Privacy Policy

Vrbani projekt d.o.o. attaches great importance to protecting the personal data of its users. This Privacy Policy explains how Vrbani projekt d.o.o. handles the information it processes or collects from you, including information collected when you visit our website.

Personal data are processed on the basis of one or more lawful grounds for processing in accordance with applicable data protection legislation.

Data Controller: Plavo jezero projekt d.o.o.
Contact email: gdpr@pointshoppingcenter.hr

Collection and Processing of Personal Data

Personal data means any information relating to an identified or identifiable individual, such as a name, residential address, email address, postal address or other identifying information.

Vrbani projekt d.o.o. does not collect your personal data unless you have expressly provided such data to us, for example when ordering a parking ticket, subscribing to our newsletter or contacting us for another purpose.

Where processing is based on your consent, by providing your personal data and giving your consent, you authorise us to use such data for the purposes described below.

Use, Disclosure and Transfer of Personal Data

Vrbani projekt d.o.o. may use your personal data for the following purposes:

technical administration of the website;
analysis of user preferences;
delivery of general or personalised offers through our newsletter;
providing access to specific information and services; and
communicating with you.

Where necessary for the purpose for which the data were collected, your personal data may also be made available to our business partners, clients and service providers.

Vrbani projekt d.o.o. encourages parents and guardians to educate children about the safe and responsible use of personal data on the internet.

Our services are not intended for persons under the age of 16. However, based solely on the data collected or processed, we may not always be able to determine whether the data relate to a person under the age of 16. Parents and guardians are therefore advised to educate children under the age of 16 about the safe and responsible use of personal data online.

Cookie Policy

The website you are visiting uses cookies. Cookies are small text files that are temporarily or permanently stored on your device and allow our website to recognise your browser or device during subsequent visits to www.pointshoppingcenter.hr.

The tools used on our website may collect and store technical data such as cookies, IP addresses, mobile device identifiers, browser information and similar technical information. Depending on the technology used and the applicable settings, such information may constitute personal data even where it does not directly identify you by name.

Cookies are used for analytical and statistical purposes, to enable the proper operation of website features and to improve the user experience.

Cookies may include:

session cookies, which are stored only for the duration of your visit and are deleted when you close your browser; and
persistent cookies, which remain stored on your device after your visit for a specified period or until you delete them.

Subject to your cookie preferences and consent, third-party services such as Google Analytics, Facebook Connect and the Meta Pixel may be used to obtain statistical information about visits to and use of our website.

The information collected through these services may include the user’s IP address, browser type, browser language, operating system and other standard technical and statistical information.

Depending on your browser settings, cookies may be accepted automatically. You may manage, block or delete cookies at any time through your browser settings or through the cookie preference tool available on our website.

Further information on managing cookies is available through the help or settings section of the browser you use.

Please note that certain cookies are necessary for the website to function properly. Blocking or deleting these cookies may prevent some website features from working or may cause the website to be displayed or function differently in your browser.

Further details about the cookies and similar technologies used on this website, including their providers, purposes and storage periods, are available in our Cookie Settings.

Our Facebook Page

When you visit our Facebook page, Meta Platforms Ireland Limited and, in certain circumstances, its affiliated companies may process personal data about your use of Facebook and your interaction with our page.

This may include information collected through cookies and similar technologies, such as your IP address, information about your browser and device, and information about how you interact with the Facebook platform and our page.

Meta may use this information to provide its services, measure and analyse the use of its platform, prepare statistical reports, personalise content and advertising, and ensure the security and functionality of its services.

Depending on the circumstances and the type of processing involved, Meta may process data outside the European Economic Area. Any such transfer is subject to the safeguards applied by Meta in accordance with applicable data protection legislation.

Some statistical information relating to visits to and interactions with our Facebook page may be provided to us in aggregated form through Facebook Page Insights. In relation to the processing of Page Insights data, we and Meta Platforms Ireland Limited may act as joint controllers to the extent determined by Meta’s applicable terms.

Further information about how Meta processes personal data, the legal grounds on which it relies, international data transfers and the exercise of data protection rights is available in Meta’s Privacy Policy and Cookie Policy.

Where you have given your express consent to receive our newsletter, we may send you electronic communications containing news, commercial information, offers and promotional content.

The personal data you provide when subscribing to the newsletter will be used for the purpose of managing your subscription and sending the newsletter.

You may withdraw your consent and unsubscribe from the newsletter at any time by selecting the unsubscribe option included in each newsletter or by contacting us at tinfo@poinshopingcenter.hr.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Following your withdrawal of consent, we will stop processing your personal data for newsletter purposes and delete or anonymise the data, unless continued storage is required by law or is necessary for the establishment, exercise or defence of legal claims.

We retain the personal data collected for newsletter purposes for as long as you remain subscribed or until you withdraw your consent.

Providing your personal data for newsletter purposes is voluntary. If you do not provide the required data or do not give your consent, we will not be able to send you the newsletter.

The legal basis for processing your personal data for the purpose of sending the newsletter is your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation.

Where the newsletter is sent through a service provider, such as a digital marketing agency or an email marketing platform, that service provider may process personal data on our behalf as a data processor.

