Privacy policy

Data Protection Officer (DPO)

Candy Shells d.o.o. has a Data Protection Officer (DPO) responsible for managing your personal data. You can contact them via email at XXXX or send a letter or visit us at: Candy Shells d.o.o., (GDPR Department), Mletačka ulica 12, 52100 Pula, Croatia.

 

Purpose of Data Processing  

Candy Shells d.o.o. collects your personal data to send you updates and offers via email, SMS, newsletters, or postal mail. With your consent, we will also use your data for:

 

  • Analyzing customer satisfaction  

  • Conducting surveys to improve our services  

  • Offering you personalized products, services, and promotions  

 

Types of Data Processed

We process the following personal data:

 

  • Name, surname, email (to contact you and send you information)  

  • Phone number and address (if necessary for collaborations)  

  • Financial data such as credit card numbers (if required for bookings, in compliance with PCI DSS security standards)  

 

Legal Basis for Processing

We process your personal data only with your consent or when required by legal regulations, such as sharing data with authorities or courts. If we use the data for other purposes, we will inform you beforehand.

 

Access to Personal Data

Your data may be shared with authorized consultants or third parties only when necessary by law or to provide services. We ensure that all involved parties comply with GDPR regulations.

 

Duration of Data Processing

We will process your personal data only for the time necessary to fulfill the purposes outlined above or until you withdraw your consent. In the case of legal proceedings, data may be retained until their conclusion.

 

Your Rights

You have the right to:

 

  • Access your personal data  

  • Correct any inaccurate or incomplete information  

  • Delete your data (right to be forgotten) under certain circumstances  

  • Restrict the processing of your data in specific situations  

  • Object to the processing of your data for personal reasons or direct marketing  

  • Transfer your data to another data controller  

 

If you wish to exercise any of these rights, contact us via email at XXXX or by mail at Candy Shells d.o.o., (GDPR Department), Mletačka ulica 12, 52100 Pula, Croatia. If you believe your rights have been violated, you can file a complaint with the relevant supervisory authority.

 

Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy at any time. In case of significant changes, we will notify you via email or other appropriate channels.