Privacy Policy

INFORMATION TO BE COLLECTED

Access to the website www.middlechild.hr is free and registration is not required. By contacting you via contact forms or by e-mail, you fill in your details. Data is only available on the site www.middlechild.hr to whom they are addressed for the purpose of answering your inquiry. Giving your personal information is voluntary. We do not process more personal data than is really necessary to answer your inquiry.

PROTECTION OF YOUR PERSONAL DATA

Page www.middlechild.hr respects your privacy and processes your personal data responsibly and in accordance with the law. We store your personal data in electronic form and for protection purposes we apply appropriate technical and organizational measures of personal data protection and procedures to prevent personal data from being accessed without authorization.

Lola Oblak j.d.o.o.as a website service provider www.middlechild.hr is committed to protecting the privacy of personal data. If you wish to contact us regarding your personal data, please use the following contact information

Lola Oblak j.d.o.o.

Street of the Republic of Austria 9, 10000 Zagreb

OIB: 27278661672

We process your personal data for compliance with legal obligations, if this is necessary for the performance of a contract to which the data subject is a party or in order to take action at the request of the data subject prior to entering into a contract or for the purposes of legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

How do we protect your data?

We undertake to protect the personal data of customers, by collecting only the necessary, basic data about customers that are necessary for the fulfillment of our obligations.

Middle Child exceptionally holds to the protection of personal data and has taken various precautions to protect the personal data of users. User's personal information on the website www.middlechild.hr can be accessed using a password and email address.

All user data is strictly kept and is only available to employees who need this data to perform their work. All our employees are responsible for respecting the principles of privacy protection.

When a user engages in certain activities on the website www.middlechild.hr such as opening a user account, using an online store, completing surveys, comments, posting content, participating in competitions or sweepstakes, sending feedback, requesting information about services, responding to a job advertisement, Middle Child may request the user to provide certain additional personal data. In this case, before providing additional personal data, the user is strongly advised to study the Data Protection Information.

Middle Child as the processing manager collects personal data for the purpose of concluding and fulfilling the sales contract, delivering the product of preparing the documentation related to the sale, technical support and authorising payments through credit and debit cards for which the legal basis is determined by Article 6(1)(b) of the General Data Protection Regulation, i.e. processing is necessary for the execution of the contract to which the data subject is a party or in order to take action at the request of the data subject before concluding the contract, and further processes personal data for the purpose of registering completed customer orders, unique user identification, business analysis for which the legal basis is determined by Article 6(1)(f) of the General Data Protection Regulation, because processing is necessary for the purposes of legitimate interests of improving the business and adjusting the production of recognizing the needs of the market, and in special cases if you have given us valid consent then we can also use your contact data for the purposes of direct marketing for which the legal basis is determined by Article 6(1)(a) the data subject has given consent for the processing of his personal data for one or more specific purposes.

With the entry into force of this privacy statement, it is possible that current users will receive an e-mail from us asking you to confirm your consent to receive notifications from us by mail, phone, sms message or e-mail, because we cannot confirm or from the archives find the exact way in which you gave us your address, so we ask that if you want to continue receiving marketing materials from us then you will need to clearly and unambiguously give us consent for the same, otherwise we will not be able to further inform you about it.

If you have any questions regarding the protection of personal data, you can contact us directly at Lola Oblak j.d.o.o., Republic of Austria 9, 10000 Zagreb or to our e-mail address: hello@middlechild.hr.

The user as a data subject is responsible and obliged before each provision of personal data to review and study www.middlechild.hr.

PERSONAL DATA PROCESSING AND USE OF PERSONAL DATA

On the website www.middlechild.hr, Middle Child collects the following personal data of the data subject:

first and last name,
password,
telephone number,
address,
e-mail address,
the address of dispatch of the product,
the address at which the invoice was sent,
postcode,
city,
gender;
date of birth,

company and OIB (only for companies).

