Privacy Policy TERRA ROSSA

Introduction

We (“we”, “us”, “our”) take the protection of the data of users (“users” or “you”) of our website and/or mobile app (the “website” or the “mobile app”) very seriously and are committed to protecting the information that users provide to us in connection with the use of our website and/or mobile app (together: “digital assets”). Furthermore, we are committed to protecting and using your data in accordance with applicable law.

This privacy policy explains our practices regarding the collection, use, and disclosure of your data through the use of our digital assets (the “services”) when you access the services via your devices.

Please read this privacy policy carefully and make sure that you fully understand our practices regarding your data before using our services. If you have read this policy, fully understood it, and do not agree with our practices, you must stop using our digital assets and services. By using our services, you acknowledge the terms of this privacy policy. Continued use of the services constitutes your acceptance of this privacy policy and any amendments to it.

In this privacy policy you will learn:

How we collect data
What data we collect
Why we collect this data
Who we share the data with
Where the data is stored
How long the data is retained
How we protect the data
How we deal with minors
Updates or changes to the privacy policy

What data do we collect?

Category: Always

Below is an overview of the data we may collect:

Non-identified and non-identifiable information that you provide during the registration process or that is collected through the use of our services (“non-personal data”). Non-personal data does not allow conclusions to be drawn about the identity of the person from whom it was collected. The non-personal data we collect mainly consists of technical and aggregated usage information.

Individually identifiable information, meaning any information that can identify you or could reasonably be used to identify you (“personal data”). Personal data that we collect through our services may include information requested from time to time such as names, email addresses, addresses, phone numbers, IP addresses, and more. If we combine personal data with non-personal data, the combined data will be treated as personal data as long as it remains combined.

How do we collect data?

Category: Always

Below are the main methods we use to collect data:

We collect data when you use our services. When you visit our digital assets and use the services, we may collect, record, and store usage data, sessions, and related information.
We collect data that you provide to us directly, for example when you contact us through a communication channel (e.g., sending an email with a comment or feedback).
We may collect data from third-party sources as described below.
We collect data that you provide when you log in to our services via a third party such as Facebook or Google.

Why do we collect data?

Category: Always

We may use your data for the following purposes:

To provide and operate our services
To develop, customize, and improve our services
To respond to your feedback, requests, and inquiries and provide assistance
To analyze demand and usage patterns
For other internal, statistical, and research purposes
To improve our data security and fraud prevention capabilities
To investigate violations and enforce our terms and policies and comply with applicable law, regulations, or governmental orders
To send you updates, news, promotional materials, and other information related to our services. For promotional emails, you may choose whether to continue receiving them. If not, simply click the unsubscribe link in those emails.

Who do we share this data with?

Category: Always

We may share your data with our service providers in order to operate our services (e.g., storing data via third-party hosting services, providing technical support, etc.).

We may also disclose your data under the following circumstances:

to investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing
to establish or exercise our rights of defense
to protect our rights, property, or personal safety, and the safety of our users or the public
in the event of a change of control of our company or one of our affiliated companies (e.g., merger, acquisition, or purchase of substantially all assets)
to collect, store, and/or manage your data via authorized third-party providers (e.g., cloud providers) where reasonable for business purposes
to work with third parties to improve your user experience

For the avoidance of doubt, we may transfer, share, or otherwise use non-personal data with third parties at our own discretion.

Category: User has a blog or forum

Please note that our services allow social interactions (e.g., publicly posting content, information and comments, or chatting with other users). We would like to remind you that any content or data you provide in these areas may be read, collected, and used by others. We advise against posting or sharing information that you do not want to make public.

If you upload content to our digital assets or otherwise provide it when using a service, you do so at your own risk. We cannot control the actions of other users or members of the public who may access your data or content.

You acknowledge that copies of your data may remain accessible even after deletion on cached or archived pages, or if other users have copied or stored your content.

Cookies and similar technologies

When you visit or access our services, we authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services (“tracking technologies”).

These technologies may allow third parties to automatically collect your data to improve the navigation experience on our digital assets, optimize their performance, and provide a personalized user experience, as well as for security and fraud-prevention purposes.

To learn more, please read our cookie policy.

Category: User is NOT connected to an advertising service

Without your consent, we will not share your email address or other personal data with advertising companies or advertising networks.

