your preferred language or address. Later, when you open the same website again, the internet browser sends back the cookies that belong to that page. This allows the site to display information tailored to your needs.

Cookies cannot be assigned to a specific person and do not contain personal data.

Types of cookies on these websites
  1. Session cookies – these are temporary cookies that expire (and are automatically deleted) when you close your internet browser. We use session cookies to provide access to content and enable commenting (things you need to do when you log in with your information to the website)
  2. Persistent cookies – these usually have an expiration date far into the future and will remain in your browser until they expire, or until you delete them manually. We use persistent cookies for functionalities such as the “Stay Logged In” tickbox, which makes it easier for users to access as registered users. We also use persistent cookies to better understand user habits so that we can improve the website according to your habits. This information is anonymous – we do not see individual user data.
  3. Cookies for measuring traffic – these cookies are not set or created by our site, but serve for the normal functioning of the site and make it easier for users to access the content. IMPORTANT – these cookies do not collect any personal user data. We use the following such and permanent cookies on the www.damogu.org website:
  • Google Analytics pixel
  • Facebook pixel

These pixels (or cookies) do not collect any personal data (demographic and similar) but only serve to provide timely and accurate information depending on your interest and to inform you on other websites about current special offers and promotions.
Through our cookie management system, you can disable cookies as needed and desired by simply selecting them, as well as seeing other temporary cookies or cookies to measure traffic used.

How to disable cookies?

You can restrict, block or delete cookies from this website at any time by changing the configuration of your browser using the steps below. Although the settings are different in each browser, cookies are usually configured in the “Personal Settings” or “Tools” menus. For further details on the configuration of cookies in your browser, please see the “Help” menu in the browser itself.

By turning off cookies, you decide whether to allow cookies to be stored on your computer. Cookie settings can be controlled and configured in your web browser. For information on cookie settings, select the web browser you are using. • Chrome • Firefox • Internet Explorer 9 • Internet Explorer 7 and 8 • Opera (English page) • Safari (English page). If you disable cookies, you will not be able to use some of the functionalities on our website.

You can also use our cookie management system on our site. You can disable cookies as needed and desired by simply selecting them, as well as seeing other temporary cookies or traffic cookies that are used.

To provide the best quality of service and proper operation of this website, we recommend that you leave cookies enabled.

Payment security

The confidentiality of customer data is protected and ensured by the use of SSL encryption.
Online billing sites are secured using the Secure Socket Layer (SSL) protocol with 256-bit data encryption (SSL encryption is the process of encrypting data to prevent unauthorized access during its transmission).
In this way, secure data transfer is enabled and unauthorized access to data during communication between the customer’s computer and the CorvusPay service is disabled, and vice versa.
This service and financial institutions (card companies) exchange data using a virtual private network (VPN), which is protected from unauthorized access.
Credit card numbers are not stored and are not available for inspection by Da-Mogu d.o.o. nor to unauthorized persons.

Amendments to the Privacy and Security Statement

Da-Mogu d.o.o. reserves the right to amend this Statement at any time, without giving any special notice to interested parties. For this reason, it is recommended that all interested persons and users regularly check the content of this Statement in order to be informed about the updated content of the Privacy and Security Statement.

The Fairness Principle

Da-Mogu d.o.o. In its business, it adheres to fairness and truthfulness in all forms of interaction with users (potential customers) and customers of our products and places the greatest emphasis on maintaining the quality of service and product quality.

Does the company exchange data with third parties

Privacy is important to us, so we will never share your personal data with third parties except for the purposes described in this Privacy and Security Statement.

The company cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that provides an adequate level of protection following EU legislation.

In addition, we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of the Company, for example, for marketing, finance, advertising and other services inside and outside the Company. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your data and to consider it a business secret.

Data collected about you by Google LLC

The Company uses services provided by Google LLC and its affiliates, including YouTube, Android, and services provided on third-party websites, such as advertising services (“Google”).
This Privacy and Security Statement does not apply to services that have separate privacy policies, however, in accordance with the regulations related to personal data protection, the Company is obliged to inform its users about the data collected by Google LLC providing its services to other legal and natural persons.
The data that Google collects includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network data including operator name and phone number, and application version number.
Furthermore, Google collects the data about the interaction of applications, browsers, and devices with Google services, including IP address, crash reports, system activity, and the date, time, and referral URL for the respondent’s request.
Google collects the data when a Google service on your device contacts Google servers – for example, when you install an app from the Play Store or when the service checks for automatic updates. If you use an Android device with Google applications, your device periodically contacts Google servers for providing device data and connecting to our services. This includes the data such as device type, mobile operator name, crash reports, and applications you have installed.

  1. The data about your activities

For example, Google collects the data about your activities on Google services to recommend a video on YouTube that you might like. Activity data collected by Google may include:

– the terms you are looking for
– videos you’re watching
– Display and interact with content and ads
– data on voice and audio activity when using audio features
– purchasing activities
– People you interact with and share content with
– activities on websites and third-party applications that use our services
– The browsing history in Chrome that you synced with your Google Account.

