Privacy policy

Privacy Statement

The company Timax Centar d.o.o. with its registered office in Zagreb, Savski Gaj II. 5, personal identification number (OIB): 84918060842 (hereinafter referred to as: “Timax” or “Data Controller”) pays special attention to the protection of personal data and processes them in full accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data – General Data Protection Regulation – GDPR (hereinafter referred to as: “General Regulation”) and takes all necessary technical and organizational measures in accordance with best practice and obligations prescribed by Croatian law and the General Regulation. All user data is strictly kept and is only accessible to persons who need the data to perform their job, all in accordance with the General Data Protection Regulation (GDPR).

The company TIMAX CENTAR d.o.o. with its registered office in Zagreb, Savski gaj II. 5, OIB: 84918060842, represented by director Antonio Arlović, (hereinafter; Timax), as the data controller, is responsible for the protection of your personal data.

Contact to whom you can send your inquiries:
Address: Savski gaj II. 5, 10 020 Zagreb, e-mail address: info@timax.hr

GENERAL PRINCIPLES

The Timax information system is protected in accordance with practices and standards. Logical and physical access to system components is managed in accordance with applicable standards, and users are regularly trained and informed about the importance of information security and data protection.

The specific purpose and methods of processing your personal data largely depend on the type of business relationship on the basis of which we collect your data. In our business, we are guided by the fundamental principles of personal data protection, which means that we process data lawfully, transparently and fairly and that processing is limited only to the purpose for which the data was collected and that only those data that are necessary for that purpose are processed. We keep your personal data only for as long as necessary to achieve the purpose of the processing, except in cases where we are bound by certain regulations to store personal data for a longer period, or in cases where our legitimate interests require it (for example, for the establishment, exercise or protection of legal claims). The accuracy, reliability, confidentiality and integrity of your personal data are also principles that guide us in processing. Access to your personal data is only granted to authorized persons of Timax and partners who provide us with business support (processors).

In order to achieve the above regulatory requirements, several different departments are engaged within our company, which ensures a multidisciplinary approach to preserving and protecting the privacy of our customers, business partners, job candidates and other persons whose data we collect in our business. We regularly educate our employees, and we negotiate appropriate protection measures with partners who provide us with business support. If you do not agree with the Personal Data Protection Policy of the dogma real estate agency, please do not use our website or provide your personal data. Any changes to the Timax Privacy Policy will be published on this website.

TERMS AND KEY INFORMATION

For the purposes of this Privacy Policy, the terms listed below have the following meanings:

• • “Personal data” is any data relating to a natural person (individual) whose identity is established or can be established; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number, location data, an online identifier or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;
  • “Processing” means any operation or set of operations which is performed on data or on sets of data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
  • “Data subject” is a natural person (individual) whose identity can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, an online identifier or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;
  • “Controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
  • “Processor” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

another body that processes personal data on behalf of the controller.

Purpose and legal basis for processing personal data

Timax processes only those data that are necessary to achieve a specific legitimate purpose and only if and to the extent that at least one of the following is met:

• Processing is necessary for the performance of a contract to which the data subject is a party or in order to take action at the request of the data subject prior to entering into a contract, namely:
  • in order to fulfill obligations under concluded brokerage contracts or to take action at the request of the data subject;
  • in order to fulfill obligations under concluded business cooperation contracts.

The personal data collected for this purpose are: name and surname, address, OIB, e-mail address, home and/or mobile phone number. Subject personal data is collected directly from the respondents, as well as through inspection of public registers (e.g. land registers, cadastre, etc.). The respondent is not obliged to provide the personal data in question, however, in this case the Timax company will not be able to conclude a contract and/or perform certain actions related to the execution of the contract and/or provide the requested services. These personal data are kept for a maximum of 6 years from the termination of the contractual relationship and/or the execution of the requested action, unless a longer retention period is specified by an individual valid regulation or if the data in question is evidence in court, administrative arbitration or other equivalent proceedings.

• Processing is necessary to comply with the legal obligations of the Controller, namely:
  • in order to act in accordance with the obligations prescribed by the Act on Real Estate Brokerage, the Act on Prevention of Money Laundering and Financing of Terrorism, the General Regulation and other regulations related to the business activities of the Timax company. The personal data collected for this purpose are: name and surname, address, OIB, date and place of birth, information on identification documents, information on political exposure. Based on this legal basis, Timax collects personal data exclusively for the purposes and to the extent that is 2/4 necessary to fulfill legal obligations and keeps them for the period prescribed by applicable regulations. In the event of entering into a business relationship with Timax, the respondent will be obliged to provide Timax with personal data that, given the specific relationship, Timax is obliged to collect in accordance with applicable regulations. If the data subject refuses to provide the requested personal data, Timax will not be able to enter into a contract and/or fulfill the obligations and/or provide the requested services.

• The processing is necessary for the legitimate interests of Timax or a third party, except when these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data, in particular if the data subject is a child, as follows:
  • In order to protect persons and property, video surveillance of Timax’s business premises is carried out. The personal data collected for this purpose are: videos of persons entering and leaving Timax’s business premises, or data on the presence of persons in the area covered by the recording. The videos may be submitted to the competent authorities (police, court) at their request if this is necessary for the implementation of procedures pursuant to special regulations. Video recordings are stored for a maximum of 6 months, unless a longer retention period is specified for a particular case by applicable regulations or if they are evidence in a court, administrative, arbitration or other equivalent proceeding.

• The respondent has given consent to the processing of their personal data for one or more specific purposes, namely:
  • By visiting the Timax website (www.timax.hr) via the online interface, the respondent can give consent to the processing of personal data using so-called cookies for the purpose of better functioning of all features of the website and enabling a better user experience (see below). The data subject may withdraw the consent given at any time in the same way, however, this does not affect the lawfulness of the processing that was based on the consent before it was withdrawn.

