LUMINI SHOPPING CENTRE
(applicable from 25/05/2018)
The personal data which we collect from you and process is deemed to be that personal data which you direct provide us with in relation to services on our website. In doing so, we always collect and process only data which is essential for achieving certain legal purposes, and we do not further process them in a manner that does not comply with the purpose for which they were collected, unless stipulated differently by way or based on user consent.
The data may include the following:
Name and surname
Information on your current location
The company collects some or all of the above-mentioned personal data based solely on your consent. Consent is considered to be a voluntary, separate, informed and unambiguous expression of will, whereby a statement or clear affirmative action provide consent for the processing of personal data for certain purposes (so-called opt-in). We note that you have the opportunity to withdraw your consent at any time, but from the moment of such a withdrawal, you will no longer be able to use the services accessible on the website www.lumini.hr.
The consent may be withdrawn by notifying the Company or clicking on the link “Unsubscribe” in our bulletin (newsletter).
The Company collects and process personal data in order to provide you with services you seek, such as receiving the bulletin (newsletter), services involving the issuing of the Lumini Club card, organising various prize games and the like. We collect and process data for marketing purposes in order to provide you with customised content and advertising, and in order to understand the manner in which you use our services so that we can improve your user experience.
The Company will not use the collected information in automating decisions, which includes the user of personal data for assessing certain personal aspects relating to individuals.
The Company is obliged to keep secret the personal data which you provide us, and not distribute, publish, provide it to third parties (which includes third parties in other countries and international organisations) for use, nor make it accessible in any other manner to any third parties without your prior consent. However, the Company may share all or some of the personal data which it collects with judicial bodies of the Republic of Croatia, in cases stipulated by law.
We will collect and process your data as long as you use our services and until you withdraw you consent for processing personal data which you provided to us.
Right of access to data – you can request from us access to your personal data, i.e., you have the right to receive information as to whether we process personal data relating to you;
Right to rectification – if the personal data relating to you is incorrect, you have the right (without unnecessary deferral) to acquire a rectification of the data, as well as supplement it if incomplete;
Right to erasure – you have the right to have your personal data erased without unnecessary deferral and under the condition stated in current provisions on personal data protection;
Right to restriction of processing – you have the right to seek restricted processing of your personal data subject to the condition stated in the current provisions on personal data protection;
Right to portability of data – you have the right to receive personal data which you have provided to use in a structured, ordinarily useful and machine readable format and transfer them to another controller without hindrance on our part. If it is technically feasible, you have the right to seek direct transfer of our personal data to another controller; if the personal data is processed for the purpose of direct marketing, you have the right to lodge at any time an objection to the processing of your personal data for the requirements of such marketing, which includes the creation of a profile to the extent which relates to such direct marketing. We point out that in the event of objecting to processing data for direct marketing requirements, your personal data will no longer be processed for such purposes;
Right to object –at any time and based on your particular situation, you have the right to object to the processing of our personal data which you provide to us, and in that case we may not continue processing your personal data unless we prove that there exist convincing and legitimate reasons for such processing which prevails your personal interests, rights and freedoms or in order to establish, achieve or defend legal requirements; if the personal data is processed to the requirements of direct marketing, you have the right to lodge an objection to the processing of your personal data for the uses of such marketing at any time, which includes creating profiles to the extent it relates to such direct marketing. We would like to point out that should you object to the processing of data for direct marketing requirements, your personal data must no longer be processed for such purposes;
Cookies are small files which your browser stores on your hard disk when visiting our website. This enables our website to recognise your computer when you visit us next time, in order to offer you a personalised experience when surfing the web.
To use the cookies in accordance with the Electronic Communications Act, Personal Data Protection Act and Directives EU 2002/58/EC and 95/46/EC, we require your consent.
Cookies are not used for spying on users or following everything a user does, not are they malicious code or viruses. Also, cookies are not linked to undesired messages or spam, they cannot store passwords and are not used solely for advertising or advertisements.
Information such as your name or email address will not be stored – the website cannot access your personal information and files on your computer.
You can decide to disable cookies if you don’t want to store cookies on your computer. The cookies settings can be controlled and configures in your Internet browser.
You can prevent receiving bookies by configuring the settings in the Tools/Options menu in your browser.
We would like to inform our visitors that the LUMINI Shopping Centre facility along with the external parking lot is under video surveillance. The video surveillance system is used for the safety and security of visitors, workers and other persons on the premises of the LUMINI Shopping Centre, and in order to prevent fires and/or other natural disasters and protect assets found within the periphery of the surveillance zone.
The cameras record only motion images without sound, and do not record nor store any type of audio recordings. The cameras are positioned at the parking lot, at the entrances, and in the common sections of the LUMINI Shopping Centre facility. Upon entering the zone under surveillance, you will see a sign which says, “FACILITY UNDER VIDEO SURVEILLANCE”. The notice also contains information about the controller as well as the person’s contact information.
Video camera recordings are stored for a period of 8-10 days, after which they are automatically deleted, except in case when a specific event is recorded on the video due to justifiable reasons and in accordance with Article 29 of the Act on Implementation of the General Data Protection Regelation (OG 42/2018) (for instance, for the purpose of providing evidence in court proceedings) and is not stored on specific media. In that case, the controller will make an official note of the exact reasons for storing the data, as well as the time for which the data will be stored.
The right to access personal data acquired from the video surveillance system is given to the authorised person belonging to the controller and/or processor of personal data via video surveillance. The right to access personal data acquired via the video surveillance system is achieved in line with the Act on Implementation of the General Data Protection Regelation (OG 42/2018).
Video surveillance is conducted 24 hours a day.
Our website has links to other websites, such as the Company’s profile on social media, the websites of public transport used to reach our shopping centre, and the like.
We are not responsible for the security or privacy of any data that those websites acquire when used. We kindly request that you carefully read the privacy policies applicable to those websites.
In case of any questions, feel free to contact our data protection officer in writing at the following address: Ulica grada Lipika 15, 42204 Donji Kneginec, Turčin or at the address: [email protected]
Also, in accordance with Article 34 of the Act on Implementation of the General Data Protection Regelation, you have the right to submit a request for verifying breach of your rights to the Croatian Personal Data Protection Agency via the e-mail address: [email protected] or at the address: Martićeva ulica 14, 10000 Zagreb.