Politika privatnosti

Processing Manager

The online portal CHESTER.hr is owned by ALCATRAZ d.o.o., Lučko, Keseri 21, VAT ID: 78499636576 (hereinafter referred to as CHESTER.hr).

CHESTER.hr places great importance on the protection of personal data, and the Privacy Policy (hereinafter referred to as the Policy) regulates the handling of your data when using its services.

Everything you need to know, clearly and transparently:

what data I collect and how,
how I use your data,
how long I store them and why,
how I protect your data,
who I share your data with,
which cookies and tools I use,
how you can exercise your rights.

What data I collect and how?
Your privacy is important to me, so I only collect data necessary for:

providing services and support,
improving your user experience,
enhancing the service and informing you about new services we have developed for you,
complying with legal regulations.

You provide me with data by filling out forms when using the services, I collect it automatically when you use CHESTER.hr, or I receive it from external sources when you use a service from an external partner on CHESTER.hr (e.g., payment confirmation, etc.).

I collect the data you enter when:

registering, completing surveys, questionnaires, and other online forms,
communicating with other users through CHESTER.hr messages,
providing support, advice, or responses to complaints,
making payments for services or processing refunds,
other activities on CHESTER.hr

In doing so, I collect your first and last name, address, contact information, your personal identification number, and other information you enter.

I can also automatically collect data that is available when accessing and using CHESTER.hr.

Geolocation only if you have enabled its use.
information about the device you are using (model, device identifier, mobile network, and similar),
usage logs that may contain IP addresses, time and duration of access, browser type, method of accessing CHESTER.hr pages, pages viewed or functionalities used in the mobile application, errors during use, and similar information.
content, time and duration of phone calls with CHESTER.hr, and the phone number from which you are calling.
the services you use, when and in what manner.

From other sources:

from other users (e.g., comments, ratings, reports of abuse, customer address for delivery, etc.),
external partners within the scope of the service provided (e.g., for SMS payments, the number from which the payment was made, etc.),
social networks if you have connected your CHESTER.hr account with a social media account (e.g., user profile name, phone number, email address, and other data you permit us to access).

I will ask for your explicit permission:

for the collection and processing of special categories of personal data, such as sexual orientation, health status, religious beliefs, and similar information.
CHESTER.hr services are not intended for you if you are under 16 years old, but I cannot know whether the data I collect or process pertains to children. I advise all parents and guardians to teach children how to handle personal data safely and responsibly online.

How do I use your data?
The collected data, as well as data that I become aware of while providing services, are processed only for the purpose of:

for which they were provided,
for which you have given consent,
based on the legal grounds: relevant legal regulations, legitimate interest, or Terms of Use.

You have the right to:

know which of your personal data I have and process,
request correction,
transfer your data and content,
withdraw any given consents at any time, in part or in full.

If you have a complaint regarding your rights, you can file a complaint with the competent Agency for Personal Data Protection.

I may use your personal data in order to:

provide you with information and assistance,
enable and facilitate your use of CHESTER.hr services and the CHESTER.hr website,
tailor content to your interests,
conduct surveys and adapt to your needs,
notify you about new services and service updates,
provide information about CHESTER.hr events and special offers,
provide information from our partners that may be of interest to you,
prevent fraud or other prohibited or illegal activities,
protect the security and integrity of CHESTER.hr and your data,
conduct business and statistical analyses,
develop new services and products based on them,
fulfill legal obligations.

I do not sell, rent, or lend user lists or users' personal data to third parties.

Data that I have anonymized or aggregated in such a way that you can no longer be identified as a specific individual is not considered personal data.

How do I protect your data?
I am fully committed to protecting your data from unauthorized access, disclosure, or deletion, regardless of its storage location, processing location, or the format in which it is stored.

I collaborate with trusted and professional partners who are obligated to adhere to high protection standards.

I implement recognized information security standards:

I implement technical and organizational protection measures based on risk assessment,
I monitor the collection of information, storage, and processing methods,
where possible, I pseudonymize and anonymize data,
I test organizational and technical protection measures,
I take measures that can identify and/or prevent the unauthorized collection and misuse of personal data, and mitigate potential damage.

I take measures to ensure data integrity and the availability of processing systems, taking into account the latest technological advancements, and I store the data in highly available data centers located in Croatia.

I am aware that there is no completely secure system and that security must be continuously improved.

You and all other CHESTER.hr users are my partners in security. Regularly update your information to enable me to send you recommendations on how to protect your data from misuse.

With whom do I share your data?
Only with partners who are in a contractual relationship and only with the data necessary for providing specific services. All persons who have access to your data and my partners are obliged to maintain confidentiality within the contractual relationship, as well as to implement organizational and technical protection measures.

With internet users and CHESTER.hr users, and you can choose which personal data you wish to publicly publish on CHESTER.hr or exchange with other users when using CHESTER.hr services.

Third parties will process your data only:

for the purpose of providing CHESTER.hr services, such as: payment services, data analysis, electronic or postal delivery, customer support services, data verification, and similar;
for the purpose of providing CHESTER.hr services, such as: hosting, IT services, accounting services, and the services of lawyers, auditors, and other consultants. To provide these services, I rely on the company ALCATRAZ d.o.o.

