Data protection

Information on Personal Data Processing

The information provided in this document aims to give you an overview of the methods of personal data processing and to familiarize you with your rights regarding the processing of personal data. The information relates to end-users and subscribers of SKVID application communication solutions (hereinafter referred to as the Application), whose personal data are processed through the Application.

I. Who is the Data Controller?

SKVID D.O.O., Jalševečka cesta 40, 10040 Zagreb, Croatia, VAT ID: 27197549120, email: info@skvid.hr, tel.: 01 444 0000 (hereinafter referred to as SKVID), is the Data Controller for all data records collected through the Application, except for records related to the personal data of end-users (such as medical documentation and documented messages exchanged between Subscribers and end-users of the application). In the case of these data records, SKVID acts as the Data Processor, conducting data processing activities (collection and storage) on behalf of the Data Controllers (Application Subscribers).

II. What is Personal Data?

Personal data is any data or combination thereof relating to an individual whose identity is determined or can be determined, such as name, surname, personal identification number (VAT ID), address data, phone number, date of birth, bank account number, person's health status, IP address used for login, device ID used for logging into the Application (such as a mobile phone or tablet), etc.

III. Collection of Personal Data

SKVID collects your personal data solely based on your request for registration and/or access to the Application. The following personal data about the end User are collected and stored: name, surname, address, and in the case of Subscribers, the name and surname and VAT ID of the responsible person are also collected and stored. We also collect, store, and process data in so-called "log files." A log file provides information about the date and time of an attempt to register/login and whether the registration/login was successful for the User. During the use of the Application, SKVID collects and stores information about the contents that the User views in the Application or stores on SKVID application servers (data related to documented information exchanged between registered users of the Application).

Information about user interaction with the Application, such as visits to individual user interfaces (number of sessions), the number of clicks on certain functionalities, is also collected and stored. Information about the version of the operating system of the User's mobile device, device ID, selected language of the Application's user interface, and the version of the application used by the User is collected and stored. This information is used for statistical purposes, and there is no possibility of identifying specific individuals through a statistical report based on anonymized data.

IV. How and for what purposes does SKVID process the collected personal data?

To provide a service to the User through the Application, SKVID processes personal data in accordance with the provisions of the General Data Protection Regulation, as well as the Law on the Implementation of the General Data Protection Regulation. Personal data of the User are processed when one of the following conditions for lawful processing is met:

The collection and storage of personal data in the process of registering the User and using the Application are carried out for the purpose of establishing a contractual relationship between SKVID and the User, thereby ensuring the prerequisites for providing the services offered by the Application, and the legal basis for data processing is Art. 6 Para. 1 point b) of the General Data Protection Regulation. The Application will use personal data only for the purpose for which they were collected (or for purposes identified as related to that purpose).

For the purpose of protecting the User's profile, as well as the Application and associated technical resources, SKVID processes various personal data (various online identifiers, log files, the network location of the User, etc.), all to determine whether the data entry is made by a human or an automated program and to prevent misuse of the User's personal data and detect any breach of security and other illegal activities. The legal basis for this is Art. 6 Para. 1 point f) of the General Data Protection Regulation.

In case of receiving and processing any request for assistance in using the Application (realization of end services through it), SKVID processes the User's personal data, since the processing is necessary for the provision of the contracted service or for the renewal of some contractual condition in accordance with the General Terms of Use of the Application. The legal basis for this is Art. 6 Para. 1 point b) of the General Data Protection Regulation.

If users wish to receive targeted offers for products and services within the Application, they can give their consent. In this case, SKVID will collect their personal data on the contents that the User views and stores in the Application. The legal basis for this is Art. 6 Para. 1 point a) of the General Data Protection Regulation.

The use of cookies and other data processing technologies regarding the use of the Application serves the following purposes:

Technical necessity for cookies: These are cookies and similar methods without which our services cannot be used (for example, for the correct display of our website, including font and color, for providing the functions you want, and for taking into account your settings, such as the choices you have made regarding cookies and similar technologies, for storing your registration in the login area, etc.).

Statistical need for cookies: These techniques allow us to collect anonymous statistics on the use of our services. This enables us to determine how we can better tailor our Application to user habits. The legal basis for the use of technically necessary cookies is Art. 6 Para. 1 point a) of the General Data Protection Regulation. The User has the option to voluntarily agree to the use of "analytical cookies" (and later, if desired, to revoke that consent). SKVID will not store any personal data after statistical calculations. Accordingly, there is no possibility of identifying specific individuals through a statistical report.

