This privacy policy (“Policy”) explains how company HŽ Infrastruktura d.o.o., Mihanovićeva 12, 10000 Zagreb, PIN: 39901919995 (hereinafter: "HŽ Infrastruktura") collects, uses and manages your personal data that are located on the website and that are available to HŽ Infrastruktura due to your use of the website: www.krizevcidg.hr

HŽ Infrastruktura is committed to protecting and respecting your privacy. Read this Policy carefully to understand why and how we collect your personal data and how they will be used. In terms of personal data that we collect, HŽ Infrastruktura is the "controller", i.e. the one who determines the needs for which and the means by which personal data are processed.

HŽ Infrastruktura, as the service provider of the website www.krizevcidg.hr, is committed to protecting personal data privacy.

If you wish to contact us regarding this policy or regarding your personal data, please use the following contact details:

HŽ Infrastruktura d.o.o.
Mihanovićeva 12
10000 Zagreb
PIN: 39901919995

You can contact the Personal Data Protection Officer at: dpo@hzinfra.hr

How and when do we collect your personal data?

HŽ Infrastruktura collects personal data for the purpose of improving our business operations and your user experience. For these reasons, HŽ Infrastruktura has a comprehensive privacy program designed to respect and protect the right to data privacy, project analysis and implementation, marketing and other types of technical support.

We treat your personal data as confidential data and they are properly protected by HŽ Infrastruktura and/or our reliable partners.

We process your personal data in order to comply with legal obligations, if this is necessary for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract, or for legitimate interests, except when interests or fundamental rights and freedoms of data subjects that require personal data protection are stronger than those interests.

What data do we collect directly from you?

When a user engages in certain activities on the website www.krizevcidg.hr such as researching HŽ Infrastruktura’s projects, and/or when you want to send us an inquiry, and/or when you want to send us your CV, HŽ Infrastruktura may ask the user to provide certain additional personal data. In this case, before providing personal data, the user is obliged to study this Privacy Policy and agree to its application in relation to additional data.

Depending on the types of activities, some of the requested data are defined as mandatory and some as voluntary. If the user does not want to provide mandatory data for the activity that requires them, he/she will not be allowed to engage in that activity.

HŽ Infrastruktura collects and uses personal data in order to enable users to use the activities via the website www.krizevcidg.hr, improve the work of the website www.krizevcidg.hr, create a user database for the purpose of improving the service and/or marketing, and improve advertising and promotional activities. Also, personal data can be used to solve problems, perform administrative tasks and establish contact with users.

On the website www.krizevcidg.hr, HŽ Infrastruktura collects personal data of data subjects such as: e-mail address and IP address.

In addition to the personal data we process when you visit the website, below is the list of other types of personal data, purposes of their collection and use, all of which we collect and process during the performance of our regular obligations related to the registered activities of HŽ Infrastruktura:

• HŽ Infrastruktura collects and processes personal data of its employees and other associates for the purpose of performing employment contracts signed with employees and consulting contracts and/or work contracts signed with associates, which relate to personnel, administrative or other business/contractual business purposes. In the latter case, we collect and process data such as: name, surname, gender; marital status, citizenship, residence, date and place of birth, personal identification number; vocation, occupation, data on professional training and courses, data related to health insurance, work experience; data on the account number (IBAN), and signature.
• From suppliers, sponsors and other clients, for the purpose of fulfilling contractual obligations, we collect and process data such as: name and surname of the responsible person in the legal entity; contact details of the person in charge of communication and performance of contractual obligations; academic and professional qualifications of the responsible persons in the legal entity and the signature of the responsible person.
• From job candidates, all for the purpose of possible employment, the data collected and processed by HŽ Infrastruktura may include: name, surname, address, contact data (e-mail address, telephone number, mobile phone number), photograph, level of education, citizenship, vocation and occupation, information on previous work experience, information on professional training and courses, and test results that may reflect the candidate's ability to perform all job responsibilities that a particular position for which he/she is applying requires from him/her.

The following persons may have access to personal data in the performance of their scope of work: legal entities participating in the execution of legal relations with users such as IT support and other companies related to HŽ Infrastruktura, public bodies that require the submission of personal data in accordance with regulations binding on HŽ Infrastruktura, of which HŽ Infrastruktura keeps the prescribed records of processing activities.

