Kraš

Personal data

Personal data, handled in accordance with the applicable law and Kraš bylaws, means any information relating to any identified or identifiable natural person (such as a name, address, phone number, email address and others).
Processing of personal data means any operation, which is performed on personal data, whether or not by automated means, such as collection, use, storage, adaptation or alteration, erasure or destruction.

Purpose of processing and consent

Personal data will only be collected for specific purposes, of which we will notify you, as a data subject, or any individual, whose data we collect, and, when necessary or required by law, we will require consent for data processing. Consent means any freely given and specific indication of your wishes by which you signify agreement to the processing of personal data relating to you for the purpose it is collected.

Personal data is processed for the purpose of informing users/consumers about existing and new products and other marketing activities; participating in prize games and draws; selecting job candidates; replying to user/consumer queries, etc.

All data is freely given, and when collecting data electronically by completing the relevant online form, consent is given by checking the box stating the processing purpose.

When collecting personal data by paper (by post), the possibility is provided to, when necessary, give consent for processing personal data. In most cases, these are prize games or prize draws where terms and conditions of prize games/draws describe the way consent is given, whether by a signature of a person, tick-box or in other way provided.

We shall not process more personal data than necessary for the purpose of you participating in any of these activities.

Types and use of collected data on the Kraš website

Kraš Plc collects data that does not identify a specific end user, including the Uniform Resource Locator (URL) of the website the user visited before coming to the Kraš website, URL of the website, which the user visited after leaving the Kraš website, type of browser the user is using and the Internet Protocol (IP) address of the user. Authorised Internet service providers and advertisers may automatically collect such information while visiting this website via cookies and other tools. Kraš Plc uses such information solely to troubleshoot problems, administrate the website content, analyse trends, collect demographic data, analyse compliance with current laws and regulations and cooperate with law enforcement services.

Depending upon the activity, some information is identified as mandatory, and some as voluntary. If the user does not provide the mandatory data with respect to a particular activity, they may not be able to engage in that activity. Kraš Plc will not collect personal data via its website, such as a name, address, phone number or email address of the user, unless the user voluntarily chooses to provide us with it via a contact form on the website or survey, gives its consent, or unless otherwise permitted by applicable data protection law.

Server statistics

Our global network server uses a statistical programme. These programmes are a standard feature of all web servers and are not unique for the kras.hr website. Such statistical programmes allow us to identify information that interests our users the most or the least. Such a programme should be introduced for the efficiency of the structure of our website and for measuring the number of visits of the kras.hr website.

Protection and retention of personal data

Personal information collected by us is kept secure and confidential, in both electronic and paper form, and we have appropriate technical, organisational and administrative measures to protect personal information in accordance with the applicable law and Kraš' bylaws.
Personal information is processed for so long as is necessary for the purposes for which it is collected, after which it will be deleted. Each time when collecting personal data for a particular purpose, we will inform you about length of time personal data is retained.
Regardless of the expected retention time, personal data collected with consent may be, at any time, deleted at your request (for example, user account deletion).

Except for the right to ask for your personal data to be deleted, you have, at any time, a right of access and rectification of personal data, if necessary.

Children data protection

Considering the sensitive nature of processing personal data of children, Kraš processes children personal data only with prior express consent from their parents.

As regards the right to, and possibilities of, use of services of Kraš' website (for example, www.igraoni.ca), under the applicable law, Kraš Plc provides and offers such activities only to children aged 16 and above. For children under 16, consent must be given by the holder of parental responsibility over a child.

Disclaimer

Even though we are implementing the available technical, organisational and administrative measures of personal data protection against accidental or deliberate misuse, destruction, loss, unauthorised changes or access, we cannot guarantee that some of the personal data we collect will never be accidentally disclosed, contrary to the provisions of here described legislation and Kraš bylaws.

To the utmost extent permitted by law, we exclude liability for the loss caused to users or third persons by accidentally disclosing personal data.

The requests regarding the exercise of rights or inquiries about the processing and protection of personal data can be sent to the address of data protection officer:

KRAŠ d.d.
Ravnice 48, Zagreb
e-mail: zop@kras.hr