PRIVACY NOTICE

Last changed: July 14st, 2022

INTRO

This Privacy Notice informs you about the data we collect about you, how we use such data, and with whom we share it. It is very important for us that you read the following Privacy Notice to be informed about the processing of your personal data and your rights under applicable data protection.

1. DEFINITIONS

2. ABOUT DRIVE ROYAL

We, DRIVE ROYAL, will be held responsible as a Controller for all personal data you provide us with in connection with offering our Services.

As we provide Services to our Visitors and process personal data, we act either as the controller or the processor, depending on the situation.

We act as the controller in situations when we process personal information for our own purposes, and we are committed to processing that information as described in this Privacy Notice.

Contact details:

Drive Royal

Bubani 27, 52352 Kanfanar

Contact: taxi.driveroyal@gmail.com

3. COLLECTING, PROCESSING, AND KEEPING PERSONAL DATA

Unless otherwise agreed with you, we will collect only the basic personal data required in connection with our business relationship. While doing business with you, we will also collect business-related data which may include information on purchases, services and other business activities, product feedback and any other information you may provide to us.

We might collect your personal data directly by you or indirectly for one of the following reasons:

• Ordering a drive via website
• General inquiry via email;
• You initiated communication with us over website contact form of social media contacts;
• When you browse our website - third party service (i.e. Google Analytics);
• Links to other websites.

We collect personal data depending on the above-mentioned specific situation. We collect the only necessary information.

3.1. ORDERING A DRIVE VIA WEBSITE

Personal data we collect: full name, e-mail address, telephone number, country and related information such as your company name and address, VAT number, e-mail, phone number. These data will be used exclusively for the implementation of the online ordering service.

Payment data (such as card number, etc.) are specially protected by the highest level of security protocols and will only be available to banks for payment authorization.

Legal basis for data collection: performance of a contract (GDPR article 6.1. (b), legitimate interest according to GDPR article 6.1. (f) in the sense of providing our Services to you.

Time period for keeping the data: If we do not enter into an agreement, we will delete your personal data within 6 (six) months after our last communication. Also, on the basis of legitimate interest, if you no longer wish to be contacted, you can object by sending an email to taxi.driveroyal@gmail.com

3.2. GENERAL INQUIRY VIA EMAIL

Personal data we collect: full name, e-mail address, telephone number, country and related information such as your company name, business role, phone number.

Legal basis for collecting the data: performance of a contract (GDPR article 6.1.(b), legitimate interest according to GDPR article 6.1.(f) in the sense of providing our Services to you

Time period for keeping the data: if we do not enter into an agreement, we will delete your personal data within 6 (six) months after our last communication. Also, on the basis of legitimate interest, if you no longer wish to be contacted, you can object by sending an email t taxi.driveroyal@gmail.com

3.3. YOU INITIATED COMMUNICATION WITH US OVER SOCIAL MEDIA PLATFORMS

Personal data we collect: name, e-mail address, and telephone number.

Legal basis for collecting the data: consent (GDPR article 6.1.(a), legitimate interest according to GDPR article 6.1.(f).

Time period for keeping the data: in the event that you have not used our Services,, when based on the legitimate interests we will keep the data until you object to the processing of your personal data for this purpose, or, in the case of the given consent until you withdraw your consent.

The company has the following pages/profiles on social networks:

Facebook

3.4. WHEN YOU BROWSE OUR WEBSITE

Personal data we collect: usually we collect IP addresses, browser type, the pages you’ve visited and the order you visited them, as well as whether you’re a new or returning visitor. This information is only processed in a way that does not identify anyone, but is helping us to maintain and improve our website and business. For more information please read our Cookies

Legal basis for collecting the data: consent (GDPR article 6.1.(a).

Time period for keeping the data: until you withdraw your consent - for more information please read our Cookies

In the case of data transfers to the United States, permission will be required due to the consequences of the 'Schrems II' judgment and the declaration of the Privacy Shield as invalid.