V. Where are Your Personal Data Stored?

SKVID stores your personal data in secure databases and applies appropriate security measures in accordance with relevant international standards and/or best technical practices in the field of personal data protection, and for this purpose, SKVID owns and manages its own ICT infrastructure. Your data will not be transferred or shared with third parties or locations without your consent (consent). To ensure the necessary level of security for your data, our application solutions use the option of data encryption. It is important to note that, despite our efforts to protect your personal data, we cannot guarantee that the Internet is 100% secure. Access to our services should only take place in a secure environment, which you, as Users of the Application, also influence. The confidentiality of your personal data is also ensured by adequate access rights management and confidentiality in the work of our employees. To ensure the confidentiality of your personal data, our carefully selected employees, who are familiar with data protection regulations at the beginning of their employment, are obliged to keep data confidential by a Contract and a special Statement. This obligation continues even after the termination of their employment.

VI. How Long Your Data are Stored

The personal data of end-users are stored as long as you are a user of our Application and have registered at least one service through it, which is provided to you via our Application. If you have registered for a targeted service through the Application, your data will be deleted 15 days from the day of your request for deletion of the user account for the targeted service. If you have registered for several targeted services through the Application, your personal data will be deleted 15 days from the day of your request for deletion of the user account for the last service in the Application. In the case of termination of the contractual relationship between SKVID and the Subscriber of the Application, SKVID will delete all personal data of the end-users collected during the contractual relationship with the Subscriber within 15 days at the latest.

VII. What Are Your Rights Regarding the Processing of Personal Data?

You have various rights related to the processing of your personal data, and below we provide you with a detailed overview of them.

Rights of the User related to the user account and use of the service:

If you already have a user account at SKVID, you have the right to deactivate it if you consider the General Terms of Use unacceptable. Removing the user account may result in the interruption of the provided and/or used service. Interruption of service use at the request of the User is not a basis for a refund of the amount paid for the provided service.

If you do not have a user account and do not agree with the General Terms of Use, you can choose not to have a user account created for you.

Right to access:

From SKVID, you can obtain confirmation whether your personal data are being processed, and if so, access to those data and the following information: information on the purpose of processing, categories of personal data concerned, recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, and the existence of the User's rights regarding the processing of personal data.

Right to rectification:

If your personal data that we process are incomplete or inaccurate, you can request us to correct or complete them at any time. We note that you are responsible for providing accurate data, and you also have an obligation to inform us about relevant changes to your personal data.

Right to erasure:

You have the right to request the erasure of your personal data if you consider that they are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you have objected to processing based on our legitimate interest, if you consider that your data have been unlawfully processed, and if you consider that your data should be erased under the law of the European Union or the Republic of Croatia.

Right to restriction of processing:

You can request SKVID to restrict the processing of your data:

If you contest the accuracy of the data, during the period which allows us to verify the accuracy of those data,

If the processing was unlawful but you refuse deletion and instead request restriction of use of the data,

If we no longer need the data for the intended purposes, but they are still needed for the establishment, exercise, or defense of legal claims,

If you have objected to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

If the processing of data is restricted, then such personal data may only be processed with your consent, except for storage or the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. If you have obtained restriction of processing, we will inform you before the restriction is lifted.

Right to object:

If we process your data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or when processing them we rely on our legitimate interests, you can object to such processing of data if there is an interest in protecting your data. If we rely on our legitimate interests for data processing and you have objected to such processing, then we will not further process your data unless we demonstrate that there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Right to lodge a complaint:

If you believe that we have processed your personal data contrary to the law of the European Union or the Republic of Croatia, please contact us so we can clarify any issues. You certainly have the right to file a complaint with the Personal Data Protection Agency to determine a breach of rights.

Right to data portability:

At your request, we will provide you with your personal data in a structured, commonly used, and machine-readable format. If you wish to transfer your personal data to another data controller, if technically feasible, we will also enable the direct transfer of those data.

Right to be informed of a personal data breach:

In the event that, despite all measures taken, a breach of your personal data occurs, we will inform you of any such breach without undue delay by sending a written notification. In the said notification, we will describe the nature of the personal data breach, provide the name and surname of the person from whom you can obtain additional information about the breach, describe the likely consequences of the personal data breach, and describe the measures we have taken to address the personal data breach issue, including measures to mitigate the adverse effects. The said notification will be composed using clear and simple language.

Rights in case of data processing based on consent:

If we base the processing of personal data on consent, we ensure that you always give your consent in the form of a written statement, personally signed, while in cases of digital channels, we ensure that prior authentication is conducted and that consent is voluntary, specific, informed, and unambiguous. At any moment, you have the right to withdraw your consent for the processing of personal data. We note that if the consent was given for a one-time processing action, and such processing has already been performed, then the revocation of consent has no legal effect. In case of withdrawal of consent, we immediately delete all your personal data.

All these rights can be exercised by contacting or submitting a request to the email address zastitapodataka@skvid.hr or to the postal address: SKVID LLC, Jalševečka cesta 40, 10040 Zagreb, with the note “For the Data Protection Officer”.