In addition to the above personal data that we process when visiting the website, below we also detail other types of personal data, the purposes of collection and use thereof, which we collect and process during the performance of our regular obligations:

Middle child it also collects information about its customers in order to be able to fulfil all its obligations arising from the applicable regulations. In case of purchase, we will collect information such as your name, surname, e-mail address, phone, gender, address for delivery purposes, IP address, payment information. For example, when you make a purchase in stores, via Middle Child We will ask you to provide certain personal information that is necessary for the proper processing of your purchase. This situation will happen especially if you decide to use one of the services, such as delivery, with the purchase of our products. Also, in order to process your order and ensure that personal and financial information is accurate, we use trusted third-party payment systems to ensure that your payment is secure and that your information is not used for fraud. If you want to pay for the selected product online, the processing manager will require payment-related information, including credit or debit card number, card expiration date, CVV number, as well as billing address. In order to ensure that the products and services you purchase from us are delivered to the correct address, we share your personal data necessary for the provision of certain services with trusted external partners (e.g. your name, delivery address and delivery messages you have provided – such as the time of day when you want to receive delivery).
When you want to become our registered user, we collect your name, surname, e-mail address, date of birth. We provide our registered users with various benefits and make it easier for them to purchase through our website.
From suppliers and other clients or associates, we collect and process, for the purpose of fulfilling contractual obligations, data such as: the name and surname of the responsible person within the legal person; contact details of the personal person in charge of communication and performance of contractual obligations.
From job applicants, and all for the purpose of possible employment, the data we collect and process may include: first name, last name, address, contact information, level of education, nationality, profession and profession, information on previous professional experience, information on professional training and training, and test results that may also reflect the candidate's ability to perform all the work obligations that a particular position to which he/she is applying places before him/her.
From subscribers to our newsletter, for the purpose of informing about our new products and benefits that you can achieve, we collect information such as an e-mail address.
In many cases, you want to ask us something, and for this purpose we collect your e-mail address, first name, last name, phone. The topic of the message as well as the content of the same depends on what you want to ask us. For example, in cases where you wish to return a product, we will collect additional information contained in the Disclaimer (name, surname, address, IBAN, telephone number, e-mail address) in order to exercise any of the rights related to you as a consumer.
Customer service – if you request a return of a product or are not satisfied with the service, etc., we need your contact information to resolve the problem you are addressing to us. The information you provide to us will only be used for this purpose. In certain cases, we will use the services of other legal entities to whom we entrust your data only to the extent that this will be necessary to resolve your case (e.g. authorized repair services or authorized companies that provide customer support for us).

When you want unilateral termination of the concluded contract, we collect your name, surname, address, date of purchase, current account number / IBAN, phone, e-mail and account information, all depending on the chosen payment method.

When you contact us via social networks, we collect the data that you have left available to us when you make a query or request.
When you contact us or shop by phone, the controller processes your data, such as: name and surname, address, delivery address, telephone number and/or e-mail address, all for the purpose of performing our services to you.
When you visit our branches through the video surveillance system, we will process your personal data such as your character's image, way of walking, physiognomy, etc.

Insight into the personal data of users may have, in the performance of their scope of work related to sales contracts concluded by buyers with Middle Child the following persons: legal persons involved in the execution of sales contracts such as delivery services, bookkeeping services, IT support, etc. with whom we carefully determine both the volume and the issue of personal data protection through contractual relations.

Middle Child may provide such data to third parties for the purpose of performing the contract, protecting the interests of the user, and Middle Child 's and preventing possible abuses, the need for better insight and understanding of individual needs and requirements of users, as well as developing the possibilities of providing all services of the highest quality Middle Child 's, which result in an increase in user satisfaction, for which the legal basis is the legitimate interest of the controller described in Article 6(1)(f) GDPR.

ESTABLISHMENT OF PERSONAL DATA

Middle Child will ensure that the user's personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or modification of personal data), which can only be accessed by authorised persons; Middle Child's.

Middle Child does not record or store the user's transaction data required for card payments. Middle Child will keep personal data for as long as necessary for the purposes provided for by special legal regulations (e.g. data on financial transactions under the accounting law we keep for 11 years) or until the revocation of the right to use when this is the desire of the data subject, and the same does not conflict with legal regulations.

The head of the personal data collection has taken technical, personnel and organizational measures to protect personal data that are necessary to protect personal data from accidental loss or destruction and from unauthorized access, unauthorized change, unauthorized publication and any other misuse and has determined the obligation of persons employed in data processing to sign a confidentiality statement.

