With this privacy statement, the company regulates rights and obligations in accordance with Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 on the protection of individuals in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/ EC (General Data Protection Regulation – hereinafter: “Regulation”), the Law on the Implementation of the General Data Protection Regulation (Official Gazette 42/18), the Electronic Communications Act (Official Gazette 76/22) and other positive regulations governing data protection personal data.

Manager of personal data processing: Mom`s pants d.o.o. d.o.o. with headquarters in Zagreb, Gajeva 44, OIB: 73688520835
                                                                           Contact: info@momspants.com

Personal data protection officer:            Jelena Djokić

According to the Regulation, personal data are all data relating to an individual whose identity has been determined or can be determined (“the respondent”). An identifiable individual is a person who can be identified directly or indirectly, in particular with the help of identifiers such as name, identification number, location data, online identifier or with the help of one or more factors inherent to physical, physiological, genetic, mental , economic, cultural or social identity of that individual.

Personal data that we collect in order to provide you with the best service: first and last name of the respondent, personal identification number (OIB), telephone number and/or mobile number, e-mail address, name of the user account/profile, address of the respondent and address for delivery of the order , information on the bank account (card payment for goods and return of funds).

Persons under the age of 18 are not allowed to use the website of Mom`s pants d.o.o. we do not collect or process their data. If it is established that the minor’s data were collected without parents or guardians, they are deleted immediately upon learning.

Other data that is collected automatically when accessing and using the site, regardless of the use of the services offered:

• IP-address, date and time of access to services
• data about the device accessed (model, hardware, software, operating system, internet browser, and language settings).
• Information about our services that you have used and in what way,
• If you access our pages via a mobile device, we collect data about the device manufacturer, the type of device and the operation of the application,        that is, about the difficulties of using the application on some devices so that they can be improved
•  Cookies – only if you have given permission for them (the same is explained in detail in the Cookie Statement)

The legal basis for the collection of the said personal data of the respondent is contained in the applicable legal rules, the express and unequivocal consent of the respondent and the contractual relationship between the respondent and the data controller.

All personal data of respondents are collected and processed lawfully, fairly and transparently with respect to the respondent.

The purpose of processing and collecting your personal data:

• creating a profile on the official website of the Mom`s pants d.o.o. web store.
• processing and delivery of your order • responding to your inquiries regarding the products we offer
• processing of your complaints on goods purchased in the web store
• return of goods and termination of contract
• regulation of payment and refund methods
• replacement of purchased goods

We process the collected data, as well as the data obtained through the provision of services, only for the purpose for which they were given and for which we received your consent.

We do not make the personal data we have collected about the subject available to unrelated third parties. In order to fulfill our obligation to you and provide you with the requested services, we make the data available to our business partners. Our business partners are the physical stores of Mom`s pants d.o.o., banks through whose services we enable card payments and refunds (online payment service) and delivery services (e.g. GLS, Hrvatska pošta, Overseas Trade Co Ltd). Delivery services are authorized to use your data exclusively for the purpose of delivering an individual order.

Our business partners are obliged to maintain confidentiality within the framework of the contractual relationship and to act conscientiously with your personal data that we have passed on to them and to take measures to protect it in accordance with applicable legal regulations.

We can make your personal data that we process available to third parties only in cases of justified request by the competent authority or in case of fulfillment of a legal obligation.

Your collected personal data on the website of Mom`s pants d.o.o. they are not transferred to third countries or international organizations and are used only for the purposes for which they were given.

We store your personal data for the period of time that is necessary to achieve the legitimate and lawful purposes for which they were collected and processed. Exceptionally, data can be stored for a longer period, if the valid and applicable regulations and provisions of the Regulation specify a longer period.

Each respondent whose personal data we collect and process exercises the rights that belong to him based on the provisions of the Regulation and other applicable legal regulations.

• the right to transparent information, communication and modalities for exercising the rights of respondents
• the right to information about the processing of personal data
• the right to access personal data
• the right to data correction
• the right to delete personal data
• the right to limit the processing of personal data
• the right to portability of personal data
• the right to object to the processing of personal data and
• the right to object to automated individual decision-making, including profiling
• the right to withdraw consent

a) The respondent’s right to transparent information, communication and modalities for exercising the respondent’s right

This right includes the application of plain language and transparency in the collection and processing of data, for the data subject this implies that information about the processing of personal data will be readily available, in written form or, if appropriate, in electronic form, on the website. If requested by the data subject, the information they can provide orally, provided that the identity of the respondent has been established by other means.

b) The right of the respondent to be informed about the processing of personal data

The data subject must be provided with information about the data controller and his contact details, the data protection officer (if applicable) and his contact details, what data is collected, what is the purpose and legal basis of the data processing, how long the collected data is kept and who is the recipient of the data, if the collected data is transferred outside the European Union. Also, the respondent must be aware of the fact that he can request access to personal data from the controller and their correction or deletion, restriction of data processing and also objection to processing, which includes withdrawal of consent for data processing, if given. In addition to the above, the respondent must be informed that he has the right to file a complaint with the competent authority.

c) Right of access

Each respondent has the right to access his/her personal data that is collected and processed about him/her and may request detailed information, especially on the purpose of processing, on the type/categories of personal data that are processed, including insight into his/her personal data, on recipients or categories of recipients, and about the expected period in which personal data will be stored. Access to personal data can be limited only in cases where this is prescribed by European Union law or national legislation, i.e. when such a limitation respects the fundamental rights and freedoms of other persons.

d) Right to rectification

The respondent has the right to obtain from the controller the correction of inaccurate personal data relating to him without undue delay. Taking into account the purposes of the processing, the respondent has the right to supplement incomplete personal data, including by providing an additional statement. For example: every respondent can ask for correction of the address of residence or residence.