Category: User is connected to an advertising service (e.g., Campaign Manager or Facebook Ads)

We may deliver advertisements through our services and digital assets (including websites and applications that use our services). These advertisements may be tailored to you, for example based on your recent browsing behavior across websites, devices, or browsers.

To deliver these advertisements, we may use cookies, JavaScript, web beacons (including clear GIFs), HTML5 local storage, or other technologies. We may also use third parties such as network advertisers to display targeted ads.

Third-party ad networks, advertisers, sponsors, or website traffic measurement services may also use cookies or similar technologies to measure advertising effectiveness and customize advertising content for you. These third-party technologies are governed by their own privacy policies, not this one.

Where do we store the data?

Category: Always

Non-personal data

Please note that our companies as well as our trusted partners and service providers are located worldwide. For the purposes explained in this privacy policy, we store and process all non-personal data we collect in various jurisdictions.

Personal data

Personal data may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions where necessary for the proper provision of our services and/or as required by law.

How long do we retain the data?

Category: Always

We retain collected data for as long as necessary to provide our services, comply with legal and contractual obligations, resolve disputes, and enforce our agreements.

We may correct, supplement, or delete inaccurate or incomplete data at any time at our own discretion.

How do we protect the data?

Category: Always

The hosting provider for our digital assets provides us with the online platform through which we offer our services. Your data may be stored through our hosting provider’s data storage, databases, and general applications. They store your data on secure servers behind a firewall and provide secure HTTPS access to most areas of their services.

Category: User accepts payments/eCommerce

All payment methods offered by us and our hosting provider comply with the PCI-DSS (Payment Card Industry Data Security Standard) developed by the PCI Security Standards Council, which includes brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information.

Important note

Despite the measures we and our hosting provider take, we cannot guarantee absolute protection and security of any data that you upload, publish, or otherwise share with us or others.

Therefore, we ask you to set strong passwords and avoid sending confidential information that could cause you significant harm if disclosed. As email and instant messaging are not secure forms of communication, please do not share confidential information through these channels.

How do we deal with minors?

Category: User does NOT collect data from minors

The services are not intended for users who have not reached the legal age of majority. We do not knowingly collect data from children. If you are not of legal age, you should not download or use the services or provide us with information.

We reserve the right to request proof of age at any time. If we learn that a minor is using our services, we may block or suspend access and delete any data associated with that user.

If you believe that a minor has provided us with data, please contact us.

Use of personal data

We use your personal data only for the purposes set out in this privacy policy and only when we believe that:

the use of your personal data is necessary to perform or enter into a contract (e.g., to provide the services or customer support);
the use is necessary to comply with legal or regulatory obligations; or
the use is necessary to support our legitimate business interests, provided that this is done proportionately and respects your privacy rights.

Rights for EU residents

If you reside in the EU, you may:

request confirmation whether personal data concerning you is processed
access your stored personal data and additional information
receive personal data you provided in a structured, commonly used, machine-readable format
request correction of your personal data
request deletion of your personal data
object to the processing of your personal data
request restriction of processing
file a complaint with a supervisory authority

Please note that these rights are not absolute and may be subject to legitimate interests and regulatory requirements.

When providing services, we may transfer data across borders to affiliated companies or third parties worldwide. By using the services, you consent to the transfer of your data outside the EEA.

If you are located in the EEA, we will only transfer personal data outside the EEA when adequate protection exists. We take appropriate contractual measures to ensure proper safeguards.

California Consumer Privacy Act (CCPA)

If you are a California resident using our services, you may have the right under the California Consumer Privacy Act (CCPA) to request access to or deletion of your data.

We do not sell personal data of users for the purposes of the CCPA.

Updates or changes to the privacy policy

We may revise this privacy policy from time to time. The version published on the website is always the current one. We encourage you to review it regularly.

Continued use of the services after updates constitutes acceptance of the changes.

Contact

If you have questions about the services or the data we collect and how it is used, please contact us:

OPG Bellani, Vl. Stelio Bellani
Vergerijev Uspon 9

5222 Labin

Croatia

info@terra-rossa.hr

Disclaimer

The information contained herein does not constitute legal advice and should not be relied upon as such. Legal requirements may vary depending on jurisdiction.

To ensure compliance with applicable laws, we strongly recommend seeking professional legal advice tailored to your specific situation.