What privacy rights do you have?

HŽ Infrastruktura respects that every user should be able to ensure the accuracy, completeness and up-to-dateness of their personal data. If a user believes that his/her personal data are incomplete, inaccurate or not updated, he/she can contact HŽ Infrastruktura by sending an e-mail to dpo@hzinfra.hr.

Please note that at any time you have the right to request the following from HŽ Infrastruktura:

To give you access to your personal data	You can ask HŽ Infrastruktura which of your personal data it uses, and you can also request access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we store, the authorities or categories of authorities with whom we share your personal data, the data retention period, as well as the source of data in case the data are collected indirectly.   You can contact us if you want a copy of some or all of your personal data we are keeping.
To request correction of incorrect data	We want your personal data to be accurate and up to date. You can ask us to correct or remove data you believe are inaccurate or out of date.
To request erasure of personal data	You can ask HŽ Infrastruktura to stop processing or even erase your personal data. If we need your personal data to perform a contractual obligation towards you, HŽ Infrastruktura may cease to be able to perform such contractual obligations. Also, if your personal data are necessary in order to be able to fulfill certain legal obligations (e.g. tax liabilities), your request may not be able to be fulfilled.
To restrict access to your data (to us and/or third parties) in certain processes or in full	If you wish to challenge the accuracy of the data, or we no longer need personal data for the purpose of processing, but you need them to establish, implement or process legal claims or you have objected to processing on grounds we deem legitimate, you have the right to request a restriction of personal data processing.
To file an objection to the manner in which we use your data	Remember that you have the right to object to the processing of personal data based on a legal basis that HŽ Infrastruktura considers legitimate.
To request data transfer to another processor (portability of rights)	If the processing is based on your consent or is performed by automatic means, you have the right to request from HŽ Infrastruktura the transfer of data to another processor.

 

To exercise any of the above rights, please use the contact information provided at the beginning of the Privacy Policy. If you are not satisfied with how we have collected or used your personal data, you can lodge a formal complaint to the Personal Data Protection Agency.

Where are your personal data stored?

We store the personal data we collect about you in a secure environment. Your personal data are protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.

The processed data are stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.

HŽ Infrastruktura will ensure that personal data are kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons.

The data collected for the purposes specified in this Policy will be stored only for as long as is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than HŽ Infrastruktura reasonably deems necessary to achieve the purpose for which they have been collected or processed. HŽ Infrastruktura will store certain personal data for a period of time prescribed by law or a regulation obliging HŽ Infrastruktura to keep data.

In the event that you have given us consent, we will process your personal data until the consent is withdrawn. If you make a founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.

In addition to all of the above, it is important to point out the following; if judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including a possible period for declaring legal remedies. HŽ Infrastruktura will store certain personal data for a period of time prescribed by law or a regulation obliging the controller to keep data.

Does HŽ Infrastruktura exchange data with third parties?

Privacy protection is important to us, so we will never share your personal data with third parties except for the purposes described in this Policy.

HŽ Infrastruktura cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that provides an adequate level of protection in accordance with EU legislation.

HŽ Infrastruktura, as the personal data controller, may transfer personal data outside the EU if it is necessary for the execution of a contract between HŽ Infrastruktura and the processor and/or another controller, or for the fulfillment of legal obligations. In the latter case, HŽ Infrastruktura transfers personal data only to countries that provide an appropriate level of protection, through contract models that contain binding provisions or through binding corporate rules; or in accordance with an approved certification mechanism.

In addition to all of the above, we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of HŽ Infrastruktura, for example, for the needs of marketing, financial, advertising and other services inside and outside HŽ Infrastruktura. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your data and to consider them a trade secret.

How long will HŽ Infrastruktura keep your personal data?

HŽ Infrastruktura will not keep your personal data for longer than the period for which the data is needed to fulfill the purpose of their use, but for a maximum period of 3 years, except in exceptional cases when the law prescribes a longer retention period.

