Privacy Policy

Resser Solutions d.o.o., Jurja Ves 36, 10000 Zagreb, Croatia (OIB 38425734835), owner of Stas Organizer (hereinafter: "the Company", "we", "our" or "us"), must, in the course of its business, collect and process certain data relating to individuals and is therefore a controller of personal data.

The purpose of this policy is to ensure that the Company provides all information necessary regarding the protection of personal data of individuals whose personal data it processes.

All employees of the Company are familiar with the content of this policy and ensure its application when handling personal data. Employees whose tasks include the handling of personal data are adequately trained with regard to those tasks.

This policy applies to all personal data processed by the Company in relation to any person, regardless of whether that person has been, currently is, or will be an employee, client, supplier or contact of the Company.

This policy covers the stasorganizer.com website. The Stas Organizer application has its own terms and conditions and personal data consent form, which are accepted at registration.

Personal data means any information relating to an identified or identifiable natural person, that is, a natural person (data subject) who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing of personal data means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The categories of personal data processed by the Company in the course of its business are first and last name, address, telephone number, OIB (Croatian personal identification number), year of birth, and e-mail address. The Company collects and processes personal data primarily for the purpose of providing services in the course of its business.

The legal basis for the processing of personal data is the contractual relationship between the Company and the data subject, a legal obligation of the Company, the necessity of processing in order to protect the vital interests of the data subject, or the consent of the data subject. The Company handles personal data appropriately and in accordance with the applicable regulations, regardless of how the data were collected, recorded, stored and used.

The Company processes certain personal data for marketing purposes (first and last name, address, e-mail address) in order to send notifications about promotions, benefits and special offers relating to the Company's services, but solely on the basis of the data subject's consent. The Company enables every data subject to withdraw that consent at any time.

For the purpose of carrying out its business processes, the Company may entrust certain data processing tasks to data processors, but only to those that comply with the technical, logical and organisational personal data protection measures provided by the Company.

The Company stores the collected personal data appropriately and ensures its confidentiality. The Company will not forward the collected data to third parties without the data subject's permission, except where this is necessary in order to fulfil legal, statutory or contractual obligations, where it is necessary in order to perform tasks carried out in the public interest, where the data subject has made the data public, or in other cases determined by the competent regulations.

If you choose to give us your personal data, for example by sending an e-mail or filling in a form on this website, we will use that data in order to respond to the message or enquiry you have sent us. The Company does not collect personal data through this website for commercial marketing activities or for distribution to other commercial organisations.

The forms on this website ask for your name, e-mail address, telephone number, company name and your message. Providing them is voluntary; without them we cannot reply to you.

This website has no user accounts. Registration, billing and the data related to them take place in the Stas Organizer application, under the terms accepted there.

This website sets no advertising or analytics cookies. What it stores on your device is the following:

• Your cookie choice: whether you accepted or rejected, kept in your browser so that we do not ask again.
• Your language: the language you last selected, so that the site opens in it next time.
• The AI assistant: only after you accept, the chat assistant stores its own settings, a widget identifier, and your resolved IP address and country.

This website also contains links to other internet sites created by third parties, which are identified as such wherever possible. The Company has no control over or influence on those sites and disclaims any liability for their content. This policy does not apply to the websites of other providers that are linked from our website.

• AI assistant: the chat assistant on this website is provided by Convocore. When you accept cookies, its software runs in your browser, stores a widget identifier and your resolved IP address and country, and processes the messages you send it. It is not loaded at all until you accept.
• E-mail delivery: messages you send through our forms are delivered to us by Amazon Simple Email Service.
• Legal requirements: we may disclose data where required to do so by law or in response to valid requests by public authorities.
• Business transfers: if we are involved in a merger, acquisition or asset sale, data may be transferred.

Personal data processed by the Company:

• must be processed fairly and lawfully, and must not be processed unless the conditions set out by the applicable regulations have been met
• are collected only for one or more specified and lawful purposes and must not be further processed in any manner incompatible with those purposes
• must be adequate, relevant and not excessive in relation to the purposes for which they are processed, and must be accurate and kept up to date
• must not be kept longer than is necessary for the applicable purpose
• must be processed in accordance with the rights of the data subject under the applicable regulations
• must be protected by appropriate technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage
• must not be transferred to a country or territory outside the EU, unless that country or territory ensures an adequate level of protection

With regard to the personal data that the Company processes, the data subject has the following rights:

