DATA PROTECTION

1. general
The security and confidential treatment of your data is an important and serious concern for PELESIĆ, which is why only the most modern security standards are used. We treat the data entrusted to us and the data we collect with strict confidentiality and handle it responsibly. We therefore inform you in accordance with the relevant data protection regulations (GDPR, Data Protection Amendment Act 2018).

2. collection and processing of personal data
Your personal data and any documents or photographs uploaded by you are collected and processed by PELESIĆ for the purpose of processing and transmitting data in the context of the business relationship with you as a partner (customer, supplier), including electronically created and archived documents (such as correspondence) in these matters.

The following personal data is processed for this purpose:
First and last name
Date of birth
Nationality
Contact data (address, email address, telephone contact data)
Order and delivery data
Payment data

Every time our website is accessed, usage data is transmitted by the respective internet browser and stored in log files, so-called server log files. These data are:
IP address of the accessing computer
User ID on the platform
Name of the page accessed
Date and time of access
The URL from which the user came to the accessed page
Session identification number

This website is hosted in the Google Cloud, where log files and IP addresses are stored. You can find more information about the privacy policy at https://policies.google.com/privacy?hl=de.

3. purpose of data collection
The main purpose for which PELESIĆ collects personal data is to enable you to use the service safely, efficiently and personally.
Personal data is used for the following purposes:
proper performance of the contract, processing of the order
customization, measurement and improvement of performance
provision of our products and services

On the one hand, this data comes from the entries you have made and, if necessary, we collect further data from publicly accessible registers.

All data collection in connection with the proper performance of the contract is based on Art. 6 (1) b GDPR. We require your consent to send you our newsletter and information etc.; the processing of your data in this regard is based on Art. 6 (1) a GDPR.

PELESIĆ undertakes to treat your data in accordance with the principles of data protection in accordance with the applicable laws.

4. disclosure of data, data transfer to third countries
PELESIĆ does not disclose any personal data to third parties unless the data subject has given their express consent to this, or PELESIĆ is legally obliged to disclose this data, or the disclosure of data to external service providers is necessary for the delivery or processing of the order.

The data is transmitted exclusively to the following companies or institutions on the basis of the stated legal bases for the stated purposes:

Within the Group: Data processing - for all Group companies - is managed centrally by the head office.
Outside the Group: If necessary, external service providers for processing the order/contractual relationship, such as shipping service providers, manufacturers (for extended guarantees, etc.), suppliers (product customization, optimization, etc.), IT service providers. Shipping service providers, manufacturers (for extended guarantees etc.), suppliers (product adaptation, optimization etc.), IT service providers.
We use so-called cloud solutions for the storage of data. It cannot be ruled out that the cloud provider may store data in third countries. However, we only commission cloud providers with the storage of data who demonstrably comply with all data protection regulations and have certifications such as the EU-US Privacy Shield.

5. newsletter
When you register for the newsletter, you provide the above personal data and give PELESIĆ the right to contact you by email. The data stored when you register for the newsletter will be used exclusively for the newsletter and will not be passed on to third parties.

If you unsubscribe from the newsletter - you will find the link to do so at the bottom of every newsletter - all data stored when you subscribed to the newsletter will be deleted.

The cloud-based newsletter management service MailChimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA is used to record registrations.

Rocket Science Group LLC (MailChimp) maintains online platforms that allow users to stay in touch with their subscribers, primarily via email. The information uploaded to the MailChimp database is used to send emails and enable the use of certain other MailChimp features for the user. In accordance with its published privacy policy, MailChimp shares some information with third parties to provide and support the services that MailChimp offers to users. MailChimp also shares some information with third-party advertising partners to better understand users' needs and interests in order to provide more relevant content and targeted advertising to those users and other users.

The newsletter is sent via a Mailchimp add-on called Mandrill. This is also an offer from The Rocket Science Group, LLC, 512 Means Street, Suite 404 Atlanta, GA 30318 ("Mandrill"). The service manages data about when an email has been read or links contained therein have been opened. As in the case of Mailchimp, Mandrill is based in the USA. Your personal data is therefore transferred to a country outside the European Economic Area, where the same level of protection for personal data does not exist as within the European Economic Area. For this reason, a contractual agreement (so-called EU standard contractual clauses) has been concluded with The Rocket Science Group, LLC, through which Mandrill undertakes to provide special protection for the personal data of email senders and to process the personal data only on behalf of and in accordance with instructions.

