Lumini - Shopping center

Privacy policy

PRIVACY POLICY
LUMINI SHOPPING CENTRE
(applicable from 25/05/2018)

  1. Introduction

The privacy policy describes the manner in which the company Trgovački Centar Lumini d.o.o., with headquarters in Zagreb, Branimirova 29, OIB/TIN: 90092662934 (hereinafter: Company) handles personal data which you submit to use when using the website www.lumini.hr. To avoid any doubt, when the Company received personal data submitted by you during use of the Company’s website, it is deemed to be the controller of your personal data. The privacy policy is applied regardless of whether you use a computer, mobile phone, tablet or other device to access our services. Importantly, you should read this Privacy Policy because each time you use our services (described below), you consent to the conditions described in this Policy. If you do not accept the conditions described in this Policy, or you do not give your consent to the processing of your personal data, you will not able to use the service on our website. Other legal consequences in the event of refusing to provide personal information does not exist. This privacy policy has been drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, Official Journal 119, 04/05/2016).

  1. What data do we collect about you

The personal data which we collect from you and process is deemed to be that personal data which you direct provide us with in relation to services on our website. In doing so, we always collect and process only data which is essential for achieving certain legal purposes, and we do not further process them in a manner that does not comply with the purpose for which they were collected, unless stipulated differently by way or based on user consent.

The data may include the following:

Name and surname

E-mail address

House address

Telephone number

Information on your current location

The company collects some or all of the above-mentioned personal data based solely on your consent. Consent is considered to be a voluntary, separate, informed and unambiguous expression of will, whereby a statement or clear affirmative action provide consent for the processing of personal data for certain purposes (so-called opt-in). We note that you have the opportunity to withdraw your consent at any time, but from the moment of such a withdrawal, you will no longer be able to use the services accessible on the website www.lumini.hr.

The consent may be withdrawn by notifying the Company or clicking on the link “Unsubscribe” in our bulletin (newsletter).

  1. Purpose of collecting and processing your data

The Company collects and process personal data in order to provide you with services you seek, such as receiving the bulletin (newsletter), services involving the issuing of the Lumini Club card, organising various prize games and the like. We collect and process data for marketing purposes in order to provide you with customised content and advertising, and in order to understand the manner in which you use our services so that we can improve your user experience.

The Company will not use the collected information in automating decisions, which includes the user of personal data for assessing certain personal aspects relating to individuals.

  1. Sharing personal data which you submit to us

The Company is obliged to keep secret the personal data which you provide us, and not distribute, publish, provide it to third parties (which includes third parties in other countries and international organisations) for use, nor make it accessible in any other manner to any third parties without your prior consent. However, the Company may share all or some of the personal data which it collects with judicial bodies of the Republic of Croatia, in cases stipulated by law.

  1. Period for collecting personal data which you submit to us

We will collect and process your data as long as you use our services and until you withdraw you consent for processing personal data which you provided to us.

  1. Your rights (access, rectification, erasure, restricted processing, portability, objection)

Right of access to data – you can request from us access to your personal data, i.e., you have the right to receive information as to whether we process personal data relating to you;

Right to rectification – if the personal data relating to you is incorrect, you have the right (without unnecessary deferral) to acquire a rectification of the data, as well as supplement it if incomplete;

Right to erasure – you have the right to have your personal data erased without unnecessary deferral and under the condition stated in current provisions on personal data protection;

Right to restriction of processing – you have the right to seek restricted processing of your personal data subject to the condition stated in the current provisions on personal data protection;

Right to portability of data – you have the right to receive personal data which you have provided to use in a structured, ordinarily useful and machine readable format and transfer them to another controller without hindrance on our part. If it is technically feasible, you have the right to seek direct transfer of our personal data to another controller; if the personal data is processed for the purpose of direct marketing, you have the right to lodge at any time an objection to the processing of your personal data for the requirements of such marketing, which includes the creation of a profile to the extent which relates to such direct marketing. We point out that in the event of objecting to processing data for direct marketing requirements, your personal data will no longer be processed for such purposes;