Cookies

Cookies are small files that we send to your computer and that we can access later. They can be temporary or permanent. Thanks to cookies, you can easily search our website and display results that are relevant to you. Cookies show us what interests you and other visitors to our website, which helps us improve it.

You can read more about the name and purposes of the cookies we use in our Cookies Policy, which you can find at the following link

Other websites

This Privacy Policy applies only to the use and utilization of data collected by HŽ Infrastruktura from users (data subjects). Other websites that can be accessed via the website www.krizevcidg.hr have their own data confidentiality and collection statements, and the manners of data use and publication.

HŽ Infrastruktura shall not be responsible for the methods and working conditions of third parties.

HŽ Infrastruktura collects and processes personal data via user interactions on social networks such as YouTube. HŽ Infrastruktura or responsible persons appointed by HŽ Infrastruktura have access to publications on the mentioned social networks, however, personal data collected through them, especially those contained in messages, are not stored and further processed by HŽ Infrastruktura, except for the purposes specified in this Policy.

HŽ Infrastruktura uses a business profile using YouTube services, and you can review the Privacy Policy or privacy statements, as well as the way they use your personal data at:

 

YOUTUBE ONLINE	https://policies.google.com/privacy?hl=hr

 

If you have any questions regarding the collection and processing of data by YouTube or you wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:

 

 

FOR YOUTUBE: Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland
Contact of the Data Protection Officer:	https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data are being collected and processed, you can contact the lead supervisory authority for YouTube, the Irish Data Protection Commissioner or the Croatian Data Protection Agency.

 

Data about you collected by Google LLC

HŽ Infrastruktura uses the services provided by Google LLC and its affiliates, including YouTube, Android and services provided on third-party websites, such as advertising services (hereinafter: Google).

HŽ Infrastruktura is also obliged to inform its users about the data collected by Google by providing its services to other legal and natural persons.

The data collected by Google includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including operator name and phone number, and application version number.

Furthermore, Google collects data about the interaction of applications, browsers, and devices with Google services, including IP address, crash reports, system activity, and the date, time, and referral URL for the data subject's request.

Google collects data when a Google service on your device contacts Google servers - for example, when you install an app from the Play Store or when the service checks for automatic updates. If you use an Android device with Google applications, your device periodically contacts Google servers to provide device information and connect to our services. This includes data such as device type, mobile operator name, crash reports, and applications you have installed.

Data about your activities

Google collects data about your activities on Google services in order to, for example, recommend you a YouTube video that you might like. Activity data collected by Google may include:

• Terms you browse
• Videos you watch
• Content and ads display, and interaction with then
• Data on voice and audio activity when using audio features
• Purchase activities
• People with whom you interact and share content
• Activities on websites and third-party applications that use our services
• Browsing history in Chrome that you synced with your Google Account.

If you use Google services to make and receive calls or send and receive messages, Google may collect phone log information such as your phone number, the number you called, the number that received the call, the numbers to which calls were diverted, the time and date of the calls and messages, call duration, routing data, and call types.

You can find and manage activity data stored in your Google Account.

Location data

Google collects data about your location when you use specific Google services. Your location can be determined with different levels of accuracy based on:

• GPS
• IP addresses
• Sensor data on the device
• Data about things near your device, such as Wi-Fi access points, mobile transmitters, and Bluetooth-enabled devices.
• In some circumstances, Google also collects information about you from publicly available sources.

For example, if your name appears in a local newspaper, Google's search engine may index that article and show it to other users when they search your name.

It's important to note that Google may also collect data about you from trusted partners, including marketing partners who provide information about potential users of Google business services and security partners who provide us with anti-abuse data, as well as advertisers to provide ads and research services on their behalf.

For what purposes does Google collect your data

Google may use your data to ensure the proper functioning of services, for example by monitoring downtime or resolving issues you report.

Furthermore, Google uses the data for analytical and measurement purposes.

For example, Google analyzes data about your visits to Google websites and uses the data about the ads you interact with.

When you visit websites that use Google Analytics, Google and a Google Analytics user may associate information about your activity on that website with activity on other websites that use Google advertising services. The data we collect, such as your e-mail address, is used by Google to interact directly with you. For example, it may send you a notification if it detects suspicious activity, such as an attempt to sign in to your Google Account from an unusual location, or it may notify you of upcoming changes or improvements to services.

