1. PROTECTION OF PERSONAL DATA

1.1. Protecting the privacy of personal information
The Seller undertakes to protect the privacy of personal data of all registered Users of www.booandboobaby.com pages, and will handle them in accordance with the Personal Data Protection Act, or other applicable regulations.
Before accessing certain contents, the User is required to register, which includes the voluntary entry of the User’s own personal data. In case of consent to the provision of personal data, the User will be deemed to have agreed to the terms of use of personal data provided by these General Terms and Conditions, based on which the Seller is entitled to collect, use, process and transmit personal data necessary for use.

1.2. Collection, processing and use of personal data
By selecting the “I understand and accept the General Terms of Use” option during registration, the user gives personal consent to the collection, use, processing and transmission of their personal data required for the use of the website, including (but not limited to):
• consent that the Seller may, in accordance with the provisions of the Personal Data Protection Act, process personal data for its own records and statistics, for the purpose of creating a database of customers, informing about products and services, for information on delivery, for delivery of promotional materials, improving customer relations and improving services. The Seller may provide this information to third parties for the purpose of performing the service, protecting the interests of the user and the Seller and preventing possible abuse;
• the need for better insight and understanding of individual needs and requirements of users as well as the development of opportunities for the best possible provision of all services of the Seller that result in increased customer satisfaction;
• consent that the Seller may contact him in writing, by telephone, SMS and / or e-mail, and deliver materials to his home address informing him of the benefits and novelties in its offer;
• providing information to third parties necessary to perform the above purposes
The Seller will keep personal data as long as necessary for the purposes provided for in these General Terms and Conditions. After this time, personal data will be destroyed, deleted or made anonymous in a way that ensures that the security of personal data is maintained.
The Seller will not disclose the User’s personal data to third parties, except for the purpose of performing the service, protecting the interests of the User and the Seller and preventing possible misuse.

Seller shall ensure that the User’s personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons of the Seller.
Seller undertakes to provide Users with access to their personal data in its possession to ensure that personal data is accurate, complete and up to date.
If Users request correction or deletion of their personal data, the Seller will change or remove such data. By choosing to delete personal data, users agree that they will be denied access to certain content on the website.

When providing personal data, Users guarantee that they are complete, true, accurate and up to date.

1.3. Protection of personal data and availability to third parties
The User’s personal data is protected in accordance with the Personal Data Protection Act, and the Seller will not make it available to third parties in any way. We forward the necessary personal data exclusively to business partners for the realization of the delivery of your order or for the needs of addressing printed advertising materials. The customer has the right to request the correction, amendment or supplementation of inaccurate, incomplete or out-of-date data and for all questions regarding the protection of personal data may contact the head of the personal data collection.
The Seller does not record or store the transaction data of the User required for payment by cards. The credit card seller uses the services of a third party (as stated in Article 5.1.3) which encrypts your data.

1.4. Making user data available to third parties
The Seller guarantees that the e-mail address and other data of the User will not be made available to third legal and natural persons without his consent. Insight by the authorized services of the executive authority of the Republic of Croatia is excluded from the above, for the purposes of investigative actions based on a valid court order, for the purpose of performing the service, protecting the interests of users and Sellers and preventing possible abuse

1.5. Troubleshooting
The Seller is not responsible for accidental error or error due to force majeure or other objective circumstances that cause accidental violation of the guaranteed data protection of the User, but guarantees that the error will be eliminated, if possible, as soon as possible.

1.6. Report errors
The seller cannot guarantee that the information on the website will be error-free. If an error occurs, please report it to our staff so that we can correct it as soon as possible. Also, if the Seller in good faith believes that the error found is correct, it can delete or change it.

1.7. Cookie
What is a cookie?
A cookie is information stored on a personal computer at the time of browsing the website you have visited. Cookies are easier to use as they save your settings for a website (language or address) and reactivate them when you restart them. In this way, the information is tailored to your needs and common uses.
From simple settings information, cookies can also store a large amount of personal information (name, email address) to which you must give full access. If you have not enabled them, cookies cannot access the files on your computer. Cookie saving and sending activities are not visible to you, however you can select the option of approving / rejecting requests to save cookies, delete saved cookies and other activities related to the use of cookies in the settings of the selected Internet browser.

How to disable cookies?
By disabling cookies, you do not allow them to be stored on your own computer. Cookie settings can be configured and changed in the selected internet browser. To see the settings, select the browser you’re using (Chrome, Firefox, Internet Explorer 9, Internet Explorer 7 and 8, and Opera or Safari). If you disable cookies, you will not be able to use certain functionalities of the website.