Right to object –at any time and based on your particular situation, you have the right to object to the processing of our personal data which you provide to us, and in that case we may not continue processing your personal data unless we prove that there exist convincing and legitimate reasons for such processing which prevails your personal interests, rights and freedoms or in order to establish, achieve or defend legal requirements; if the personal data is processed to the requirements of direct marketing, you have the right to lodge an objection to the processing of your personal data for the uses of such marketing at any time, which includes creating profiles to the extent it relates to such direct marketing. We would like to point out that should you object to the processing of data for direct marketing requirements, your personal data must no longer be processed for such purposes;

  1. Cookies

Cookies are small files which your browser stores on your hard disk when visiting our website. This enables our website to recognise your computer when you visit us next time, in order to offer you a personalised experience when surfing the web.

To use the cookies in accordance with the Electronic Communications Act, Personal Data Protection Act and Directives EU 2002/58/EC and 95/46/EC, we require your consent.

In using this website, you give your consent and accept the use of cookies. If blocking cookies, you can continue to view the website, but some of its possibilities will no longer be available.

Cookies are not used for spying on users or following everything a user does, not are they malicious code or viruses. Also, cookies are not linked to undesired messages or spam, they cannot store passwords and are not used solely for advertising or advertisements.

Information such as your name or email address will not be stored – the website cannot access your personal information and files on your computer.

You can decide to disable cookies if you don’t want to store cookies on your computer. The cookies settings can be controlled and configures in your Internet browser.

You can prevent receiving bookies by configuring the settings in the Tools/Options menu in your browser.

  1. Video surveillance system

We would like to inform our visitors that the LUMINI Shopping Centre facility along with the external parking lot is under video surveillance. The video surveillance system is used for the safety and security of visitors, workers and other persons on the premises of the LUMINI Shopping Centre, and in order to prevent fires and/or other natural disasters and protect assets found within the periphery of the surveillance zone.

The cameras record only motion images without sound, and do not record nor store any type of audio recordings. The cameras are positioned at the parking lot, at the entrances, and in the common sections of the LUMINI Shopping Centre facility. Upon entering the zone under surveillance, you will see a sign which says, “FACILITY UNDER VIDEO SURVEILLANCE”. The notice also contains information about the controller as well as the person’s contact information.

Video camera recordings are stored for a period of 8-10 days, after which they are automatically deleted, except in case when a specific event is recorded on the video due to justifiable reasons and in accordance with Article 29 of the Act on Implementation of the General Data Protection Regelation (OG 42/2018) (for instance, for the purpose of providing evidence in court proceedings) and is not stored on specific media. In that case, the controller will make an official note of the exact reasons for storing the data, as well as the time for which the data will be stored.

The right to access personal data acquired from the video surveillance system is given to the authorised person belonging to the controller and/or processor of personal data via video surveillance. The right to access personal data acquired via the video surveillance system is achieved in line with the Act on Implementation of the General Data Protection Regelation (OG 42/2018).

Video surveillance is conducted 24 hours a day.

  1. Third parties

Our website has links to other websites, such as the Company’s profile on social media, the websites of public transport used to reach our shopping centre, and the like.

We are not responsible for the security or privacy of any data that those websites acquire when used. We kindly request that you carefully read the privacy policies applicable to those websites.

  1. Amendments to the Privacy Policy

The Company may amend this Privacy Policy at any time, where the most recent version of the Privacy Policy will always be available on the Company’s website. We kindly request that you check the date of coming into force published at the top in order to see the most recent change to the Privacy Policy.

  1. Whom to contact

In case of any questions, feel free to contact our data protection officer in writing at the following address: Ulica grada Lipika 15, 42204 Donji Kneginec, Turčin or at the address: [email protected]

Also, in accordance with Article 34 of the Act on Implementation of the General Data Protection Regelation, you have the right to submit a request for verifying breach of your rights to the Croatian Personal Data Protection Agency via the e-mail address: [email protected] or at the address: Martićeva ulica 14, 10000 Zagreb.

Follow us on social networks to find out all current discounts, news, and events on time.