Information on the protection of personal data
MEDIAL d.o.o., Ulica Charlesa Darwina 4F, 10000 Zagreb, OIB: 73435500162, tel: +385 1 6116-393, e-mail:
- Identification data: name and surname
- Contact data: electronic address (e-mail), telephone or mobile phone number.
Data on the personal data protection officer
- tel: +385 1 6116-393,
- e-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it.
Purpose of processing and legal basis for processing personal data
We collect and process your personal data in accordance with Article 6, paragraph 1, of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, for the purpose of responding to your submitted inquiry and acting on received objections and complaints that you send us.
We collect and process your personal data, as mentioned above, because they are necessary for us to be able to contact you back regarding the delivery of an answer to the submitted inquiry and we do not use them for any other purpose.
Source of personal data
We process personal data that is limited to what is necessary to fulfill the above-mentioned purpose.
We collect and process personal data fairly, lawfully and transparently and we ensure their accuracy, completeness, timeliness and security by applying appropriate technical and organizational measures.
Legitimate interest
The processing of your data based on our legitimate interests is subject to special rules that allow you to object to such processing at any time, based on your particular situation. The legitimate interests on the basis of which MEDIAL d.o.o. will process your personal data are:
- contacting clients (marketing) for the purpose of delivering a response to a request
Obligation to store personal data
We collect and process personal data in a manner that ensures appropriate security and confidentiality in their processing and enables the effective application of data protection principles, reduction of the amount of data, scope of their processing, storage period and their availability. We take all appropriate technical and organizational security measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure, inspection or access to data.
We undertake to protect your personal data in accordance with the highest applicable standards, which means that we will not disclose it or make it available to third parties, except in the following cases:
- if you expressly consent in writing to the disclosure of certain confidential data for a specific purpose or to a specific person;
- if the data are required by the Ministry of the Interior or the competent state attorney's office for the purposes of performing tasks within their jurisdiction;
- if the data are required by a court or notary public for the proceedings it is conducting, and the presentation of such data is requested in writing;
- in cases specified in REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL relating to the possibility and rules for the processing of personal data by executors on behalf of the client processing.
Recipients or categories of recipients of personal data
In all the above cases, we will disclose your personal data exclusively to the third parties expressly mentioned above and/or to persons expressly prescribed in the above and other laws and regulations in force in the Republic of Croatia, and they will not be forwarded to third parties without legal obligation.
Period for which personal data will be stored
We will keep your personal data until the purpose of the processing for which they were collected is fulfilled. After the purpose for which they were collected has ceased, we will no longer use your personal data and they will be deleted.
Your rights regarding the processing of personal data
- Right to access personal data – you have the right to access your personal data that we process about you and may request detailed information, in particular on the purpose of their processing, on the type/categories of personal data that are processed, including insight into your personal data, on the recipients or categories of recipients and on the envisaged period for which the personal data will be stored. Access to personal data may be restricted only in cases prescribed by Union law or our national law. To do this, please send your request to us as the controller in writing, including by electronic means.
- Right to erasure – you have the right to request that we erase personal data concerning you if we have processed it unlawfully, if the personal data are no longer necessary in relation to the purposes of the processing, if you have withdrawn the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and there is no other legal basis for the processing, if you have objected to the processing of your personal data in accordance with Article 21(1) of the General Data Protection Regulation and if there are no overriding legitimate grounds for the processing.
- Please note that there are reasons that prevent immediate erasure, for example for the establishment, exercise or defence of legal claims, which we will inform you about in detail in relation to each individual request;
- Right to restriction processing – you can request from us the restriction of the processing of your data:
- if you contest the accuracy of the personal data for a period that enables us to verify the accuracy of the data,
- if the processing is unlawful and you oppose the erasure and instead request the restriction of the use of the data,
- if we no longer need the data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims,
- if you have objected to the processing;
- right to data portability – you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, if the processing is based on consent or a contract and is carried out by automated means;
- right to object – you can object to the processing of your personal data at any time, if the processing is based on our legitimate interests interests, including profiling or if we process your data for direct marketing purposes;
- right to withdraw consent – where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before it was withdrawn. You can do this in the same way as you gave your consent, as well as by e-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it. or by phone +385 1 6116-393; - right to complain to the supervisory authority – you have the right to file a complaint with the supervisory authority if you believe that the processing of personal data is not in accordance with the Regulation. The supervisory authority will inform you about the progress and outcome of the complaint, including the possibility of a legal remedy under Article 78.