What are temporary cookies?
Temporary cookies, or session cookies, are removed from your personal computer when you close the Internet browser in which you were browsing the website. With the help of these cookies, the pages store temporary data.

What are persistent cookies?
Persistent, or saved, cookies remain on your personal computer even after you close your Internet browser. With the help of these cookies, the website stores data to make it easier for you to use. For example, websites that require you to enter a username and password will “remember” your entry that will appear each time you visit them again. Persistent cookies will remain recorded on your computer for days, months or years.

What are first party cookies?
First-party cookies come from the website you are browsing, and can be temporary or permanent. In this way, the website stores data that will make it easier for you to use each new visit to that website.

What are third-party cookies?
Third-party cookies on your computer come from other websites located on the website you are browsing. These are, for example, pop-up ads, and cookies play the role of tracking websites for advertising purposes.

Does www.booandboobaby.com use cookies?
Yes, this website uses cookies to provide you with a simpler and better user experience.

What cookies does www.booandboobaby.com use?
Session cookies – these are cookies that will be automatically deleted when you close the Internet browser in which you are working Permanent cookies – these are cookies that will remain “recorded” in your internet browser until they expire or themselves do not delete manually. The information collected is anonymous and does not include your private information

Are there any third party cookies on the website?
There are several external services that store limited cookies for you, and the same was not set by this website. Limited cookies are used for uninterrupted use of features that provide users with easy access to content.

This page allows you to measure traffic.
The site uses Google Analytics – a service for measuring traffic. If you want to disable the storage of cookies by this service, disable them at the following link: Google Analytics –
https://tools.google.com/dlpage/gaoptout

Additional information about opting out of cookies:
There are several websites to turn off the storage of cookies for different services. Read more information at the following links:
http://www.allaboutcookies.org/
http://www.youronlinechoices.eu/

2. AMENDMENTS TO THE GENERAL CONDITIONS AND OTHER PROVISIONS

2.1. The right to change the General Terms and Conditions
The Seller reserves the right to change these General Terms and Conditions without prior notice. Users are obliged to check the valid General Terms and Conditions every time they use the Website, and especially the Internet store services.

2.2. Validity of the General Terms and Conditions
For online purchases, the General Terms and Conditions in force at the time of ordering the product are valid and which are delivered by e-mail together with the order confirmation.

2.3. Dispute resolution
All disputes that may arise on the basis of these General Terms and Conditions will be resolved before the competent court in Pazin.

2.4. Copying
The documents published on this website may be copied only for non-commercial purposes and only for individual use, and in compliance with all copyrights, other proprietary rights and any stated limitation of rights.

2.5. Third party websites
The Seller’s website www.booandboobaby.com may contain documents, data, information and links to third party websites. The same websites are not owned by the Seller, the Seller has no control over the said documents, data, information or other Internet sites and disclaims all responsibility, including but not limited to the accuracy, completeness and availability of content on Internet sites created by third parties. Seller disclaims any responsibility for any content displayed on such third party sites, as well as for any products or services acquired through such third parties. These General Terms and Conditions do not apply for any purpose in the case of using the website in question. The visit to these pages is entirely at the User’s own risk and the Seller does not bear any responsibility for such actions of the User.

PRIVACY POLICY
Privacy Policy – Boo & Boo baby
Publisher: Boo and Boo
Crafts for the production of cloth diapers

Published: On April 1, 2021
Application: As of April 5, 2021

1. In general

1.1. These are the privacy policies (hereinafter referred to as the “Privacy Policy”) issued by Boo and Boo
Craft for the production of cloth diapers, Zagrebačka 11, 52100 Pula, OIB: 68159799140 (hereinafter: “Company” or “We”). In this sense, the company has the position of head of the processing of your personal data.

1.2. This Privacy Policy governs the protection of your personal data as well as your privacy if you have registered on our webshop (www.booandboobaby.com), if you have made a purchase through our webshop, if you have subscribed to our newsletter, if you are a member of the MPC program, if you are our business partner or if you are interested in working with us (hereinafter: “You”). This Privacy Policy applies only to natural persons or their personal data.