Newsletter evaluation
When you receive a newsletter via MailChimp, information such as IP address, browser type and email program is stored to provide us with information on the performance of our newsletter. MailChimp can determine whether the email has arrived, whether it has been opened and whether links have been clicked by means of the images integrated in the HTML emails called web beacons (details can be found at https://kb.mailchimp.com/reports/about-open-tracking). All this information is stored on MailChimp's servers, not on this website.

PELESIĆ has concluded a contract with MailChimp for commissioned data processing (Data Processing Addendum). This contract serves to secure your personal data and ensures that MailChimp complies with the applicable data protection regulations and does not pass on your personal data to third parties.

You can find more information on this contract at https://mailchimp.com/legal/privacy/

6. cookies and plugins
PELESIĆ uses cookies to customize and optimize the online experience and online time. Cookies contain e.g. Information about previous accesses to the corresponding server or information about which offers have been accessed so far.

Cookies are not used to execute programs or load viruses onto the user's computer. Rather, the main purpose of cookies is to provide an offer tailored specifically to the user and to make the use of the service as convenient as possible.

When you visit the website for the first time, you will be asked which of these cookie types you wish to allow, and this decision will be saved. To change the settings for cookies and tracking, please click here.

You have the option of generally rejecting the setting of cookies at any time. This is usually done by selecting the appropriate option in the browser settings or by using additional programs. Further details can be found in the help function of the browser used by the user. If you decide to disable cookies, this may reduce the scope of the services and may have a negative impact on the use of the services.

7 Google Analytics
Our websites use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

8. Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager of the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

9. google maps
This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you access a page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way.
To the best of our knowledge, this is at least the following data:
Date and time of the visit to the website in question,
Internet address or URL of the website accessed,
IP address, (start) address entered as part of route planning.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information (https://policies.google.com/privacy?hl=de).

10. social plugins
Elements of social media services are integrated on the PELESIĆ website to display images, videos and texts. When you visit pages that display these elements, data is transferred from your browser to the respective social media service and stored there. PELESIĆ has no access to this data.

Further information on the purpose and scope of data collection and its processing by the social media services can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:

The Google privacy policy applies to YouTube: https://www.google.de/intl/de/policies/privacy

Facebook data policy: https://www.facebook.com/about/privacy

If you do not want Facebook or YouTube to assign the data collected via our website directly to your profile in the respective service, you must log out of the respective service before activating the plugins.

11. data retention, data access and data security
Your data will be stored until the end of the business relationship or until the expiry of the applicable warranty, limitation and statutory retention periods. Furthermore, until the end of any legal disputes in which this data is required as evidence.

The PELESIĆ employees involved in the processing and the process have access to the processed data.

The data is protected by access control, access control, access control, input control, transfer control, order control, availability control and separation control. The security measures are continuously revised in line with technological developments.

12. your rights
In accordance with the relevant statutory provisions, you as the data subject are entitled to the rights and remedies listed below. To assert your rights and if you have any questions, please contact

PELESIĆ d.o.o.
Hajrudina Mešića 186
BiH - 75207 Tuzla
E-mail: office@pelesic.com

Right to information (Art. 15 GDPR) § 43f Data Protection Amendment Act 2018
You have the right to obtain information as to whether personal data concerning you is being processed and, if so, which personal data concerning you is being processed. You also have the right to be informed about the purposes of the processing and its legal basis, the categories of personal data, the disclosure to third parties and the storage period.
Right to rectification and erasure
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you or - taking into account the purposes of the data processing - the completion of incomplete personal data and the erasure of your data.
Right to restriction of processing
You have the right to restrict the processing of all personal data collected. This data will only be processed with individual consent or for the assertion and enforcement of legal claims from the time of the request for restriction.
Data portability (Art. 20 GDPR)
You have the right to request the unhindered and unrestricted transfer of collected personal data to a third party.
Right to object (Art. 21 (1) GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is either
- necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or
- necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
The controller may then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

You can object to data processing for the purpose of direct advertising at any time with effect for the future.

If you take a measure to enforce your above-mentioned rights, PELESIĆ must take a position on the requested measure or comply with the request without delay, but at the latest within one month of receiving your request.

Your contact person:

PELESIĆ d.o.o.
Hajrudina Mešića 186
BiH - 75207 Tuzla
E-mail: office@pelesic.com

13. complaint to the data protection authority
The data protection authority is responsible for applications and complaints regarding the violation of the right to information, violation of the right to confidentiality, rectification or erasure:
Agencija za zaštitu podataka
Dubrovačka br. 6
71000 Sarajevo
azlpinfo@azlp.ba