In any other cases of processing of personal data, the company Timax will previously inform the data subject about this processing and provide him with all information about the details of the processing in accordance with the provisions of the General Regulation.

WEB COOKIES

This website uses web cookies. A cookie is a small text file with information about the activities and settings of the user and is stored on his device when visiting the website. A cookie most often consists of several pieces of data: the originating internet domain, user identification, cookie expiration date and security codes. Cookies usually store the user’s settings related to the website, such as the preferred language or address. Certain information stored by cookies is also used to track user preferences in order to improve services, target marketing, etc. During the next visit to the same website When you visit a website on the same device, the browser sends the cookie and the information stored in it to the website that generated it (first-party cookie) or to another website to which the cookie refers (third-party cookie). This allows the website to display information tailored to your needs.

The Timax website uses the following types of cookies:

• Necessary (technical, mandatory) cookies – cookies without which the website cannot function or its functioning would be associated with significant difficulties, and which as such cannot be turned off and the user’s consent is not required for the use of this type of cookie. However, they can be turned off in the browser settings on the user’s device, but in this case some parts of the website will not work. This type of cookie does not store any information that could identify the user.
• Functional cookies – improve functions and personalization by recording the selections and adjustments made during a visit to the website. These cookies are used to store, for example, the choice of preferred language. These cookies can be disabled.
• Analytical (statistical) cookies – collect information about how visitors use the website, for example, which pages visitors visit most often, and for the purpose of internal research on possible ways to improve the service it provides to all users. The information collected by these cookies is anonymous and is used to improve the functioning of the website. These cookies can be disabled.
• Performance cookies – are used to understand and analyze key performance indicators of the website, which helps to provide a better user experience for visitors.

Functional and analytical cookies can be refused (disabled) during the first visit to the Timax website, and later re-enabled by selecting the menu at the bottom of the page “Cookie settings” and vice versa.

DATA FORWARDING

The collected personal data are not transferred to third countries, however, they may be forwarded to third parties in cases where this is required by mandatory regulations (e.g. a request from a competent authority), when it is necessary for the performance of a contract concluded with the data subject, or when Timax has contracted with third parties as subcontractors to perform a specific task in its capacity as a data processor (e.g. IT support, accounting service, postal and other delivery service provider, etc.).

Timax will entrust certain tasks related to the processing of personal data only to data processors that provide sufficient guarantees regarding the implementation of appropriate personal data protection measures, and will conclude a contract with them in which mutual rights and obligations will be regulated in accordance with the provisions of the General Regulation.

PERSONAL DATA SECURITY

Timax collects and processes personal data in a manner that ensures appropriate security and confidentiality in their processing and enables the effective application of the principles of data protection, data reduction, storage limitations, etc.

Timax takes appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, access to or disclosure of data, theft, or any other violation and misuse, which includes, among other things:

• implementing measures to prevent unauthorized use of IT systems (such as password protection) with regular updates of programs (software) and antivirus protection;
• restricting access to media for storing personal data in electronic form only to authorized persons who can access the data only by entering a username and password;
• restricting physical access to premises where documents containing personal data are kept only to authorized persons;
• obliging all employees to keep personal data by signing a confidentiality statement;
• obliging all subcontractors to protect the personal data of the data subjects through appropriate contractual clauses.

PERIOD OF PERSONAL DATA STORAGE

Personal data is processed only if the purpose of the processing could not reasonably be achieved by other means. In order to ensure that personal data is not kept longer than necessary, the Timax company sets a deadline for deletion of 30 days after the fulfillment of all obligations from the contract, except for personal data that Timax is obliged to keep according to positive regulations of the Republic of Croatia, such as accounting documents or similar.

If mandatory legal regulations require us to keep a longer storage period, then your data will be deleted after the expiration of additional legal deadlines.

We keep the personal data of respondents and business partners for five years, except in the case of exercising or defending legal claims or unless mandatory legal regulations require us to keep a longer storage period.

YOUR RIGHTS

Data subjects have the right to:

• the right to access the personal data of the data subjects processed by Timax and to information regarding the processing in question as prescribed by the General Regulation;
• the right to rectification of inaccurate personal data concerning them, including the right to have incomplete personal data completed;
• the right to erasure of personal data concerning them without undue delay if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and in other cases prescribed by the General Regulation;
• the right to restriction of processing if one of the conditions prescribed by the General Regulation is met;
• the right to data portability, i.e. the right to receive personal data concerning them in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from Timax, if the processing is based on consent or is necessary for the performance of a contract to which the data subject is a party or in order to take action at the data subject’s request prior to entering into a contract, and the processing is carried out by automated means.
• the right to object to the processing of their personal data or the right to report a suspected violation of their personal data, which the data subject may exercise by contacting Timax via the contact details published on this website or by contacting the supervisory authority.

When exercising your rights, please ensure that you provide us with evidence on the basis of which we will be able to establish your identity in an unequivocal manner. In addition to us, you can also contact the supervisory authority for personal data protection in the Republic of Croatia – the Agency for Personal Data Protection (AZOP – www.azop.hr) directly with your complaint.

When providing our services, automated processing and profiling within the meaning of Article 22 of the General Data Protection Regulation are excluded.

CHANGES TO THE PRIVACY POLICY

Timax reserves the right to change and/or amend these Privacy Policy from time to time and they will be available on the Timax website at any time.

CONTACT DATA OF THE DATA CONTROLLER

If you have any questions regarding the processing of personal data by Timax, you can contact us using the contact details published on the Timax website.

TIMAX CENTAR d.o.o.
Address: Savski gaj II. 5, 10 020 Zagreb
OIB: 84918060842
Telephone: 01 2750 943
E-mail: info@timax.hr