HRANA TEC

Effective from May 2021

The following data protection information provides an overview of the collection and processing of your personal data.

Responsible handling of personal data is of particular importance to us and is taken as a given standard. If we receive personal data from you, we use or process it in accordance with the applicable national and European data protection regulations. Personal data, for the purpose of this notice, refers to all information related to your person.

The following data protection information gives you an overview of how we process your personal data and your rights under data protection law.

1. Controller

The controller is:

HRANA TEC d.o.o.
Ulica maršala Tita 107d
40000 Senkovec, Cakovec
Croatia
Tel: +385 40 638 612
E-mail: contact@hranatec.com

HRANA TEC d.o.o.
Ratarski put 33
Zemun 11080
Serbia
Tel: +381 11 316 3907
E-mail: info@hranatec.com

Source of Personal Data

  2. We process personal data that we receive from you during your visit to our websites or when you contact us.

3. Categories of Personal Data Processed

(1) When visiting our websites purely for informational purposes, we do not collect personal data except for the data your browser transmits to enable access to the site.

• Your IP address, which is truncated in its last segment.
• Remote host (name of the computer requesting the page), if transmitted by the network.
• Date, time, status, amount of data transmitted.
• The website from which you accessed the requested page (referrer), if transmitted by your browser.
• Product and version information of the browser used (user agent), if transmitted by your browser.

If your user account is also transmitted by the network, we do not store it.

This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically flawless presentation and optimization of its site – for this purpose, server log files must be collected.

(2) Your browser also stores so-called cookies. Cookies are small text files assigned to the browser you are using or stored on your device that provide certain information to certain parties (in this case, us). Cookies are used to make the website as user-friendly and efficient as possible.

This site uses the following cookies:

• Temporary cookies: Automatically deleted when you close your browser, including session cookies, which store a so-called session ID to associate various browser requests with a common session. They are deleted when you log out or close the browser.
• Persistent cookies: Automatically deleted after a specified period, which may vary. You can delete them at any time in the security settings of your browser.

The collection of this data is based on Article 6(1)(a) or (f) GDPR.

(3) In addition to purely informational use of the site, we offer various services that you can use if interested. For this, you are usually required to provide additional personal data, which we use to provide the respective service. These data are collected based on the legal basis indicated for each individual service.

4. Contact Form

When you contact us via email or the contact form, your email address and, if provided, your name, address, and telephone number will be stored so that we can respond to your inquiries.

The collection, processing, and use of data relate to the purposes of initiating and performing contracts and serve to protect our legitimate business interests in relation to consulting and supporting our customers and interested parties, as well as for creating products tailored to needs.

Your data (company, name, address, interest in the product) may be occasionally used to send you information about our products by mail. Advertising via telephone or email will only be sent if you have expressly consented to this.

The processing of your personal data within the contact form is based on your consent under Article 6(1)(a) GDPR.

5. Purposes of Processing Personal Data and Legal Basis for Processing

We process your personal data in accordance with applicable national and European data protection laws. Processing is lawful if at least one of the following conditions is met:

a. Consent (Article 6(1)(a) GDPR)
If you have given us consent to process your personal data for specific purposes (e.g., use of cookies, contact form, marketing), this processing is lawful based on your consent. Consent may be withdrawn at any time with future effect.

b. For the performance of contractual obligations or the implementation of pre-contractual measures (Article 6(1)(b) GDPR)
To fulfill contractual obligations or to implement pre-contractual measures at your request, we process personal data for contract execution. The purposes of data processing result from the specific contractual relationship, including needs analyses and consulting. Details are provided in the contractual documents and conditions.

c. Due to legal obligations (Article 6(1)(c) GDPR)
Process-Pack Germany is subject to various legal obligations (e.g., commercial and tax record-keeping under German commercial and tax law). The purposes of processing include fulfilling control and reporting obligations and risk assessment within the company and group.

d. Within the framework of legitimate interests (Article 6(1)(f) GDPR)
If necessary, we process your data beyond contract fulfillment to protect legitimate interests of ours or third parties. Examples include:

• Ensuring IT security and IT system operation,
• Enforcing legal claims and defense in legal disputes,
• Preventing and investigating criminal offenses.