3.5. LINKS TO OTHER WEBSITES

This website contains links to other websites. Please note that VINA BABOS cannot be held responsible for respecting the privacy of other websites. We encourage our users to read the privacy statements of each website that collects personal information. This Privacy Notice applies solely to information collected on the driveroyal.hr website. www.driveroyal.hr

In case you have questions regarding the collection and processing of data by Facebook, YouTube, Instagram and / or LinkedIn or you want to exercise any of your rights guaranteed by the General Data Protection Regulation, contact:

FACEBOOK

META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Contact:

https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Facebook, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

YOUTUBE

Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland

Contact:

https://support.google.com/policies/contact/general_privacy_form

If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Youtube, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

INSTAGRAM

META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Contact:

https://hr-hr.facebook.com/policy.php
https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Instagram, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

ZA LINKEDIN

LINKEDIN IRELAND UNLIMITED COMPANY

Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland

Contact:

https://www.linkedin.com/help/linkedin/ask/TSO-DPO

If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Linkedin Ireland, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Linkedin Ireland, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

4. WHO WE SHARE PERSONAL DATA WITH

Personal data we collect: usually we collect IP addresses, browser type, the pages you’ve visited and the order you visited them, as well as whether you’re a new or returning visitor. This information is only processed in a way that does not identify anyone, but is helping us to maintain and improve our website and business. For more information please read our

• third parties as sub-processors, where required or permitted by applicable law;
• third parties as sub-processors in order to provide specific functionalities such as targeted marketing, eCommerce and other tools necessary for providing our services (e.g. Google Analytics, Lloyds digital. - which maintains the website,...);
• third parties who are legally authorized to process credit decisions, fraud prevention and to pursue debtors; and
• third parties who are legally authorized to request access and sharing of your personal information, for the purposes of criminal procedures or because of threats to public security.

Otherwise, no third parties will have access to your personal information unless there is a legal requirement or you give us permission to do so.

5. TRANSFERING THE PERSONAL INFORMATION IN THIRD COUNTRIES

Considering the mentioned above, we may share your personal information with third parties which are situated outside of the European Economic Area, however, all transfers of personal information are done in accordance with EU GDPR data protection standards.

6. YOUR RIGHTS

In accordance with EU General Data Protection Regulation you have the right to:

• The right to be informed about the collection and use of your personal information is a key transparency requirement under the GDPR;
• The right of access to personal information, which means to request a copy of your personal information we hold about you;
• The right to rectification of your personal information if the information is incomplete or inaccurate;
• The right to erasure (the right to be forgotten) when your personal information is no longer needed or when your personal information has been used unlawfully, in accordance with your request for erasure;
• The right to restrict the processing of your personal information in certain circumstances as an alternative to the right to erasure of your personal information;
• The right to data portability means that we can obtain and reuse your personal information for our own purposes;
• The right to object to the processing of your personal information in a way that will stop or prevent us from processing your personal information on our legitimate interest, e.g. for direct marketing purposes;
• Rights in relation to automated decision making and profiling; and
• The right to file a complaint with your national Data Protection Authority (DPA).

You can exercise above mentioned rights in accordance with the EU General Data Protection Regulation and national regulations on personal data protection.

6.1. THE RIGHT TO OBJECT TO THE USE OF YOUR DATA

You have the right to object, i.e. to stop or prevent the organization from using your data in certain circumstances, and we may not need to stop processing your personal data if we give you strong and legitimate reasons to continue using your data.

You can only object to processing when we are using you data:

• For our legitimate interests; and
• For direct marketing purposes.

In cases where we invoke a legitimate interest as a legal basis for processing of your data, at any time you may lodge an objection against such processing. In that case, we are obliged to prove to you

(1) that there are convincing legitimate reasons for data processing on our or third party’s side, which go beyond your interests, rights or freedoms,

or

(2) that data processing is necessary for us to establish, exercise or defense of legal claims.

On the other hand, in the case of direct marketing purposes, we cannot refuse your objection and we will stop using your data for direct marketing purposes. You can exercise this right by using the unsubscribe link.

6.2. HOW TO EXERCISE YOUR RIGHTS

If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact our Data protection Officer by sending an email to taxi.driveroyal@gmail.com

6.3. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that we are processing your personal data illegally, you have the right to lodge a complaint with the personal data protection supervisory authority. In the Republic of Croatia this body is Agencija za zaštitu osobnih podataka (www.azop.hr)

If your habitual residence, place of work or place of the alleged infringement is in another EU Member State, or you believe that your rights have been violated in another EU Member State, in any cases, you can lodge a complaint with a supervisory authority of that country.

7. CHANGES TO THIS PRIVACY NOTIC

This Privacy Notice last update was in July 2022. From time to time you may wish to check back if this Privacy Notice has changed or amended as required to comply with applicable data protection law.

If you have any questions about your privacy, or you wish to withdraw your consent for the processing of your personal data, or to exercise any of your rights arising from this Notice, you can do that at any time by sending an email to taxi.driveroyal@gmail.com