Privacy Policy

Cedevita d.o.o. (hereinafter: the Company or we) is part of the Atlantic Grupa business system, where high standards of corporate governance and transparent business practices are established and applied, which include responsible, lawful, and ethically based behavior of all legal entities within the Atlantic Grupa, including respect for privacy and the protection of personal data.
Guided by these standards, the Company, as the data controller within the Atlantic Grupa business system, collects and processes personal data lawfully, fairly, and transparently, in accordance with applicable regulations, and takes appropriate technical and organizational measures aimed at protecting personal data from unauthorized access and misuse. The Company is aware that the protection of personal data is important to our users and respondents. Therefore, we want to present to you which personal data we collect, how we manage it, and how we care for its protection.

Purposes, Scope, and Legal Basis for Processing

We collect personal data for specific, explicit, and legitimate purposes, in necessary scope, and process it in a manner consistent with these purposes.
The Company will collect and process personal data only when permitted by law:

 processing is necessary for compliance with legal obligations
 when the data subject has given consent for the processing of their personal data
 processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract
 processing is necessary to protect the vital interests of the data subject or another individual
 processing is necessary for the purposes of legitimate interests pursued by the Company or related entities.

Collection and Use of Personal Data

Personal data are information that identify you directly or indirectly, such as your name, email address, phone number, IP address, or postal address. The Company does not collect your personal data unless you explicitly provide such data (e.g., by inquiring about a specific product or service, concluding a contract, requesting certain actions prior to concluding a contract, enrolling in loyalty programs, subscribing to electronic newsletters, participating in surveys, contests, and sweepstakes, ordering samples or brochures, requesting donations, submitting a resume or open application, or applying for job openings).

We collect, store, use, or transfer your personal data to the extent—both in content and time—that is necessary in a particular case, e.g., to respond to your inquiries, fulfill your requests, inform you about our products, results of contests or sweepstakes, fulfill contractual obligations or necessary actions prior to concluding a contract, or fulfill other legal obligations.

For these reasons, the Company may sometimes need to transfer personal data to other companies within the Atlantic Grupa and related entities or external service providers for further processing. Service providers may be engaged, for example, in call center services, product delivery, distribution of promotional materials, or organizing and conducting sweepstakes. The Company requires these parties to comply with applicable legal regulations, respect our instructions, and adhere to our internal rules on personal data protection, as well as the requirements for implementing adequate organizational and technical measures for the protection of personal data.

The Company guarantees that it will not sell your personal data, nor will it share or lend your personal data to third parties unless necessary to fulfill a specific purpose for which you provided such data. The Company also guarantees that your data will not be provided to any unauthorized recipient. It may be necessary for us to disclose your personal data to a competent public authority if required by law or another binding regulation. Collected data will be retained for as long as necessary concerning the purpose for which they were collected, or in accordance with applicable regulations.

Use of Personal Data for Advertising and Marketing Purposes

When your personal data are used for advertising and marketing purposes, in accordance with applicable laws in the field of personal data protection, your data will be stored and used for these purposes, e.g., for sending newsletters, product samples, invitations to participate in contests and sweepstakes, via email or postal mail or another communication channel you have accepted.

If your personal data will be used for sending individual (customized) advertisements and promotions through the creation and maintenance of a user profile, you will be informed in advance, before sending such advertisements and promotions, and we will certainly ask for your specific, explicit, and informed consent prior to such processing of personal data.
We may use your data for analyzing and improving the efficiency of our internet services, advertising, marketing, market research, and sales efforts, through surveys or other types of inquiries, or in a manner that ensures your personal data are anonymized, i.e., cannot be associated with a person.

Exercising Data Subject Rights

At any time, you can request information about your personal data that we process or request their correction, demand the cessation of their use or deletion of your personal data, or withdraw consent for all or only some purposes (except where it is not possible, e.g., in the case of processing data for statistical purposes where personal data can no longer be associated with an individual), or request the transfer of data to another data controller under legal conditions or unsubscribe from receiving our informational and promotional materials.

You can also object to the use of your personal data in situations based on our legitimate interest, and certainly when we use them for direct marketing purposes. On our part, we will make reasonable efforts to ensure that your personal data you provided us with are accurately recorded, but the responsibility for their accuracy lies with you, and we ask you to regularly and timely update them, or to send us a request for changes or corrections.

To exercise all your rights and obligations regarding the use of personal data, you can contact the email address or registered office address of the Company provided on the website or the email address: [email protected] or as indicated in the promotional materials provided. Upon contact and submission of the above requests, we will make reasonable efforts to confirm your identity and prevent unauthorized processing of personal data. Upon receiving your requests, we will carry out the requested action within a reasonable timeframe, and no later than 30 days from the receipt of the request.

In accordance with applicable laws, we reserve the right to charge you for costs incurred during the processing of your request if the request is clearly unfounded or excessively repetitive, especially if it concerns repeated requests for which a response has already been provided.

Children

As a rule, we do not collect data about children. If we determine that such data has been transmitted to us without the consent of parents or legal guardians, we will delete it as soon as possible. In doing so, we will follow the guidelines we have received from you as parents or legal guardians.

If we do collect data about children of an age where, according to applicable laws, parental consent is required for processing their personal data, we will provide appropriate information and apply reasonable measures to verify that the children have the consent of their parents or legal guardians.

Security of Personal Data

To protect your personal data, we take all reasonable technical and organizational measures. Considering the specifics of the processing and the technology available, we organize and control processes to minimize the risk of unauthorized access or processing of your personal data, their loss, destruction, or misuse.

Access, Review, and Amendments

The privacy policy may change from time to time, based on changes in applicable laws or the Company’s business practices, so we recommend that you review it regularly to stay informed about any potential changes. In case of significant changes, we will notify you via email or on our website.