• Right to be informed: to request information as to whether personal data are being processed and for what purpose, who the controller is, the contact details of the data protection officer, which categories of data are processed, for what period, from what source they were obtained, and who the recipients are.
• Right of access: to obtain confirmation as to whether personal data concerning the data subject are being processed and, where that is the case, access to that data and to information about the purpose, the categories concerned, the recipients, the envisaged storage period, the rights to rectification, erasure, restriction and objection, the right to lodge a complaint with a supervisory authority, the source of the data, and the existence of automated decision-making including profiling.
• Right to rectification: to obtain, without undue delay, the rectification of inaccurate personal data, and to have incomplete data completed, including by means of a supplementary statement.
• Right to erasure (right to be forgotten): to have personal data erased without delay where they are no longer necessary for the purposes for which they were collected, where consent is withdrawn and there is no other legal ground, where the data subject objects to the processing, where the data have been unlawfully processed, or where erasure is required to comply with a legal obligation.
• Right to restriction of processing: to request restriction where the accuracy of the data is contested, where the processing is unlawful but erasure is not requested, where the Company no longer needs the data but the data subject needs them for legal claims, or pending verification of an objection.
• Right to data portability: to receive personal data provided to the Company in a structured, commonly used and machine-readable format, and to transmit that data to another controller, where the processing is based on consent and carried out by automated means.
• Right to object: to object at any time, on grounds relating to a particular situation, to processing based on a task carried out in the public interest or on the legitimate interests of the Company or a third party, and to object at any time to processing for direct marketing purposes.
• Rights related to automated decision-making and profiling: not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects the data subject, except where that decision is necessary for a contract, authorised by law, or based on explicit consent.
• Right to withdraw consent: to withdraw consent at any time. Withdrawal does not affect the lawfulness of the processing carried out prior to it.

To exercise any of these rights, contact the data protection officer named below by e-mail, or by registered mail to: Resser Solutions d.o.o., Jurja Ves 36, 10000 Zagreb. The Company reserves the right to make additional requests regarding the identification of the person seeking to exercise their rights, in order to prevent abuse of those rights.

You may also lodge a complaint with the supervisory authority: the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb. The European Commission also provides a platform for online dispute resolution at ec.europa.eu/consumers/odr.

• Data protection officer: Tomislav Slišković
• E-mail: helpdesk@stas.hr

The Company stores and processes personal data only for as long as is necessary to fulfil the purpose for which they were collected, unless the applicable regulations provide a longer or shorter retention period for a particular purpose, or in other cases expressly prescribed by law. After that, the data are permanently erased or made anonymous.

The Company takes appropriate technical and organisational measures which protect data against loss, manipulation and unauthorised access, including encryption in transit (TLS/SSL). The measures taken are reviewed and, where necessary, adapted to the current state of the art. If a personal data breach occurs that may pose a high risk to the rights and freedoms of the data subject, the Company will notify the data subject in accordance with the applicable regulations.

It should be borne in mind that adequate protection of personal data also requires the data subject to take care of the secure storage and confidentiality of the data they have submitted. No method of transmission over the internet or of electronic storage is entirely secure, and absolute security cannot be guaranteed.

The stasorganizer.com website is operated by Resser Solutions d.o.o. and is protected by copyright. Unauthorised use of any part of the website without the permission of the copyright owner constitutes an infringement of copyright and is subject to legal action. Documents, data and information published on this website must not be reproduced, distributed or used in any way for commercial purposes without our express consent, and may be used only for the individual needs of users, subject to compliance with all copyright and proprietary rights and the rights of third parties.

We reserve the right to modify the content of this website and shall not be liable for any consequences arising from such changes. We do not guarantee the continuous, timely, secure and flawless availability of the website, and its operation may be suspended or discontinued at any time.

By using the content of this website, the user accepts the risks arising from that use and agrees to use the content solely for personal use and at their own risk. All content is provided "as is" and "as available", without any warranty, representation or other condition, whether express or implied. To the maximum extent permitted by law, the Company, its representatives and employees, affiliated partners, service providers, suppliers and licensors shall not be liable for any injury, loss, claim, or any direct, indirect, incidental, punitive or consequential damage of any kind, including lost profit, lost savings, loss of data or replacement costs.

The Company has the right to update this policy in the event of changes or amendments to the legal regulations relating to the protection of personal data, or where the processing described here changes. Users will be notified of changes by publication on this website, and amendments take effect on the date of their publication.

All questions regarding the protection of personal data should be directed to the data protection officer, or to info@stasorganizer.com.