Privacy Policy
This privacy policy (“Policy”) explains how bio-mi d.o.o. Matulji Put Brdo 15 as the data controller (hereinafter: “Controller”) collects, uses, and manages your personal data found on the website https://bio-mi.eu.
The Controller, as the service provider of the website https://bio-mi.eu, is dedicated to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data and how it will be used.
If you wish to contact us regarding this Policy or your personal data, please use the following contact details:
- Address: Put Brdo 15, 51211 Matulji
- Email: bio-mi@bio-mi.eu
When submitting your inquiry about processing or a request to exercise your rights, we will need to identify you for the security of your data.
How and when do we collect your personal data?
We collect your personal data when it is necessary to fulfill your consumer needs or for our business operations:
- when you access the website https://bio-mi.eu, we will collect your IP address, which is also considered personal data
- situations where we collect other types of data such as the date and time of access to the site, information about the hardware, software, or browser you use, as well as your computer’s operating system and application version, and your language settings. We may collect information about clicks and your access to the site https://bio-mi.eu that are displayed to you
- when you contact customer or sales service and request assistance or ask a question to exercise one of your rights guaranteed by applicable regulations
- when you contact us via social media, we collect the data you have made available when submitting inquiries or requests
- when you send any inquiry related to our offer or if you wish to send an open job application, etc.
The above-mentioned specific categories of your personal data are collected either based on consent, displayed to you when you first visit https://bio-mi.eu via a pop-up window, or based on legitimate interest. The latter applies, for example, in cases where cookies are essential for the functionality of https://bio-mi.eu.
Consent via the pop-up window is renewed 12 months after your last acceptance or rejection of specific cookies. In cases where we must fulfill our obligations under applicable regulations of the Republic of Croatia, we will not process data based on the two previously mentioned legal grounds.
What data do we collect from you directly and for what purpose?
The typical categories of data we collect from you as a user include: name, email address, phone number, or other information you provide when communicating with us via phone or email.
We collect your personal data for the following purposes:
- to use all services on the website https://bio-mi.eu
- to respond to your inquiry and process your requests more effectively
- for statistical data processing
- to send notifications and contact you
- to improve the quality of content
What are your rights?
| Right | Description |
|---|---|
| Right to access your personal data | You have the right to request confirmation of whether we process your personal data and access the personal data we process. |
| Right to correct inaccurate personal data | You have the right to request the correction of your inaccurate personal data and to supplement your personal data. |
| Data portability | You have the right to obtain and request the transfer of your personal data. |
| Right to deletion (right to be forgotten) | You can request the Controller to delete your personal data if one of the reasons listed in Article 17 of the General Data Protection Regulation is met. We inform you that we cannot delete your personal data if its processing is necessary, for example, to comply with a legal obligation or for reasons of public interest, to establish, exercise, or defend legal claims. |
| Right to object to the processing of your personal data | You have the right to object to the processing of your personal data, as well as generally to our handling of your personal data. |
| Right to withdraw consent | You have the right to withdraw consent for the further processing of personal data at any time. Withdrawal of consent does not affect processing that was carried out based on consent before its withdrawal. |
| Right to lodge a complaint with the Data Protection Agency | At any time, you have the right to file a complaint with the competent data protection authority – the Data Protection Agency (www.azop.hr) regarding the processing and protection of your personal data. |
You can exercise your rights by sending your request to the email address bio-mi@bio-mi.eu and using “Data Subject Request” as the subject of the message, or by mail to the address Put Brdo 15, Matulji. Upon receipt of the message, we will send you confirmation of the proper receipt of your request.
You exercise your rights free of charge. However, if you frequently (e.g., if less than 6 months have passed since your last request) or excessively (e.g., you request all your personal data in writing) request access or transfer of your personal data, we reserve the right to ask you to cover our costs before proceeding with such an action.
Where do we store your personal data?
The personal data we collect about you is stored in a secure environment. Your personal data is protected from unauthorized access, disclosure, use, alteration, or destruction by any organization or individual. The data is stored in both paper and digital formats. Processed data is stored at the Controller’s premises and is continuously monitored.
How long will we keep your personal data?
The Controller will not retain your personal data longer than necessary to fulfill the purpose of its use. If you are interested in details and retention periods, you can contact the Data Protection Officer at bio-mi@bio-mi.eu.
For example, we will retain your cookie preferences for up to one year, after which you will be shown the pop-up window again when visiting https://bio-mi.eu. Of course, you have the right to change your preferences at any time and manage consent.
What will we use your data for?
As previously mentioned, we may use your personal data in several different ways to improve your shopping experience, for direct marketing, or for security reasons.
Does bio-mi d.o.o. share data with third parties?
Privacy protection is important to us, so we will never share your personal data with third parties except for the purposes described in this policy. We will always inform you of any data sharing and transfer.
The Controller works with other companies (e.g., web developers). This means that we sometimes share your personal data with our trusted partners using secure IT systems. When we do so, data is transferred to servers located in the EU or a country that ensures an adequate level of protection in accordance with EU legislation.