If you use Google services to make and receive calls or send and receive messages, Google may collect phonebook information such as your phone number, the number you called, the number that received the call, the numbers to which calls were diverted, the time and date of the call and messages, call duration, routing information, and call types.

You can find and manage activity data stored in your Google Account.

  1. Location data

Google collects the data about your location when you use specific Google services. Your location can be determined with different levels of accuracy based on:

– GPS
– IP address
– sensor data on the device
– Data about things near the device, such as Wi-Fi access points, mobile transmitters, and Bluetooth-enabled devices.

In some circumstances, Google also collects data about you from publicly available sources.
For example, if your name appears in a local newspaper, Google’s search engine may index that article and show it to other users when they search for your name.
It’s important to note that Google may also collect the data about you from trusted partners, including marketing partners who provide  the data about potential users of Google business services and security partners who provide us with anti-abuse data, as well as advertisers to provide ads and research services in their name.

For what purposes does Google collect your data

Google may use your data to ensure the proper functioning of the Services, for example by monitoring downtime or resolving issues you report.
Furthermore, Google uses the data for analytical and measurement purposes.
For example, Google analyzes the data about your visits to Google sites and uses the data about the ads you interact with.
When you visit sites that use Google Analytics, Google and a Google Analytics user may associate the data about your activity on that site with activity on other sites that use Google advertising services. The data we collect, such as your email address, is used by Google to interact directly with you. For example, it may send you a notification if it detects suspicious activity, such as trying to sign in to your Google Account from an unusual location, or it may notify you of upcoming changes or improvements to services.
In case you contact Google, Google records a request record to help resolve your issue.
Google uses automated systems that analyze your content to provide customized search results, customized ads, or other features tailored to your use of our services.
Google also analyzes your content to detect abuse, such as unwanted, malicious, or illegal content. Algorithms are also used to identify patterns in Google data.
For example, Google Translate helps people communicate in different languages by revealing common language patterns in the phrases you are looking for a translation for.
For the purposes described above, Google may combine the data collected from its services and all of your devices. Depending on your account settings, your activity on other sites and applications may be linked to your personal information to improve Google services and the ads that Google displays.
If other users already have your email address or other credentials, Google may show them your publicly visible Google Account data, such as your name and photo. For example, they can more easily recognize the email you send them.

Your privacy controls

You have choices about the data that Google collects about you and how it uses it.
This section describes the main privacy management controls:

  1. You can visit a privacy settings check through which you can view and adjust important privacy settings.
  2. Visit Privacy Settings Check, Data Management, and View and Update Data pages.
    Once you are logged in, you can always view and update your information by visiting the services you use.
  3. Google has also established a location where you can view and manage the data stored in your Google Account.
    The following controls are available in your Google Account
    a. Privacy controls
    b. Activity controls
    Specify the types of activities you want to save to your account.
    c. Ad settings
    Manage your ad settings that appear on Google and on sites and applications that display ads in partnership with Google. You can change your interests, choose whether your personal data is used to display relevant ads, and turn certain advertising services on or off.
  1. Google allows you to manage the data that others see about you on Google services.
  2. Shared recommendations by Google.
    Choose whether your name and photo will appear next to your activities, such as reviews and testimonials that appear in your ads.
  1. Information you share.
    Determine who you want to share information with through your Google+ account.
  1. Google also provides ways to view and update your data.
    On the My Activity page, you can view and control data generated by your use of Google services, such as your past searches and visits to Google Play.
    You can view your activity by date and topic, and you can delete it in part or in full.
  1. Google Dashboard
    You can use the Google Dashboard to manage data related to specific products.

Your personal data

  1. Manage your contact data such as name, email address, and phone number.
    When you are not logged in, you can manage the data associated with your data.
    Customize your search while logged out: Choose whether your search activity will be used to offer relevant results and recommendations.
    YouTube settings: Pause and clear your YouTube search history and YouTube viewing history.
  2. Manage your ad settings on sites and applications that run ads in partnership with Google.
  3. Export, remove and delete data
    Optionally, you can export a copy of the content from your Google Account to back up or use on service outside of Google.
  4. Request the removal of content from certain Google services based on applicable laws.
    To delete your data, you can:
  • Delete content from certain Google services.
  • Search for and then delete specific items from your account by the My Activity page.
  • Delete certain Google products, including data associated with them.
  • Delete your entire Google Account.

Finally, there’s Inactive Account Manager, which lets you give someone else access to parts of your Google Account in case you can no longer use it.

  • Browser settings: For example, you can configure your browser to indicate when Google places a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains.

Please note that Google’s services for proper operation rely on cookies, for example, to remember your language settings.

  • Device settings: Your device may have controls that determine what data Google may collect. For example, you can change location settings on an Android device.

In Zagreb, October 2021

Da-Mogu d.o.o.