Data Privacy

Statement on the Collection and Use of Personal Data
POP d.o.o. is committed to protecting customer personal data by collecting only the necessary, basic information about customers/users required to fulfill our obligations. We inform customers about how collected data is used and regularly provide customers with the option to choose how their data will be used, including the option to decide whether they want their name removed from marketing campaign lists. All user data is strictly protected and accessible only to employees who need the data to perform their work. All employees of POP d.o.o. and business partners are responsible for respecting the principles of data privacy protection.

We respect your privacy, whether you are using our services or just seeking information about them.
You have the right to protect your personal data: name, address, telephone number, email address, and other information that may directly or indirectly serve to identify you through reasonable efforts.

This statement describes how we collect your personal data, the purpose for which it is collected, how we use your personal data, who your personal data is shared with, how it is protected, and what your options are regarding data protection.

This statement applies to the processing of your personal data on the divestore.hr website, marketing campaigns that may lead you to this website, sponsored social media posts, etc., as part of the services we or third parties acting on our behalf manage.

Who is responsible for the processing of your personal data?
Simon Blažević
POP d.o.o.
Poduzetnička zona 13, 52216 Galižana

Phone number: +385 52 214 185
Email address: info@divestore.hr

Whom can you contact regarding questions or requests about personal data?
For any questions, requests, or complaints regarding this statement or to exercise your rights under this statement, you can contact us at the email address provided at the beginning of the statement.

Core Principles
We value the trust you place in us by sharing your personal data and are committed to processing it fairly, transparently, and securely. The key principles we follow when processing personal data are:

• Legality: We will collect personal data in a fair, lawful, and transparent manner.
• Minimization: We will limit the collection of personal data to what is necessary for the purpose for which it is collected.
• Purpose Limitation: We will collect personal data only for specific, explicit, and legitimate purposes and will not process it in ways inconsistent with those purposes.
• Accuracy: We will ensure the accuracy and up-to-dateness of personal data.
• Security and Data Protection: We will implement technical and organizational measures to ensure appropriate data protection, preventing unauthorized disclosure, access, accidental or intentional destruction, loss, or alteration, and other unlawful forms of processing.
• Access and Correction: We will respect your rights concerning your personal data.
• Storage Limitation: Your personal data will be stored following applicable data protection laws and only as long as necessary to achieve the purpose for which it was collected.
• Protection During International Transfers: If your data is transferred outside the European Economic Area (EEA), we will ensure that it is appropriately protected.
• Third-Party Protection: We will ensure that personal data transferred to third parties complies with the law and appropriate contractual protection measures are in place.

What data do we collect and on what legal basis?
You will always be clearly informed about the personal data we collect. These details will be presented to you in a separate privacy notice, specific to the service, such as communication services, newsletters, reminders, offers, invitations to events, etc.

In accordance with data protection regulations, we may process your personal data if:

• You have given consent for specific purposes (as stated in the privacy notice related to the processing). You can withdraw your consent at any time.
• The processing is necessary for fulfilling a contract to which you are a party.
• We pursue legitimate interests, such as preventing abuse or fraud, verifying warranty claims, or checking your satisfaction with products and services.
• We are fulfilling legal obligations, such as processing identity details when you purchase a product or service (e.g., name, address, VAT number, product type, price, payment, etc.).

Purpose of processing your personal data
Personal data is processed for specific, legitimate purposes and is not processed in ways inconsistent with those purposes.

For example, processing may be necessary to fulfill your order, improve your website visit experience, enhance products and services, provide offers or applications, marketing communications, etc. Each processing purpose is clearly stated in the privacy notice, such as on the website, an order form, or a newsletter.

Accuracy and updating of personal data
It's important that your data is accurate and up to date. Notify us of any changes or inaccuracies in your data so we can update or correct them.

Access to personal data
You have the right to access your personal data that we process. If your data is inaccurate or incomplete, you can request corrections or deletions.

How long do we store your personal data?
We store personal data in accordance with data protection laws for as long as necessary to fulfill the purposes for which the data was collected, or as long as required by law (e.g., 10 years for issued invoices).

Protection of your personal data
We implement technical and organizational security measures to protect your personal data from illegal or unauthorized access, accidental loss, or destruction.

Use of cookies and similar technologies
We use cookies on our website to improve your experience. For more information, read our Cookie Policy.

Transfer of personal data
We may share your personal data with authorized third parties, such as advertising agencies, IT service providers, and business partners. These parties must comply with data protection laws and ensure the confidentiality of your personal data.

Social media use
If you log in to our online store via social media (e.g., Facebook), we will collect your personal data available on these platforms, with your consent.

International transfers outside the EEA
Your personal data may be transferred to recipients outside the EEA. We will ensure that appropriate protection measures are in place when such transfers occur.

Your rights and options
You have various rights regarding how we use your personal data, including the right to access, correct, or delete your data, or object to direct marketing.

Data protection rights authority
You have the right to file a complaint with the Croatian Personal Data Protection Agency (http://www.azop.hr , azop@azop.hr).