Website: hr.timacagro.com
Owner: Timac Agro Ltd.
Owner’s Address: Radoslava Cimermana Street 62b, 10000 Zagreb
Phone: +385 1 6187 862
Tax Identification Number (OIB): 18901646767
Publications Manager: Timac Agro Ltd. – office@hr.timacagro.com
Webmaster: Timac Agro International – contact.tai@roullier.com
Website Development: Agence Digitale R2
This Privacy Policy provides an understanding of the personal data collected by Timac Agro Ltd., Zagreb (hereinafter referred to as the Data Controller), as required by law, including provisions of the European Union’s General Data Protection Regulation (GDPR).
The Data Controller is Timac Agro Ltd., located at Radoslava Cimermana Street 62b, Zagreb. The collected personal data will be controlled and processed by the Data Controller. Additionally, personal data may be processed or jointly controlled by affiliates of the Data Controller.
This privacy notice applies to: (1) customers of our goods and/or services and (2) representatives of our business partners, clients, distributors, and suppliers. This privacy notice does not apply to our headquarters and employees in the country, nor to employees of Roullier Group, of which Timac Agro Ltd. is a member.
The privacy notice outlines the types of personal data or information we collect, how we use the information, how we process and secure the information we collect, how long we retain it, whom we share it with, and the rights individuals may exercise concerning the use of their personal data. We also describe how you can contact us regarding our privacy practices and how you can exercise your rights. Our privacy practices may differ from country to country in which we operate to comply with local practices and legal requirements, and you can review specific local conditions by visiting our local websites.
We may collect personal data about you in various ways, for example, through our websites and social media channels; at our events; via phone, email, and fax, or in connection with our interactions with customers and suppliers.
We may collect personal data depending on the nature of the relationship, including, but not limited to (as permitted by local laws):
Additionally, if you are a job candidate applying for a position or submitting an open application, we may collect the following types of personal data (as permitted by local legislation):
Furthermore, if you are our customer or business partner, for legitimate business purposes (and in compliance with local tax and financial laws), we also collect and analyze the following types of data:
The Data Controller collects and uses the data for the following purposes (as permitted by local law):
All data processing will be based on adequate legal grounds, which may include a range of categories, including:
The Data Controller may process personal data for certain lawful business purposes, including but not limited to:
Whenever we process data for these purposes, we ensure that your rights are maintained at a high level and take these rights into account. You have the right to object to such processing, and if you wish to do so, please contact the person listed below. Please note that if you exercise your right to object, it may affect our ability to perform and provide services for your benefit.
We process personal data collected, also through automated means, for the purposes outlined above and for a specified period, in accordance with our internal retention policy, to ensure that personal data is not kept longer than necessary.
We maintain administrative, technical, and physical protective measures designed to protect personal data you provide from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. To ensure adequate security and confidentiality of personal data, we have implemented the following security measures:
We retain personal data we collect in our systems in a way that allows identification of data subjects for no longer than necessary for the purposes for which the data was collected or for which the data is further processed. The retention period is determined by considering the necessity of retaining the stored personal data in order to provide the services established with the user and to protect the legitimate interests of the Data Controller as described in the purpose and the existence of specific legal obligations requiring processing and related retention for a specified period.
We do not disclose the personal data we collect about you, except as described in this Privacy Policy or in specific notices provided regarding particular activities. We may forward personal data to service providers who perform services on our behalf based on our instructions. We do not authorize them to use or disclose the information except as necessary to perform services on our behalf or in accordance with legal requirements.
We may also disclose personal data about you (1) if required by law or legal process; (2) to law enforcement or other government officials based on a lawful request for disclosure; and (3) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity. We also reserve the right to transfer personal data we hold about you in the event we sell or transfer all or part of our business or assets (including in the case of reorganization, closure, or liquidation).
We may also transfer personal data we collect about you to countries outside the country where the information was originally collected. These countries may not have the same data protection laws as the country where you initially provided your personal data. When we transfer your data to other countries, we will protect that data as described in this Privacy Policy, and such transfers will comply with applicable law. Countries to which we may transfer personal data about you can be within and outside the European Union.
When transferring personal data from the European Union to countries or international organizations outside the European Union, the transfer is based on adequacy decisions by the European Commission, or in the absence of an adequacy decision, another legally permitted basis (a) a legally binding and enforceable instrument between public authorities or bodies; (b) binding corporate rules; (c) standard contractual clauses (formerly known as Model Clauses) adopted by the Commission, etc.
Where required by applicable law, the data subject may exercise the following specific rights in accordance with Articles 15 to 22 of the GDPR:
a) Right of access: The data subject has the right to access their personal data to verify whether their personal data is processed in accordance with the law.
b) Right to rectification: The data subject has the right to request rectification of any inaccurate or incomplete data about them, to ensure the accuracy of such information and its suitability for data processing.
c) Right to erasure: The data subject has the right to request the Data Controller to erase information about them and cease processing of such data.
d) Right to restrict processing: The data subject has the right to request that the Data Controller restrict the processing of their data.
e) Right to data portability: The data subject has the right to request the transfer of their personal data in a structured, commonly used, and machine-readable format, or to request the transfer of data to another Data Controller.
f) Right to object: The data subject has the right to object at any time to the processing of their data based on various grounds as established in the GDPR, without the need to justify their decision.
g) Right not to be subject to automated decision-making: The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, if such profiling produces a legal effect on the data subject or similarly significantly affects them.
h) Right to lodge a complaint with a supervisory authority: Any data subject has the right to lodge a complaint with a supervisory authority, particularly in the EU member state where they reside or where the alleged violation occurred if the data subject believes the processing of their personal data infringes the GDPR.
Whenever processing is based on consent, as in Article 7 of the GDPR, the data subject may withdraw their consent at any time. If you need more information about the processing of your personal data, please refer to the section How to Contact Us.
This Privacy Policy (including any amendments) may be periodically updated to reflect changes in our privacy practices and updates to the law. If significant changes occur, we will notify you by prominently displaying a notice on our website indicating when it was last updated at the top of each notice.
If you have any questions or comments regarding this Privacy Policy or wish to exercise your rights, please contact us at:
Marinka Banožić
Email: marinka.banozic@hr.timacagro.com
Timac Agro Ltd.
Radoslava Cimermana Street 62b
10 000 Zagreb
Croatia