PERSONAL DATA PROCESSING IN THE PAYMENT PROCEDURE

When making a payment on our web shop, use CorvusPay – an advanced system for the secure online acceptance of payment cards.

CorvusPay ensures complete secrecy of your card details from the moment you enter them in the CorvusPay payment form. Payment data is forwarded encrypted from your web browser to the bank that issued your card. Our store never comes into contact with complete information about your payment card. Also, the data is unavailable even to employees of the CorvusPay system. The isolated core independently transmits and manages sensitive data, keeping them completely secure.

The form for the registration of payment data is provided by the SSL transport code of the highest reliability. All stored data is additionally protected by encryption, using a cryptographic device certified according to FIPS 140-2 Level 3 standard. CorvusPay meets all requirements related to the security of online payments prescribed by leading card brands, i.e. it operates in accordance with the standard – PCI DSS Level 1 – the highest security standard of the payment card industry. When paying with the cards included in the 3-D Secure program, your bank additionally confirms your identity with a token or password, in addition to the validity of the card itself.

CorvusInfo treats all information collected as a banking secret and treats it accordingly. The information is used exclusively for the purposes for which it was intended. Your sensitive data is completely secure, and their privacy is guaranteed by state-of-the-art safeguards. Only the data necessary for carrying out the work in accordance with the prescribed demanding procedures for online payment are collected.

Security controls and operational procedures applied to our infrastructure ensure the current reliability of the CorvusPay system. In addition, by maintaining strict access control, regular security monitoring and in-depth checks to prevent network vulnerabilities, and by implementing information security provisions in a planned manner, they permanently maintain and improve the level of system security by protecting your card data.

For the above purposes, your personal data as a customer (e.g., name and surname of the customer, address of the customer, data from the customer's card) are temporarily stored with the provider of processing and billing services (MasterCard, Visa, Maestro, etc.), which stores this data in accordance with the highest degree of protection and preservation of confidential data. The buyer activates the process of processing and billing the cards by confirming (clicking) on the link "Pay".

Middle Child does not at any time dispose of, collect or process personal data entered for the purpose of processing and billing cards. In case you are interested in the details of your personal data collected for this purpose, customers are asked to inform themselves about the processing of personal data by Corvus Pay d.o.o. on the website where the payment process takes place

https://www.corvuspay.com/politika-zastite-osobnih-podataka/

Processing of data when making payments is necessary in order to perform all actions that precede the purchase or conclusion of a contract with the processing manager. When we talk about the legal basis of data processing related to certain types of payments or legal entities that provide these services, payment data such as name, surname, code, amount, account number or other transaction codes are shared with the card house or bank or third party through which the payment is made, all at the request of the respondent who independently chooses the method of payment.

Middle Child does not at any time dispose of, collect or process personal data entered for the purpose of processing and billing cards.

Middle Child warns customers to take care of the information provided on the card so that this information is not available to third parties and is not misused.

INFORMATION REGARDING YOUR RIGHTS

In accordance with the applicable data protection regulations, you have the following rights:

Right to information about your personal data that we have stored
Right to request rectification, erasure or restriction of processing of your personal data
Right to object to data processing for reasons of our own legitimate interest, public interest, or profiling, unless we can prove that there are compelling, justified reasons that outweigh your interests, rights and freedoms, or that such processing is carried out for the purpose of confirming, applying or defending legal claims
Right to data portability
Right to lodge a complaint with the Personal Data Protection Agency.
You may revoke your consent regarding the collection, processing and use of your personal data at any time with future effect. For further information, please refer to the sections above that describe the data processing based on your consent.

Middle Child respects that each user should be able to ensure the accuracy, completeness and up-to-dateness of their personal data. If the user considers that his personal data is incomplete, inaccurate or not updated, he can contact Middle Child by e-mail: hello@middlechild.hr.

You will receive our reply at the latest within 30 days from the date of submission of the request.

If you are not satisfied with how we collected or used your personal data, you can submit a formal complaint to the Personal Data Protection Agency.

COOKIES

What is a cookie?

A cookie is information stored on the user's computer by the website he visited. Cookies usually store user preferences, settings for the website, such as preferred language or address. Later, when the user re-opens the same website, the Internet browser sends back the cookies belonging to that site.