e) The right of the respondent to delete personal data

Every respondent has the right to ask the controller to delete his personal data if any of the following assumptions are met:

• collected personal data are no longer necessary in relation to the purpose for which they were collected or processed;
• the consent for the processing and collection of data on which the processing is based has been withdrawn and there is no other legal basis for the processing;
• an objection has been filed against data processing and the controller has no stronger legitimate reasons for processing;
• personal data were illegally processed;
• personal data must be deleted in order to comply with a legal obligation under Union law or the law of the country to which the controller is subject;
• personal data were collected in connection with the offer of information society services. To exercise your right, please contact the data controller in writing by e-mail.

f) The right of the respondent to limit the processing of personal data

Each respondent exercises the right to limit the processing of personal data if: he disputes their accuracy, if the processing is illegal, and opposes their deletion, if the data must be kept in order to fulfill or defend the legal requirements of the respondent, and if an objection to the processing of personal data has been lodged.

g) The right to object

At any time, you can submit a complaint to the controller regarding the processing of personal data, if they are processed for the purposes of performing tasks of public interest or in the exercise of your official powers, based on legitimate interest or for direct marketing purposes. The data controller may no longer process personal data unless the data controller proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the data subject or for the purpose of establishing, exercising or defending legal claims, and if it is an objection against data processing for the purposes of direct marketing, personal data may no longer be processed in such Also, the right to object also applies to automated individual decision-making, including the creation of profiles.

h) The right to withdraw consent

The subject has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The respondent withdraws consent for data processing by deleting his profile on the Mom`s pants d.o.o. page, or unregistering. He can continue to use it as a guest. After withdrawing consent and using the site as a guest, the same will no longer have access to all services offered by the Mom`s pants d.o.o. site. Withdrawal of the Respondent’s consent leads to the impossibility of continuing to use the site if the collected personal data is necessary for carrying out certain site activities. After the respondent has deleted his profile, i.e. unregistered from the site, his personal data are anonymized in such a way that it is no longer possible to connect them to the person they refer to.

In order for the users of our services to be informed in time about all our new activities, services and offers, the company Mom`s pants d.o.o. conducts marketing activities such as sending newsletters, promotional messages and notifications.

We carry out the aforementioned marketing activities only if you have given us your consent or if we have a legitimate interest. If the marketing activity is carried out on the basis of your consent, you can withdraw your consent at any time and our marketing activities, in the part of the withdrawn consent, will stop towards you.

In the event that it is established that a violation of personal data protection has been committed, the data controller shall notify the competent supervisory body, the Personal Data Protection Agency, of the violation without delay, and no later than 72 hours after becoming aware of the violation, unless it is likely that the violation personal data cause a risk to the rights and freedoms of individuals. The supervisory body is notified through a report that contains all prescribed parts in accordance with the Regulation.

About the violation of personal data for which the company Mom`s pants d.o.o. determines that it represents a high risk for the rights of individuals, it will inform the respondent without delay. in certain cases, in accordance with the Regulation, it is not necessary to inform the respondent about the violation.

Company Mom`s pants d.o.o. advises every user of its services to keep their personal data safe and to periodically change the password used during registration/login to the site in order to prevent unwanted personal data breaches.

Given that your privacy and security are extremely important to us, Mom`s pants d.o.o. as the manager of personal data processing, he takes care that your data is processed in accordance with applicable regulations and that appropriate technical and organizational measures are applied to their processing, security and protection. When processing data, only those data are processed that are necessary to achieve the purpose of processing, with the highest level of privacy protection. Also, the collected personal data are kept for a limited time and can only be accessed by authorized persons and are not automatically, without individual intervention, available to an unlimited number of people.

All authorized persons who have access to the personal data of the respondents are familiar with the rules for the protection of personal data, and are obliged to preserve the business secrets and privacy of all users of the services of the company Mom`s pants d.o.o.. With all our partners who provide the company Mom`s pants d.o.o. provide certain services, agreements on the protection of personal data are concluded, so that there is no unauthorized use of personal data or any other violation of the rights of the respondents. We regularly analyze and improve all the measures we apply in order to continuously maintain the highest level of protection of your personal data and prevent possible violations.

Company Mom`s pants d.o.o. in its business, in order to present its services to potential and existing users, it uses social networks belonging to the Meta Platforms, Inc. group: Facebook and Instagram, where it has open business profiles. When interacting on the mentioned platforms, the user’s personal data is collected and processed, but not stored.

Persons who, by the company Mom`s pants d.o.o. authorized to manage accounts on the mentioned platforms, have access to your messages and posts intended for the company Mom`s pants d.o.o., and store them only if they are required to do so by law.

Every user visit to the profiles on the mentioned platforms of the company Mom`s pants d.o.o. provides insight into attendance statistics and demographic data. The above statistics do not contain personal data, but enable the creation of better and more interesting content for the end user of our services. If you use platforms belonging to the Meta Platforms, Inc. group: Facebook and Instagram to interact with Mom`s pants d.o.o. company pages. , said platforms transfer your personal data to the United States of America. In this case, they act as data controllers and we recommend that you read their privacy policies, which are available on their pages.

*********************

By clicking during registration, the Respondent accepts this Privacy Statement and confirms that he has read and understood it in its entirety and that he agrees to the collection, processing and sharing of personal data in the manner and to the extent determined by the Privacy Statement itself.

Company Mom`s pants d.o.o. reserves the right to modify this privacy statement at any time by publishing the amended text of the Privacy Statement on its site, accordingly, please note that it is necessary to periodically review the Privacy Statement to determine whether it meets your needs. If you do not agree with the same, we advise you to delete your profile or unregister from the site.