1.3. This version of the Privacy Policy applies from April 5, 2021.

1.4. In case of any questions or requests regarding the handling or protection of your personal data, please contact us at info@booandboobaby.com

2. If you have registered on our webshop:

2.1. What personal data do we process?

2.1.1. We process personal data that you have given us during registration and purchase on our webshop (www.booandboobaby.com), ie the following data:

2.1.1.1. Your identification data (if you are a natural person)
Name, surname, date of birth;

2.1.1.2. Your contact information
Contact address for delivery and payment (street and house number, place, postal code, country);
Phone, Email address;

2.1.1.3. Additional information necessary for the execution of transactions
Card type, card number, card expiration month, card expiration year, control number (CVV);

2.1.1.4. Additional information necessary for product complaints
Order date, order code, method of payment, item name, date of complaint, reason for complaint, description of complaint;

2.1.1.5. Other data
Title, MPC card number (if you have one);

2.2. For what purpose do we process your personal data?

2.2.1. We process your personal data for the following purposes:

2.2.1.1. In order to enable you to use our service (registration and purchase through the webshop – www.booandboobaby.com). In that case, the basis for the processing of your personal data is the conclusion and execution of service contracts;

2.2.1.2. In order to fulfill our legal duties. In that case, the basis for the processing of your personal data is the fulfillment of our legal duty;

2.2.1.3. In order to protect our legitimate interests (for example when it is necessary to implement security measures). In that case, the basis for the processing of your personal data is our legitimate interest;

3. If you made a purchase through our webshop:

3.1. What personal data do we process?

3.1.1. We process personal data that you have given us when purchasing on our webshop (www.booandboobaby.com), or the following data:

3.1.1.1. Your identification data (if you are a natural person)
First Name Last Name;

3.1.1.2. Your contact information
Contact address for delivery and payment (street and house number, place, postal code, country);
Phone, Email address;

3.1.1.3. Additional information necessary for the execution of transactions
Card type, card number, card expiration month, card expiration year, control number (CVV);

3.1.1.4. Additional information necessary for product complaints
Order date, order code, method of payment, item name, date of complaint, reason for complaint, description of complaint;

3.1.1.5. Other data
MPC card number (if you have one);

3.2. For what purpose do we process your personal data?

3.2.1. We process your personal data for the following purposes:

3.2.1.1. In order to enable you to use our service (purchase via webshop – www.booandboobaby.com). In that case, the basis for the processing of your personal data is the conclusion and execution of service contracts;

3.2.1.2. In order to fulfill our legal duties. In that case, the basis for the processing of your personal data is the fulfillment of our legal duty;

3.2.1.3. In order to protect our legitimate interests (for example when it is necessary to implement security measures). In that case, the basis for the processing of your personal data is our legitimate interest;

4. If you have subscribed to our newsletter:

4.1. What personal data do we process?

4.1.1. We process personal data that you have given us when applying to receive the newsletter on our website, ie the following data:

4.1.1.1. Your email address;

4.2. For what purpose do we process your personal data?

4.2.1. We process your personal data for the following purposes:

4.2.1.1. To send you our newsletter. In that case, the basis for the processing of your personal data is our legitimate interest, due to your request to receive the newsletter;

4.2.1.2. In order to enable you to realize the benefits intended for all new recipients of the newsletter service. In that case, the basis for the processing of your personal data is our legitimate interest, in order to provide you with the benefit we promised you;

4.2.1.3. In order to protect our legitimate interests (for example when it is necessary to implement security measures). In that case, the basis for the processing of your personal data is our legitimate interest;

5. If you are our current or potential business partner:

5.1. What personal data do we process?

5.1.1. We process personal data that you have given us as well as those that we have collected during the establishment and maintenance of a business relationship, ie the following data:

5.1.1.1. Your identification data (if you are a natural person)
Name, surname, connection with the legal entity (owner, director, employee or similar);

5.1.1.2. Your contact information
Name and surname of the contact person;
Phone number, Email address;

5.2. For what purpose do we process your personal data?

5.2.1. We process your personal data for the following purposes:

5.2.1.1. In order to fulfill our contractual obligations to you and to take other necessary actions in connection with the conclusion and execution of the contract (eg for issuing invoices, delivery of goods, etc.) or previous actions (eg sending offers). In that case, the basis for the processing of your personal data is the execution of the contract to which you are a party, ie taking action at your request before concluding the contract;

5.2.1.2. In order to fulfill our legal duties for the purpose of complying with the relevant laws and for the purpose of cooperating with law enforcement services and bodies. In that case, the basis for the processing of your personal data is the fulfillment of our legal duty;

5.2.1.3. In order to protect our legitimate interests (for example when it is necessary to implement security measures). In that case, the basis for the processing of your personal data is our legitimate interest.

6. Who has access to your personal data?

6.1. We consider your personal data to be a business secret and as such we protect them in accordance with applicable legal regulations and best practice.