If required by law for the purpose of:

fulfilling the relevant law, sub-law act, or other regulation,
detecting, preventing, or resolving fraud and security or technical issues related to CHESTER.hr or users' personal data.

The data you have provided to me: first and last name, and email address, are transferred to third countries when you use CHESTER.hr messages (Mailgun) and when I send you promotional messages (Mailchimp).

Service providers and third parties will process personal data based on the instructions of CHESTER.hr and in accordance with this Policy and other relevant regulations (General Data Protection Regulation (EU) 2016/679, the Act on the Implementation of the General Data Protection Regulation, and other applicable laws depending on the processing).

For more information about data transfers to third parties, send an inquiry via email to [email protected]

Which cookies and tools do I use?
I use tools to analyze the use of CHESTER.hr and collect information about your habits and activities, which helps me better recognize your needs in order to improve the quality of the offering.

I use my own cookies, as well as cookies from my partners, to recognize your computer and provide you with a better service.

The collected data is not linked to your personal data on CHESTER.hr.

The mentioned tools may collect and store technical data such as cookies, IP user and/or visitor address, mobile device identifier, browser data, and similar, but do not identify the person.

Through appropriate settings on your computer, browser, or mobile device, you can refuse or delete cookies and continue using CHESTER.hr; in this case, some CHESTER.hr features may not be fully available to you.

Right to deletion and restriction of processing
Right to erasure and restriction of processing

At any time, you can restrict the use of your email address for sending CHESTER.hr notifications and promotional messages.

A request for erasure and restriction of processing may be denied if I cannot confirm your identity as the owner of the personal data or if other legal restrictions apply.

Deletion of personal data you can request in writing to my address, verbally, or by sending an email to the address [email protected]

If you have a user account on CHESTER.hr, you can initiate the request to close your account and delete your data through the My Account interface.

Upon receiving your deletion request, I will confirm that I have received the request and initiate the procedure to close your user account and delete your data. An unauthorized attempt to close the account and delete data can be stopped by you within 24 hours of receiving the notification; after this period, I will restrict the processing of your data and initiate the deletion procedure.

I will retain your data based on the purpose and in accordance with applicable regulations or legitimate interests arising from or related to the use of CHESTER.hr, and I will delete it after the defined period expires.

For example, records related to financial transactions or accounts must be kept for a legally defined period; other categories of data will be retained until the period I have determined for fraud prevention, responding to complaints, or other legitimate purposes (3 years).

If the deletion deadline is extended due to technical or other justified reasons, I will notify you in writing.

Right to data portability
As the owner of an active user account, you can at any time submit a request to transfer your data and content to another service provider.

I may refuse the transfer request if I cannot confirm your identity as the owner of the personal data.

You can download your data yourself through the user interface for registered CHESTER.hr users.

The data you can download in digital format includes:

your contact information

I protect the privacy of my users and do not allow the download of content that would violate your rights or the rights of other users.

Due to technical limitations, I cannot enable you to automatically transfer your data to another service provider.

Right to information (access to data)
You are the owner of your data and have the right to information about which data I store or process, and you can send a request for additional information.

I may refuse the request if I cannot confirm your identity as the owner of the personal data or if another restriction exists.

You can view your data in the user interface for registered users, "My Account."

If you want more information or are not a registered CHESTER.hr user, send me a request in writing to my address or by email to the address [email protected]

Right to correction of data
It is important that you have accurate data, so check it periodically.

To assist you, I can conduct a verification of the accuracy of your data within the technically and legally permitted scope, such as verifying your phone number, email address, and other information.

I may refuse a correction request if I cannot confirm your identity as the owner of the personal data, and I will notify you if any other restrictions apply to the correction.

I will send you reminders about the importance of using correct data; please correct your data through the My Account interface.

You can request a correction of the data I use for basic identification (email address, OIB) by sending a written request from the email address registered in your user account to [email protected]

Links to other websites
On CHESTER.hr, you may find links that will take you to other service providers' websites to which my Privacy Policy does not apply.

If you have left the CHESTER.hr website by following a link, please familiarize yourself with their privacy policies and how they protect your personal data.

Notification of changes and contacts
I may occasionally update these rules, and any changes to the Policy will be published alongside this Privacy Policy on the CHESTER.hr website.

The policy was published on May 29, 2018, and is effective from May 29, 2018.

In case of changes to this Policy, you can request previous versions via the contact form.

In the event of significant changes, I will notify you of the updates via email or through another suitable method.

By registering or continuing to use CHESTER.hr after the Policy has been updated, you confirm that you are aware of the current rules and that you consent to the processing of your data for the stated purposes.

Inquiries and comments regarding this Policy, as well as additional information about your personal data collected on CHESTER.hr, can be submitted to the CHESTER.hr Data Protection Officer:

in writing to the address of CHESTER.hr's headquarters

via email at the address [email protected]

Cart (0)

Privacy Policy