Privacy policy

Last updated on Thu, 29th Aug 2024

Privacy Policy

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter: the General Regulation or GDPR).

The Plantaza Association is committed to protecting your privacy in accordance with the principles of the General Regulation and hereby adopts this Privacy Policy. This Policy outlines how the Plantaza Association collects, uses, and manages your data, including personal data, whether you are a user of our services, a supplier, a partner, or if you’ve subscribed to receive our promotional materials (hereinafter: You). This Policy applies only to natural persons (data subjects) and their personal data. The processing of information relating to legal entities (such as trade secrets, professional secrets, or confidential information) is not subject to this Policy.

The Plantaza Association is the Data Controller for personal data we collect from you, i.e., the entity that determines the purposes and means of processing your personal data.

Please read this Policy carefully to understand why and how we collect your information and how we use it.
By using our website or contacting us via the contact form, you agree to the use of your personal data as described in this Policy.

This Privacy Policy will be regularly reviewed and may be updated or modified at any time. Any revised version will be published on this website and will take effect immediately upon publication, unless otherwise stated.

By registering or continuing to use this website, you confirm your understanding and consent to the processing of data in accordance with the updated version of this Policy.


Personal Data

For the purposes of this Privacy Policy, Personal Data refers to any information relating to an identified or identifiable natural person — the data subject. This includes any data that directly identifies a person or that can be used to identify a person indirectly, such as name, surname, address, personal identification number (OIB), email, and IP address. Identification can be direct or in combination with other information in our possession or which we may come into possession of.

Unless stated otherwise in this Policy, the terms used herein carry the meaning assigned to them in Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR).

Data Controller

PLANTaža Association (we, us, our) acts as the Data Controller with respect to the processing of your Personal Data covered by this Privacy Policy under applicable data protection laws. This means that we decide how your data is processed and for what purposes.

Types of Personal Data Collected and Processing Purposes

Visiting and browsing the website does not require user registration, meaning registration and account data is not collected. For more information on data collected via cookies, please read our [Cookie Policy].

The Plantaza Association may collect the following personal data:

Information voluntarily provided by users through our website contact forms, for the purpose of inquiries or communication with the Plantaza Association;

Other data voluntarily provided by the user when requesting specific services or information.

When you access our website, general, non-personal data is automatically recorded (e.g., number of visits, average visit duration, pages viewed). This data is used to measure the attractiveness of our website and to improve its content and usability.

Legal Basis for Processing Personal Data

We do not collect or process your personal data unless you provide consent, there is a legal basis for collecting such data, or the Plantaza Association has a legitimate interest in processing it.

This Privacy Policy does not apply to personal data collected offline or through third-party websites, or to personal data collected and processed by franchises connected to the operations of the Plantaza Association

Data Retention

All personal data processed by the Plantaza Association based on individual consent or legitimate interest will be retained until the consent is withdrawn or a request for data processing termination is made. We may delete this data sooner if the purpose of processing is fulfilled or if required by law.

We do not disclose your personal data to unauthorized third parties.

Security Statement

We take all necessary measures to ensure the security of your personal data and protect it from loss, destruction, falsification, manipulation, unauthorized access, or disclosure.

Who Has Access to Your Data

Access to your data is granted only to authorized representatives of the Plantaza Association who are familiar with data protection policies and procedures. Third parties may access and process your data only under the following circumstances:

Third-party service providers acting on behalf of the Plantaza Association (e.g., accounting services, legal representatives, technical infrastructure partners). These providers are obligated to follow our instructions and are given only the data necessary for their services. They are also required to maintain confidentiality and implement security measures.

When the Plantaza Association is legally required to submit your data to competent authorities (e.g., Ministry of Finance, Tax Administration) or when such authorities perform inspections of our operations. In such cases, your data will be processed in accordance with their legal powers.

Website Analytics – Google Analytics

Our website may use Google Analytics, a web analytics service provided by Alphabet Inc. and its affiliates (Google). Data generated by cookies regarding your use of the website (including your IP address) will be transmitted to and stored by Google on servers in Ireland, for a maximum of 26 months before deletion (subject to terms in effect at the time).

Google uses this data to evaluate website usage, create reports for website operators, and offer services related to website activity and internet usage. Google may also share this data with third parties when required by law or when such third parties process data on Google's behalf. Google will not associate your IP address with any other data held by Google.
More information on Google’s privacy policy can be found at:
http://www.google.com/privacy.html

Your Rights Regarding Personal Data Processing

To ensure lawful processing of your personal data, under applicable data protection regulations, you have the following rights:

 - Right of access to your personal data
 - Right to rectification of inaccurate data
 - Right to erasure (“right to be forgotten”)
 - Right to restrict processing
 - Right to data portability
 - Right to object to data processing
 - Right to lodge a complaint with a supervisory authority


Contact Information – Data Controller

For any questions related to this Privacy Policy, please contact us via email at: 
udrugaplantaza@gmail.com.