In the event that you contact Google, Google records a request record to resolve your issue more easily.

Google uses automated systems that analyze your content to provide customized search results, customized ads, or other features tailored to your use of our services.

Google also analyzes your content to detect abuse, such as unwanted, malicious, or illegal content. Google uses algorithms to identify patterns in data.

For example, Google Translate helps people communicate in different languages by detecting common language patterns in phrases for which you are looking for translation.

For the purposes described above, Google may combine the data collected from its services and all of your devices. Depending on your account settings, your activity on other websites and in other applications may be linked to your personal data in order to improve Google services and the ads displayed by Google.

If other users already have your e-mail address or other identifying data, Google may show them your publicly visible Google Account data, such as your name and photo. In this way they can, for example, more easily recognize e-mails you send them.

YOUR PRIVACY CONTROLS

You have choices about the data that Google collects about you and how it uses them.

This section describes the main privacy management controls:

You can visit privacy settings check via which you can view and customize important privacy settings.

Visit the Check privacy settings, Data management site, and view and update data.

Once you are logged in, you can always view and update your data by visiting the services you use.

Google has also set up a place where you can view and manage the data stored in your Google Account.

The following controls are available in your Google Account:

• Privacy controls
• Activity controls
• Specify the types of activities you want to be saved to your account.

Ad settings

Manage the settings of ads that appear for you on Google and on websites and applications that display ads in partnership with Google. You can change your interests, choose whether your personal data will be used to display relevant ads, and turn certain advertising services on or off.

Google allows you to manage the data that others see about you on Google services.

Shared recommendations via Google.

Choose whether your name and photo will appear next to your activities, such as reviews and recommendations that appear in ads.

Data you share

Determine who you want to share data with via your Google+ account.

Google also gives you ways to view and update your data.

On the My Activity page, you can view and control data generated by your use of Google services, such as your past searches and visits to Google Play.

You can view your activity by date and topic, and you can delete it in part or in full.

Your personal data

Manage your contact information such as name, e-mail address, and phone number. When you are not logged in, you can manage data associated with your data.

Customizing your search while logged out: choose whether your search activity will be used to offer relevant results and recommendations.

YouTube settings: pause and clear your YouTube search history and YouTube viewing history.

Manage ad settings on websites and applications that display ads in partnership with Google.

Data export, removal and deletion

Optionally, you can export a copy of the content from your Google Account to back up or use on a service outside of Google.

Request the removal of content from certain Google services based on applicable laws.

To delete your data, you can:

• Delete content from certain Google services.
• Search for and then delete specific items from your account via the My Activity page.
• Delete certain Google products, including data associated with them.
• Delete the entire Google Account.
• Finally, there's the Inactive Account Manager, which lets you give someone else access to parts of your Google Account in case you can no longer use it.

Browser settings: for example, you can configure your browser to indicate when Google places a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains.

Please note that Google services rely on cookies for proper operation, for example, to remember your language settings.

Device settings: your device may have controls that determine what data Google can collect. For example, you can change location settings on an Android device.

Transfer to third countries

HŽ Infrastruktura uses tools and services of social networks that do not operate only in the European Union. We are obliged to warn you that these third parties who manage these social networks may transfer your personal data to the United States where they are shared with intelligence services in accordance with the regulations in force in the United States.

We care about the protection of your data and that is why we have launched mechanisms that will enable an even higher level of your protection. It is important to us that you know that we have initiated the audit of our partners who we suspect are transferring data to third countries or the United States. Until the completion of these procedures, we will temporarily transfer personal data on the basis of consent.

We will additionally inform you about all the measures taken and we will change our policies upon completion of the ongoing procedures. If you are interested in how third parties change their data protection policies for Google LLC, see the link: https://policies.google.com/privacy?hl=en-US, while for the social networks we use, see the section “Other websites”.

Entry into force and change of the Privacy Policy

This Policy shall enter into force upon its publication on the website.

HŽ Infrastruktura reserves the right to amend the Privacy Policy and it will be published on the website.