6. Categories of Recipients of Personal Data

We carry out individual processes and services mentioned above through carefully selected service providers engaged in accordance with data protection requirements. These external service providers are obliged to act according to our instructions and are regularly monitored. They will not transfer your data to third parties.

As for the transfer of data to other recipients, we will forward information about you only if required by law, if you have given consent, or if we are authorized to do so. If these conditions are met, recipients of personal data may include:

• Public authorities and institutions (e.g., tax authorities, law enforcement) in the case of legal or official obligations,
• Other companies or comparable institutions to which we transfer personal data to carry out the business relationship with you (e.g., network operators, credit agencies),
• Other companies within the group (e.g., for payment transaction processing or risk management due to legal obligations).

7. Intention to Transfer Personal Data to Third Countries or International Organizations

Active transfer of personal data to a third country will only take place if explicitly indicated as part of the above services and if the conditions of Articles 44 et seq. GDPR are met. A third country is a country outside the European Economic Area (EEA) where GDPR is not directly applicable. For the United States, the European Commission has not issued an adequacy decision under Article 45(1) GDPR.

8. Criteria for Determining the Period of Data Retention

The criteria for determining the storage period are based on the purpose of processing and statutory retention periods. If the data are no longer required for fulfilling contractual or legal obligations, they are regularly deleted, unless their – temporary and possibly limited – further processing is necessary for the following purposes:

• Compliance with data retention obligations under commercial and tax law: this includes the German Commercial Code (HGB) and German Tax Code (AO), which prescribe retention and documentation periods of up to 10 years,
• Preservation of evidence under statutory limitation provisions: according to §§ 195 et seq. of the German Civil Code (BGB), the regular limitation period is 3 years, but in special cases up to 30 years.

9. Data Protection Rights

You may request information about stored data, their purpose, or their origin at any time. You may also request the blocking, correction, or deletion of your personal data at any time. The corresponding request for correction, blocking, or deletion of personal data should be addressed to:

FoodLine System BV, Marconiweg 6, 3899 BR Zeewolde, Netherlands, Tel.: +31 (0)36-535 9420, E-Mail: info@foodlinesystem.nl

HRANA TEC d.o.o., Ulica maršala Tita 107d, 40000 Šenkovec, Čakovec, Croatia, Tel: +385 40 638 612, E-Mail: contact@hranatec.com

HRANA TEC d.o.o., Ratarski put 33, Zemun 11080, Serbia, Tel: +381 11 316 3907, E-Mail: info@hranatec.com

All requests for information, correction, blocking, or deletion of data, as well as withdrawal of consent for the collection, use, or processing of data, should be sent to these addresses. You also have the right to lodge a complaint with the data protection supervisory authorities.

You may withdraw your consent for the processing of personal data at any time with future effect. This also applies to the withdrawal of consents granted before the GDPR came into effect, i.e., before May 25, 2018.

You have the right to object to the processing of your personal data at any time for reasons relating to your particular situation, which is carried out based on Article 6(1)(f) GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves to establish, exercise, or defend legal claims.

An objection may be submitted without formalities and addressed to the contact addresses listed above.

10. Obligation to Provide Data and Possible Consequences of Non-provision

Within our business relationship, you must provide personal data necessary to establish and execute the business relationship and fulfill related contractual obligations, or which we are legally obliged to collect. Without this data, we will generally not be able to conclude or execute a contract with you.

11. Existence of Automated Decision-making Including Profiling

For the establishment and execution of the business relationship, we generally do not use automated decision-making as defined in Article 22 GDPR. If we apply this procedure in individual cases, you will be specifically informed about this, to the extent required by law.

12. Data Security

We protect your data using modern security systems and comply with data protection and security regulations under GDPR.

We maintain up-to-date technical measures to ensure data security, particularly to protect your personal data from risks during data transmission and from unauthorized access by third parties. These measures are adapted to the current state of technology.

Online forms on our site are transmitted with SSL encryption to protect the data you enter. However, we cannot guarantee that the information transmitted will not be read by third parties during transmission. Therefore, you should not send passwords, credit card numbers, or other information you wish to keep confidential.