Our processors are contractually required to process personal data only in accordance with our documented instructions, to maintain the confidentiality of the data and to apply appropriate technical and organisational security measures. They may not use the personal data for their own purposes unless they have an independent lawful basis for doing so.

Data Security

Vrbani projekt d.o.o. makes reasonable efforts to ensure the security of personal data and compliance with applicable data protection legislation, including the General Data Protection Regulation and the Croatian Act on the Implementation of the General Data Protection Regulation.

We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data.

However, no method of transmitting or storing information is completely secure. For this reason, absolute security cannot be guaranteed.

Video Surveillance

The premises of Point Shopping Center are monitored by a video surveillance system. Processing through video surveillance constitutes the processing of personal data.

Video surveillance is used where necessary and justified for the protection of persons and property, the prevention and investigation of security incidents, and the control of access to the premises.

Video surveillance is conducted in a manner intended not to disproportionately interfere with the rights and freedoms of visitors, employees and other individuals present within the monitored area.

The monitored areas are marked with appropriate notices containing the information required by applicable legislation.

Access to video surveillance recordings is restricted to authorised persons. Recordings may be disclosed to competent public authorities where required by law or where necessary for the establishment, exercise or defence of legal claims.

Video surveillance recordings are retained for 6 months, unless a longer retention period is required in connection with a specific incident, legal proceeding or request from a competent authority.

You may contact us using the contact details provided in this Privacy Policy to obtain further information or exercise your rights in relation to video surveillance.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which the data were collected and to comply with legal, accounting, contractual and regulatory obligations.

Where personal data are processed in connection with a contractual relationship, the data may be retained for a period of three years following the end of that relationship, unless applicable legislation requires or permits a longer retention period.

Where personal data are processed for direct marketing purposes on the basis of a legitimate interest, such data may be used for a period of three years following the end of the contractual relationship or, for individuals with whom no contractual relationship exists, for a period of three years following the collection of the data, unless the individual objects to such processing earlier.

Where processing is based on consent, including consent for promotional communications, personal data will generally be processed until consent is withdrawn, unless continued retention is required or permitted under applicable law.

Different retention periods may apply to specific categories of data, including newsletter subscription records, correspondence, parking-related data, website logs, cookie identifiers and video surveillance recordings.

Your Data Protection Rights

You decide which personal data you make available to Vrbani projekt d.o.o.

If any of your personal data change, please inform us at info@pointshoppingcenter.hr so that we can correct or update our records.

Depending on the circumstances and subject to the conditions and limitations set out in applicable legislation, you may have the right to:

obtain confirmation as to whether we process your personal data;
request access to your personal data;
request the correction of inaccurate or incomplete personal data;
request the erasure of your personal data;
request the restriction of processing;
receive personal data you have provided to us in a structured, commonly used and machine-readable format and, where applicable, have those data transmitted to another controller;
object to processing based on our legitimate interests;
object at any time to the processing of personal data for direct marketing purposes;
withdraw your consent at any time, where processing is based on consent; and
lodge a complaint with the competent supervisory authority.

You may withdraw your consent, in whole or in part, by contacting us at info@pointshoppingcenter.hr in writing or electronically.

After receiving a request to withdraw consent, we will stop the relevant processing from the date of withdrawal, unless another lawful basis permits or requires us to continue processing the data.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Requests relating to your rights may be submitted to:

Vrbani projekt d.o.o. / Plavo jezero projekt d.o.o.

Before responding to a request, we may ask you to provide additional information necessary to confirm your identity. This is intended to ensure that personal data are not disclosed to an unauthorised person.

We will respond to your request within the period prescribed by applicable data protection legislation. Exercising your rights is generally free of charge. However, where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable fee or refuse to act on the request, as permitted by law.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency:

Croatian Personal Data Protection Agency – AZOP
Selska cesta 136
10000 Zagreb
Croatia
Website: www.azop.hr

If you choose not to provide certain personal data, you may not be able to access particular sections of the website or use certain services where those data are necessary for providing the requested service.

Users who no longer wish to receive our electronic communications may unsubscribe through the link provided in the relevant communication or by sending a request to [EMAIL ADDRESS].

Automated Processing and Automated Decision-Making

Certain technical information may be processed automatically when you access the website. This may include your browser type, the number and duration of visits, the pages and content viewed, device information, approximate location derived from the IP address and similar usage data.

Such information may be used to assess website performance, understand how visitors use the website, improve its content and functionality, and maintain website security.

Unless expressly stated otherwise, we do not make decisions that produce legal effects concerning you or similarly significantly affect you based solely on automated processing.

If we introduce such automated decision-making in the future, we will provide information about the logic involved, the significance and envisaged consequences of the processing, as well as the applicable rights and safeguards.

Links to Other Websites

This Privacy Policy applies to the websites operated by Vrbani projekt d.o.o.

Our website may contain links to websites and services operated by other organisations. This Privacy Policy does not apply to such third-party websites or services, and we are not responsible for their privacy practices.

When leaving www.pointshoppingcenter.hr, we recommend that you review the privacy policy of each website that collects or otherwise processes personal data.

Amendments to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our processing activities, website functionalities, service providers or applicable legislation.

Any amendments will be published on this page and, where appropriate, communicated through the website or by other suitable means.

The date of the most recent amendment will be indicated at the top or bottom of this Privacy Policy.