This makes it possible Middle Child to display information tailored to the needs of each individual user. Cookies can store a wide range of information including personal information (such as a user's name or email address). However, this information can only be saved if the user allows it – websites cannot gain access to information for which the user has not given them permission and cannot access other files on the user’s computer.

Default activities of storing and sending cookies to users are not visible. However, the user can change his web browser settings in such a way that he can choose whether he wants to approve or refuse the requests for storing cookies by deleting the saved cookies automatically when closing the web browser and the like.

In addition to personal data, Middle Child may ask the user for other data that cannot be identified and are not considered personal data (for example, information about how the site is used, computer, web server, preferences, hobbies, interests, activities), which Middle Child enable better, more precise and more personal selection of data for users, improvement of the website and additional routing and customization of its content to users. Based on this data Middle Child find out which content is the most popular among which users.

Website www.middlechild.hr uses so-called "cookies". ‘cookies’) in order to be able to provide the user with a service with full functionality and the highest quality of content. Cookies are a set of data generated by the website server and stored by the web browser on the user's disk in the form of a small text file. We strive to provide our users with the best possible user experience, so it should be noted that our websites work optimally only if cookies are enabled. In order to use cookies in accordance with the Electronic Communications Act, the Personal Data Protection Act and the EU Directives, we need your consent. By using this website, you give your consent and consent to the use of cookies. By blocking cookies, you can still browse the site, but some of its features will not be available to you.

BUILDING CONTENTS WITH OTHER WEBSITES

Articles on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves the same as if the visitor had visited that other website.

PROTECTIVE MEASURES

Page www.middlechild.hr uses technological and security measures, rules and other procedures to protect the personal data of users of this Site from unauthorized access, misuse, disclosure, loss or destruction. In order to ensure the protection of the confidentiality of information about the users of the site, we use industry standard safeguards; firewall and password protection, for example. Nevertheless, the user is obliged to ensure that the computer he uses is also safe and protected from malicious software such as trojans, computer viruses and worms. The user of the Site is aware that without adequate security measures (for example, secure configuration of the Internet browser, updated antivirus programs, personal firewall programs, non-use of programs from suspicious sources) there is a risk that the data and passwords used to prevent access to personal data may be disclosed to unauthorized third parties.

STATISTICS OF THE BUSINESS

This website uses Google Analytics to measure visitor statistics.

LIMITATION OF RESPONSIBILITY

Although we take available technical and organizational measures to prevent unauthorized disclosure of your personal information, we cannot guarantee that some of the personal information we collect will never be accidentally disclosed, contrary to the provisions of this Privacy Policy. To the maximum extent permitted by law, we exclude liability for damage caused to users or third parties by accidental disclosure of personal data.

LINKS ON OTHER WEBSITES

This Data Protection Information applies only to the use and use of data that Middle Child collects from the respondent.

Other websites that can be accessed through the website www.middlechild.hr have their own confidentiality statements and privacy policies. If through the website www.middlechild.hr. the user visits one or more other websites, Middle Child Recommends that users review the privacy statement of this site, as Middle Child is not responsible for the ways and conditions of working on other websites.

OTHER DATA

According to the law of the European Union, Middle Child informs users that the website www.middlechild.hr uses cookies (Cookies) to ensure the highest quality of service.

Cookies in the user's browser allow Middle Child to ensure the operation of all the functions of the web portal, to adapt certain content specifically for the individual user and to continuously improve the web portal by analysing visits.

How cookies are stored can be set by the user in the browser settings. In order to improve the experience of browsing the web portal, Middle Child must store a small amount of information (cookies) on the user's computer; cookies). Over 90 % all websites use this practice, but according to the regulations of the European Union from 25.03.2011. Middle child is obliged to ask for the user's consent before storing cookies.

By using the website www.middlechild.hr the user agrees to the use of cookies. By blocking cookies, the user can still browse the website, but some of its features may be unavailable to him.

CONSTRUCTIONS AND CHANGE OF PRIVACY RIGHTS

These Rules shall enter into force upon publication on the Website.

Middle Child reserves the right to amend the Privacy Policy at any time by posting the amended text on the website www.middlechild.hr.