Obavijesti

Privacy Policy of the "PLODINE CARD" Application

PLODINE are committed to protecting and respecting your privacy. Please read this policy carefully to understand why and how we collect your personal data and how it will be used. Regarding the personal data we collect, PLODINE d.d., Radnička 30, 51000 Rijeka, OIB: 92510683607 is the "data controller", i.e., the one who determines the purposes and means of processing personal data (hereinafter: PLODINE; data controller).

As the data controller for user data of the "PLODINE CARD" application, PLODINE undertakes to protect its users' personal data and, in this regard, collects only the data necessary to provide the service related to the use of the "PLODINE CARD" app and to meet your expectations as our user.

You can contact our Data Protection Officer at: szop@plodine.hr or by mail at: Radnička 30, 51000 Rijeka.

PLODINE hereby informs users of the "PLODINE CARD" app about the way the collected data is used through the said application. As users of our services, we provide you with a choice regarding the processing of your personal data. By choosing to use the "PLODINE CARD" application, you agree to the processing of all data necessary for the functioning of this application, and we kindly ask you to read this policy carefully. By using the application, it is considered that users have been adequately informed and are familiar with these terms.

All user data is strictly protected and accessible only to authorized persons who require such data to perform tasks within their scope. Employees and business partners are responsible for adhering to privacy protection principles. Furthermore, PLODINE employees have signed confidentiality agreements, and all partners helping ensure the proper functioning of this application have signed data processing and sharing agreements.

PLODINE does not process more personal data than is truly necessary for the intended purpose or for your participation in an activity within the "PLODINE CARD" app. Personal data will not be used for other purposes.

We collect personal data for the purpose of:

ensuring the provision of requested services (Loyalty Program and digital receipt)
using services within the application system
responding effectively to your inquiries and processing your requests
statistical data processing
sending materials, offers, and contacting you
improving the quality of content, functionality, and services
prize games in which you decide to participate
When using the application, we collect the following categories of data:

first and last name
gender (if the user chooses to disclose)
email address
mobile phone number
date of birth (if the user chooses to disclose)
preferred supermarket (if selected by the user)
To set your preferred supermarket, you may use the geolocation function on your mobile device.

Unfortunately, without certain categories of your personal data (name, surname, email, mobile number), access to and use of the app is not possible, which may result in the suspension of the service if the necessary data is not provided.
Data collected during registration will not be disclosed to third parties, except when required by law.
When you identify yourself at the checkout using the application, we will record the store you visited, the products purchased (type, quantity, and price), used coupons, total bill amount, time and method of payment (all these data are also visible on the digital receipt).
We link your purchase to your user account so that we can send you Loyalty Program offers tailored to your preferences and interests, offer you participation in special deals, and enable you to receive a digital receipt through the app.
You can identify yourself at the checkout using your digital user card or the mobile phone number provided during registration.

When using the "PLODINE CARD" app, we also collect data on the store where you shop. In addition, we collect information about all the content you have viewed in the app, such as activated coupons, your notification preferences, participation in prize draws, and your selected favorite supermarket.

If an error occurs in the functioning of the app, we process information about your operating system version, device identification, and app version.

To avoid having to log in again every time you open the app, your (encrypted) login data is stored in the app until you log out. When logging in via a Google or Facebook account, mandatory registration data will be shared with Plodina, while you can edit all other data in your profile.

If you have given consent to receive the newsletter from the online store or any other service, we may receive information about your user behavior concerning the newsletter, including details such as when the newsletter was opened, which links or sections were clicked, duration, and frequency of use.

By submitting your personal data through which you can be identified, you consent to the processing of your personal data for the purposes and in the manner outlined in this Privacy Policy.

Additionally, when you send us emails containing personal data identifying you, for instance, to report an issue with the app or to contact our customer support, we use that information to fulfill your request.

Collected personal data is stored electronically, and to protect it, we apply appropriate technical, security, organizational, and personnel measures to prevent unauthorized access and unlawful processing of personal data and to ensure the use of personal data in accordance with the intended purpose.

If, during the use of our application or in your mobile device settings, you grant consent for geolocation, we use this function to offer you location-based personalized services. In particular, within the "Store Finder" function, we process your location and network information to display the nearest stores. Geolocation data is not stored permanently.

If you provide us with your address, we use it to identify and optimize our flyer distribution areas. This helps minimize leaflet waste and conduct more targeted marketing and optimize our store network to determine suitable branch locations. Providing address data is voluntary. These data are processed based on our legitimate interest in optimizing our sales channels.

We do not collect special categories of personal data.

What will we use your data for?

We may use your personal data in several different ways, primarily to fulfill our legal and other obligations to you, but also to improve your experience using the app and for security reasons.

