In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119, 4 May 2016, p. 1; hereinafter: the General Data Protection Regulation), which has been fully in force since 25 May 2018 in the Republic of Croatia and all EU Member States, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18; hereinafter: the Act), the Labour Act (Official Gazette 93/14 and 127/17), the Occupational Safety Act (Official Gazette 71/14, 118/14 and 154/14), and the broader legal framework for personal data protection in the Republic of Croatia and the European Union, and following best European practice, FEEL IQM D.O.O., registered with the Commercial Court in Rijeka (hereinafter: IQM DESTINATION), as the controller of personal data of its service users and customers, has adopted this Privacy Policy for the protection of personal data of its service users and customers. This Privacy Policy is a unilaterally binding legal act based on fundamental principles of personal data processing, by which it regulates which user data are collected, how such data are processed and for what purposes they are used. It also informs service users and/or customers of their rights regarding the collection and further processing of personal data, all with the aim of protecting their privacy in the broadest sense.

Scope of Application

This Privacy Policy applies to all services offered by IQM DESTINATION and aims to clearly and transparently inform users about the procedures for processing their personal data and their rights. At any time, users may request correction, supplementation and/or updating of the data concerning them, withdraw any consent given and request cessation of further processing of personal data.

Data Controller and Contact Details

The controller of personal data is FEEL IQM D.O.O.

Contact for data protection queries: [email protected]

Methods and Types of Personal Data Collection

We collect personal data directly from users when they provide information to IQM DESTINATION as the controller, in the scope necessary for providing services, sales or other interactions via our website WWW.IQMDESTINATION.COM. To provide appropriate services, users must supply the data required to establish a contractual relationship for each service and/or product sale. Customers may provide data orally, in writing at our headquarters, by email to any IQM DESTINATION address, or through our website. We may also obtain data from publicly available sources—such as internet portals, telephone directories and other services—for the purposes for which they were originally collected. When you visit our website, applications or portal, we automatically collect data linked to network identifiers (IP addresses and cookie identifiers, such as those used by Google Analytics) to track user interaction and site usage. A cookie is a small data file stored on your device when you visit a website; cookies improve user experience, save preferences, make websites work more efficiently, and track site traffic. If you disable or block cookies, you can still browse our site, but some features or functionalities may be unavailable or slower to load. These network identifiers may leave traces which, in combination with other identifiers and server information, can serve to identify the user.

Data Categories and Purposes

The amount and type of personal data collected depend on the service provided and the legal basis for processing. IQM DESTINATION collects only the minimum necessary data to achieve the legally defined purpose. Typical data provided by customers/users include full name, address, personal identification number (OIB), telephone or mobile number, email address, identity-card details, and bank account or card information for payment purposes. IQM DESTINATION also collects basic contact data (name and email) and interests from potential customers who request information or offers.

Data Storage and Processing Location

All personal data of customers/users are processed and stored in the Republic of Croatia.

Security Measures

IQM DESTINATION implements technical and organisational measures to ensure an appropriate level of security. Measures are taken so that anyone acting under the authority of the controller who has access to personal data processes them only on the controller’s instructions. Taking into account the nature, scope, context and purposes of processing, as well as the risks to individuals’ rights and freedoms, appropriate measures are applied in accordance with security policies to ensure and demonstrate compliance with the GDPR.

Legal Basis and Retention Period

Personal data are processed for the conclusion and execution of contracts, completion of purchases or service interventions, delivery of ordered products, provision of advice and assistance, extended warranties, complaint handling, prize-draw notifications, direct marketing (with consent), and CCTV operation for protection of persons and property. Processing for these purposes is necessary for contract performance; without essential data, IQM DESTINATION cannot conclude or execute a contract. Data are retained as required by law or until the processing purpose ceases. Where processing is based on consent, data are stored for ten years unless the data subject requests earlier deletion via [email protected].

Users’ Rights and How to Exercise Them

Users can exercise their rights—access, rectification, erasure, restriction, objection to processing, and data portability—by contacting us at [email protected]. They may also lodge a complaint with the national supervisory authority.

Disclosure to Third Parties

Personal data may be disclosed to third parties (including authorities) to fulfill legal obligations, protect vital interests, or to engage processors necessary for contract execution.

Employee Data Processing

Employee personal data are collected and processed only if required by law or necessary for exercising rights and obligations under the employment relationship, and are disclosed to courts or public bodies only on request.

Cookies Policy

This Cookie Policy explains what cookies are, how we use them, the types of cookies used, the data collected via cookies, how that data are used, and how to control cookies. Cookies are used to ensure website functionality, security, user experience, performance analysis, personalised advertising, and social-media features. You can change or withdraw your cookie consent at any time via the “Privacy & Cookies Policy” tab on our website or through your browser settings. For more on managing and deleting cookies, see wikipedia.org and allaboutcookies.org.