- Right to compensation – if you have suffered (non-)material damage due to a breach of the relevant legal provisions, you have the right to compensation from us or the processor for the damage suffered. The court proceedings for the exercise of the right to compensation for damages shall be conducted before the courts competent under the law of the state (Article 79, paragraph 2).
You may request the exercise of the above rights, taking into account the exceptions provided for the withdrawal of consent and the filing of a complaint, by e-mail:
If your requests are manifestly unfounded or excessive, in particular due to their frequent repetition, we may charge an administrative fee or refuse to act on the request.
Providing the above-mentioned personal data, except for those provided on the basis of your consent, is a necessary condition for achieving a specific purpose, i.e. for providing a response to the submitted inquiry. Accordingly, you have the right to refuse to provide this data, but in that case MEDIAL d.o.o. will not be able to fulfill its obligations in providing its services.
Use of cookies
The official website www.medial.hr uses so-called cookies (cookies) - text files that are placed on the user's computer by an Internet server (server), through which the Internet service provider (ISP) displays a web page.
Cookies are created when the browser on the user's device loads the visited network destination, which then sends data to the browser and creates a text file (cookie). The browser retrieves and sends the cookie to the website server when the user returns to it.
Our pages use technical cookies (mandatory cookies, cannot be turned off) that are necessary for the functioning of the website, functional cookies (can be turned off) that allow the website to provide improved functionality and personalization, and marketing cookies (can be turned off) that allow us to record visits and traffic sources so that we can measure and improve the efficiency of our website.
On the website www.MEDIAL.hr, the personal data processing manager has installed components of the Google Analytics service. Google Analytics is a service for collecting and analyzing data on the behavior of visitors on the website. The web analytics service collects, among other things, data about the website from which the respondent came, which subpages they visited, or how often and for how long they browse a particular subpage. Web analytics is used to optimize the website and to analyze online advertising.
You can change the settings of your internet browser so that you can choose whether to approve or reject requests to save cookies, delete saved cookies automatically when you close the internet browser, and the like. You have the right to disable cookies. Internet browsers are usually programmed to accept cookies by default, but you can easily adjust this by changing your browser settings.
When you first visit our website, you will be informed about the use of cookies, and you have the option to block or disable cookies. Your decision to accept cookies will be saved in an additional cookie for 180 days, and during that period you will no longer see a message asking about the use of cookies. After this time, the cookie usage query will reappear, and it will also appear again if you delete the cookies yourself in the meantime.
If you disable cookies, you will not be able to use some of the functionalities on the website.
Subscribe to the newsletter
On the website of the controller MEDIAL d.o.o., visitors have the option to subscribe to the newsletter. Through the newsletter, the controller informs clients and business partners about offers and news regarding its services.
After the user subscribes to the newsletter from our website, a confirmation email will automatically be sent to the respondent's email address before sending the first newsletter for legal reasons, in the double consent procedure. The confirmation email is used as proof that the owner of the email address is the respondent authorized to receive the newsletter.
When registering for the newsletter, the respondent's email address and the IP address of the computer system issued by the service provider, which the respondent used during registration, as well as the date and time of registration, are stored. The collection of this data is necessary to prevent misuse of the respondent's email address in the future and serves as legal protection for the data controller.
The consent to the storage of personal data given by the respondent for sending the newsletter can be withdrawn at any time. This can be done by clicking on UNSUBSCRIBE or by directly notifying the data controller.