The purposes for which we use your data are described in this policy, and if your data will be processed for other purposes, you will be informed before such (new) processing is carried out.

To ensure the benefits of “PLODINE CARD” membership and to provide you with the best possible personalized offers and conduct targeted customer surveys, we aim to get to know you better. To that end, we identify which products, promotions, and services might be of interest and relevance to you. Using this information, we can notify you of promotions for your favorite products, offer you special discounted prices, and inform you about attractive offers as part of assortment-specific promotions. For this reason, we collect, process, and use a range of personal data about your shopping and other habits.

However, other data mentioned above can also provide significant insights into your potential product interests. To identify these, we determine possible correlations between one or more personal data points and product interest. We use mathematical-statistical methods for this purpose. Your personal data is compared with data from other customers. Based on this comparison, we can deduce which other products and promotions that interest similar customers may also interest you.

We also process and use your personal data with regard to the time and location of your purchases in order to deliver time- and location-based promotions, e.g., via push notifications on your mobile phone or SMS messages.

Push notifications are messages sent from the application to your device and displayed there with priority. The app uses push notifications if, during installation or later in your device settings, you have given consent to receive them. You can deactivate push notifications at any time.

If we analyze the time and place of your purchase, it is necessary to use our service or execute a contract (Art. 6(1)(b) of the General Data Protection Regulation – GDPR), and because we have a legitimate interest in tailoring our offers to better meet your expectations (Art. 6(1)(f) GDPR).

Any personal data you provide when contacting customer service will be treated as confidential. We use your data solely to handle your inquiry and to resolve and respond to your requests.

We process data collected during the use of the app to ensure it functions properly. This information is especially necessary for the app to store your preferences, quickly resolve technical problems, and enable access to specific features. These data are not used to create user profiles.

What privacy rights do you have?

If you wish to exercise any of your rights guaranteed under data protection regulations, you can do so via email: szop@plodine.hr.

Please note that at any time, you have the right to request the following from PLODINE:

Access to your personal data
You may ask which of your personal data PLODINE uses, and request access to those data. You have the right to know the purpose of processing, categories of personal data held, recipients or categories of recipients your data is shared with, the retention period, and the data source if collected indirectly.

You can request a copy of some or all of the personal data we hold about you.

Request correction of incorrect data
We want to ensure your information is accurate and up to date. You may ask us to correct or remove any data you believe is inaccurate or outdated.

Request to restrict processing or restriction of access to your data (by us and/or third parties) in certain processes or entirely
You have the right to request restriction of processing in the following cases:

if you dispute the accuracy of the data – for the period needed to verify accuracy;
if the processing is unlawful and you oppose deletion and request restriction instead;
if the data controller no longer needs the data, but you need it to establish, exercise, or defend legal claims;
if you object to processing while the data controller verifies whether legitimate grounds override yours.
Request for Deletion of Personal Data
You may request the deletion of your personal data. However, if certain personal data are necessary for the performance of contractual obligations, the deletion of such data may make it impossible to continue fulfilling those obligations. Furthermore, if the processing of certain personal data is required to comply with legal obligations or for the establishment, exercise, or defense of legal claims, a request for deletion in this regard cannot be granted.

Object to the way we use your data
You have the right to object to the processing of your personal data based on a legal ground that PLODINE considers legitimate.

Request data portability to another controller
You have the right to receive the personal data you provided to PLODINE in a structured, commonly used, and machine-readable format and transfer them to another data controller, where technically feasible and if processing:

is based on consent or contract, and
is carried out by automated means.
To exercise any of the above rights, please use the contact details provided at the beginning of this Privacy Policy.

If you believe your rights are not being respected, you have the right to file a complaint with the Croatian Personal Data Protection Agency.

Where are your personal data stored?

Personal data collected about you is stored in a secure environment. Your personal data are protected from unauthorized access, disclosure, use, modification, or destruction by any organization or individual.

Processed data are stored in our facilities and secure IT systems, and occasionally on servers of our trusted service providers located within the EU.

PLODINE ensures that personal data are kept in a secure location (including reasonable administrative, technical, and physical safeguards to prevent unauthorized access, use, disclosure, copying, or modification), accessible only to authorized personnel. All authorized persons sign a confidentiality agreement.

Data collected for purposes stated in this policy will be stored only as long as necessary to fulfill those purposes. Your personal data will not be kept in a form that enables identification longer than PLODINE reasonably considers necessary for the purposes for which they were collected or processed. Certain data will be retained for periods prescribed by law.

It is also important to note that if judicial, administrative, or out-of-court proceedings are initiated, personal data may be stored until the end of such proceedings, including any appeal periods.

Do PLODINE share data with third parties?

Privacy protection is important to us, and we will never share your personal data with third parties except for purposes described in this policy. You will always be informed about such data sharing and transfers.