6.2. Third parties have the right to access and process your personal data only in the situations described below:
Executors

6.2.1. Third party service providers that provide us with the services necessary for our operational business such as. accounting, IT, postal and courier services, advertising, printing, translators, etc. In that case, they process your personal data exclusively in accordance with our instructions;
Leaders

6.2.2. Third parties to whom we send your personal data in order to provide you with the benefit you gain by subscribing to our newsletter service;

6.2.3. Third parties to whom we send your personal data in order to fulfill some of our obligations (for example, auditors) or to realize our legitimate interest (for example, certification). In that case, they process your personal data in accordance with their legal powers;

6.2.4. Competent authorities in exercising supervision over the legality of operations and actions. In that case, they process your personal data in accordance with their legal powers.

7. Is my personal data transferred to third countries?

7.1. If you have subscribed to our newsletter, we transfer your personal data outside the EU. The service we use for the purpose of sending newsletters, MailChimp or The Rocket Science Group LLC, presents personal data to the United States of America (USA). The said company has passed the certification procedure provided by the agreement between the EU and the USA (“Privacy Shield”). You can read more about MailChimp’s Privacy Policy at http://mailchimp.com/legal/privacy/.

8. How do we protect your personal information?

8.1. The protection of your personal data is extremely important to us. Some of the protection measures we implement are the following:

8.1.1. Implement database pseudonymization whenever possible;

8.1.2. Use secure methods when proportionalizing your personal information to prevent unauthorized access;

8.1.3. Application of modern methods of protection and control of access to data resources containing personal data;

8.1.4. Continuous monitoring of all resources (physical spaces where your data is stored) used to process personal data.

9. During what period do we keep your personal data?

9.1. For data where there is a legally defined retention period, we store your data through that period and delete them for an additional period of one year.

9.2. We process your personal data, which you have given us as a registered user of our webshop, until you log out as our user. Upon deregistration, the usual processing of your data ceases and we delete it within 6 years of your last purchase.

9.3. We keep your personal data, which you gave us as a customer on our webshop, for 6 years from your last purchase. After the expiration of the specified period, we will delete your data as soon as possible.

9.4. If you have filled in a complaint questionnaire, we keep your data, as well as the questionnaire itself, for at least one year from the receipt of the complaint in order to meet our legal obligation to protect consumers. After the expiration of the specified period, we will delete your personal data, as well as the questionnaire itself, within a month.

9.5. We keep your contact information for sending the newsletter until you unsubscribe from our service. In case of unsubscribing, we will delete your data as soon as possible.

9.6. If you are our business partners for which there is no defined legal retention period, we hold for the entire period of validity of the contract we have concluded with you. Upon termination of the contract, we delete your data within an additional period of 6 years from the termination of the contract (statute of limitations of 5 years, increased by 1 year period for deletion).

9.7. We store personal data that we process on the basis of our legitimate interest as long as our legitimate interest exists, and we delete it within a period of 1 year from the termination of our legitimate interest.

9.8. We retain personal data that we process on the basis of your consent as long as we have your consent. In case of withdrawal of consent, we delete them as soon as possible. If the consent is given for a certain period, then after the expiration of that period, we delete your data as soon as possible.

10. Your rights

10.1. In the event that you choose to exercise one or more of your rights below, the Company has the right to verify your identity, all for the purpose of protecting your personal information.

10.2. You exercise your rights for free. However, if you frequently (for example, less than 6 months have passed since your last request) or excessively (for example, requesting all your personal information in writing) request access to or transfer of your personal data, we have the right to ask you to pay our costs before carrying out such an action.

10.3. Access to your personal information
You have the right to ask us to confirm whether we process your personal data, as well as access to your personal data that we process. You can exercise the same right by sending your request to info@booandboobaby.com and stating “Respondent’s request” as the subject of the message. Upon receipt of the message, we will send you an acknowledgment of receipt of your request.

10.4. Correction of incorrect personal data
You have the right to request the correction of your incorrect personal data, as well as the right to supplement your personal data. You can exercise the same right by sending your request to info@booandboobaby.com and stating “Respondent’s request” as the subject of the message. Upon receipt of the message, we will send you an acknowledgment of receipt of your request.

10.5. Portability of personal data
You have the right to download and request the transfer of your personal data. You can exercise the same right by sending your request to info@booandboobaby.com and stating “Respondent’s request” as the subject of the message. Upon receipt of the message, we will send you an acknowledgment of receipt of your request.

10.6. Objection to the processing or handling of your personal data
You have the right to object to the processing of your personal data as well as to our way of handling your personal data in general. You can exercise the same right by sending your request to info@booandboobaby.com and stating “Respondent’s request” as the subject of the message. Upon receipt of the message, we will send you an acknowledgment of receipt of your request.

10.7. The right to complain to the Personal Data Protection Agency

At any time, you have the right to complain to the competent authority for personal data protection – the Agency for Personal Data Protection (www.azop.hr), regarding the processing and protection of your personal data.

X