Right to object to processing for direct marketing purposes
In certain cases, we process your personal data for direct marketing purposes. If you do not agree with this processing, you have the right to object to the processing of your personal data for such marketing purposes, including profiling related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. You can send your objections to bio-mi@bio-mi.eu.
Information on personal data processing related to activities on bio-mi d.o.o.’s official profiles on social media (Facebook, Twitter, Linkedin)
The company manages the following social media websites:
- Facebook: https://www.facebook.com/biomisolutions/
- Twitter: https://twitter.com/mi_sustainable
- Linkedin: https://linkedin.com/company/bio-mi-sustainable-solutions
The company processes personal data on social media websites to inform customers about offers, products, or other topics and news, as well as to communicate with visitors about these topics and respond to relevant inquiries, compliments, criticisms, and other queries.
In cases where we can influence and determine the conditions for processing personal data, we strive, within the possibilities provided by the social media operator, to ensure that the processing of personal data is carried out in accordance with relevant legal regulations. Thus, in cases where the social media platform provider allows it, we ensure that our social networking sites comply with data protection rules.
Data you add to our social media pages, such as comments, videos, images, “likes,” etc., are published through the social media platform and are never processed or used for any other purpose. However, we reserve the right to delete posts or comments that violate content rules, such as those contributing to violations of the law, containing hate speech, vulgar comments (e.g., sexual content), or attachments (e.g., images or videos) that violate copyright, intellectual property rights, the company’s ethical principles, and/or societal morals.
We do not control or store all social media functionalities, so for example, all posts you publish on our social media page will remain on the timeline indefinitely unless you delete them yourself or they are removed due to profile updates or rule violations.
We have no influence over the deletion of your data by the social media operator itself.
This Privacy Policy applies only to the use and processing of data collected by bio-mi from its users. Other websites accessible via https://bio-mi.eu have their own privacy policies and data collection practices, as well as methods of use and disclosure. bio-mi is not responsible for the practices and conditions of third parties.
Advertising
The company also uses advertising services through social media. The company has the ability to set parameters based on which a specific ad will be shown to a specific target group. In doing so, as with analytics, the company does not have access to personal data processed; this is solely handled by the social media platform operator.
Accordingly, when advertising, we select to whom the ad will be shown based on demographic, interest, and other parameters that allow us to target the exact group of people we need.
Other processing via social networks
In addition, the company carries out the following personal data processing:
| Title and purpose of personal data processing activity | Legal basis for data processing | Scope and source of personal data | Duration of processing | Categories of data recipients | Processing activity entrusted to the processor |
|---|---|---|---|---|---|
| Publication of photos and video materials for marketing purposes | Article 6, paragraph 1(f) of the GDPR – processing is necessary for the legitimate interest of the company. The data subject has the right to object to processing based on legitimate interest at any time. Article 6, paragraph 1(a) of the GDPR – the data subject has given consent for the processing of their personal data for one or more specific purposes. | Photos and video materials from various events, promotional and sponsorship activities. Source of data: data subject | Photos and video materials posted on the company’s social network profile will generally be stored permanently. | Social media users. | Providing profile maintenance services on the social network |
For the purpose of asserting or defending legal claims in court or administrative or non-contentious proceedings.
| Title and purpose of personal data processing activity | Legal basis for data processing | Scope and source of personal data | Duration of processing | Categories of data recipients | Processing activity entrusted to the processor |
|---|---|---|---|---|---|
| Filing claims against the data subject and successful defense in any litigation initiated by the data subject or in administrative and other similar proceedings. | Article 6, paragraph 1(f) of the GDPR (processing is necessary for the legitimate interest of the company). | All personal data collected for the above-mentioned purposes of data processing. | If the processing of personal data is necessary for the assertion or defense of the company’s legitimate interests in court proceedings or administrative or extrajudicial proceedings initiated by the data subject based on their legitimate interest, the company will process the data until the final conclusion of such proceedings or until the legitimate interest is achieved by other means (e.g., by reaching an out-of-court settlement). |
Cookies
To maintain the website and ensure its functionality, the Controller uses technology generally known as “cookies.”
A cookie is a small text file that is stored on your computer or mobile device when you visit a particular website. Cookies enable the website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time, so you do not need to re-enter them each time you return to the site or browse different pages. Cookies can be temporary or permanent. Thanks to cookies, you can browse our pages without difficulty, and the results shown to you will be relevant.
For more information on the processing of personal data via cookies, please refer to our Cookie Policy.
Cookies stored on your computer can be accessed when you visit our website.
We only process cookies with your consent. You can accept, partially accept, or reject the use of cookies, just check the settings in your browser. However, please note that some features of our website may not function without cookies. When requesting consent, we will present the purpose for which we will process this type of information and inform you of your rights.
You can also regulate your cookie choices at any time via the pop-up window.
Entry into force and changes to the privacy policy
This policy enters into force on the date of publication on https://bio-mi.eu.
The Controller may change this privacy policy at any time by publishing the amended text on the website https://bio-mi.eu.
Changes to this privacy policy take effect immediately after publication on the website https://bio-mi.eu.
The policy was revised in July 2024.