PLODINE collaborates with other companies, meaning we sometimes share your data using secure IT systems. When doing so, data is transferred to servers located in the EU or in countries that provide adequate protection levels according to EU regulations.

In some cases, our service providers may process your data outside the EU. Contracts with such entities oblige them to implement strict data protection measures in accordance with EU standards.

On July 10, 2023, the European Commission adopted a new adequacy decision allowing the transfer of personal data from the EU to U.S. companies participating in the Data Privacy Framework.

The adequacy decision, based on Article 45 of the GDPR, enables lawful and secure data transfers to third countries. U.S. companies must undergo a self-certification process and register on the Data Privacy Framework list.

If our contractual partner is based in the U.S., we will review existing contracts and verify their data protection standards to ensure compliance with the latest regulatory recommendations.

We share data with trusted partners for purposes such as marketing, website maintenance, advertising, payment processing, delivery, and other services in and outside of PLODINE. These providers are contractually obligated to use the data solely in accordance with our instructions and only for specified purposes. They must also adequately protect your data and treat it as confidential.

We audit our partners annually to ensure that your data remains protected at the required level and in accordance with applicable laws.

Map Services

In this app, you can use the map service provided by your device's operating system. This allows interactive maps to be displayed directly within the app and helps you locate your favorite supermarket.

To use this map function, your IP address must be processed for internet communication purposes. Processing is typically conducted on the servers of the respective operating system providers. We do not influence the specific data processing conducted by the service providers. For more details about the purpose and scope of data processing, consult their privacy policies. You’ll also find more information on your rights and privacy settings there.

Addresses and privacy policies of service providers:

APPLE:
Apple Inc, One Apple Park Way, Cupertino, CA 95014, United States
Data Protection Contact:
https://www.apple.com/legal/privacy/hr/
https://www.apple.com/hr/privacy/contact/
More info:
https://www.apple.com/legal/internet-services/maps/terms-de.html
https://www.apple.com/legal/privacy/de-ww/

GOOGLE:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data Protection Contact:
https://support.google.com/policies/contact/general_privacy_form
More info:
https://www.google.com/policies/privacy/
https://maps.google.com/help/terms_maps.html

HUAWEI:
Aspiegel SE, 1F, Simmonscourt House, Ballsbridge, Dublin D04 W9H6, Ireland
Data Protection Contact:
https://www.huawei.com/en/personal-data-request

If you are not satisfied with how your data is collected or processed, you may contact the relevant supervisory authority for Apple, Google, or Huawei, or the Croatian Personal Data Protection Agency.

Our app includes links to other websites and apps operated by selected partners or third parties. When you click on a banner or highlighted product in the app, you will be redirected to the relevant website/app or your app store. These links may include tracking technologies that enable those operators to identify where users came from. We recommend reviewing the privacy policies of each linked website/app to understand how your data may be processed. When redirecting you to such services, we process your data to fulfill your (technical) request to visit the respective site, based on the operator’s legitimate advertising interest.

How long will PLODINE retain your personal data?

PLODINE will not retain your personal data longer than necessary to fulfill the purpose for which they were collected, except in exceptional cases where the law prescribes a longer retention period.

We delete your personal data as soon as they are no longer required for the purpose stated. Generally, your personal data is stored for the duration of your participation in the “PLODINE CARD” service.

If your data is needed beyond that due to legal retention periods or to establish, assert, or defend legal claims, it will be stored in accordance with data protection laws after termination of the “PLODINE CARD” service, for as long as legally required or necessary.

If you exercise any of your data subject rights, your personal data will be stored permanently after you receive a final response, as proof that we provided complete information and met legal obligations.

For more information on data retention periods, please contact our Data Protection Officer.

Deletion of User Account

As a user, you have the right to terminate your participation at any time, without providing a reason, by activating the account deletion function. Deleting your user account ends your participation in the program, and the account will be permanently removed in accordance with applicable regulations.

PLODINE reserves the right, at any time and without providing a reason, to cancel a user’s participation and/or block access to a user account.

If you wish to delete your user account, you can do so as follows: in the app, go to “More” → “Settings” → “Delete User Account.”

By deleting your account, you will permanently lose access to your user account. All information related to your account will be permanently deleted, including personal data, digital accounts, point balances, and other information related to the loyalty program.

If you wish to participate in the loyalty program again, you will need to create a new user account and start collecting points within the program from the beginning.

For account deletion or more information regarding the deletion of data, you may also contact customer support or the Data Protection Officer.

Effective Date and Changes to the Privacy Policy

This Privacy Policy enters into force upon publication in the application.

PLODINE reserves the right to modify or supplement this Privacy Policy, and any changes will be published in the application.