The Controller

• Rigor Imperium j.d.o.o. (dirty old SHOP)
• Tratinska 18, 10000 Zagreb, Croatia
• VAT: HR55507566304
• Data protection contact:
• Phone: 01/5573888
• e-mail: shop@dirtyoldempire.com

The Controller is dedicated to protecting your personal data and your personal data is therefore processed in complete accordance with the principles of the European Union Data Protection Regulation 2016/679.

This Declaration applies to data protection and the use of cookies on the web site https://dirtyoldempire.com.

This Declaration enters into force from the date of its publication. About any significant change to this Declaration you will be informed on our homepage of our website or via e-mail.

We only collect data that is necessary for the purpose of processing and your data is adequately protected against any abuse and loss.

Hereby we would like you to inform you about:

• what personal data we collect and how, for what purposes, on what legal basis, how long do we store them
• the use of cookies
• how do we protect your data
• with whom we share your data and for what purposes
• what are your legal rights and how can you realize them

Our services are intended for persons aged 16 or over. Should we determine that we collect data from persons under the age of 16, we will remove them from our system.

What personal data do we collect and how, for what purposes, on what legal basis, how long do we store them

1. When you access and use our website we automatically collect the following information: the IP address you accessed our pages from, the address of the web page you came from to our web pages, the time and the duration of access, pages you visited on our website, which browser you use and cookies.

These data we use for the following purposes:

• For the purpose of analyzing how the visitors use our web pages which enables us to improve them, so the visitors can use the pages properly.
  • The legal basis for processing is the legitimate interest of the controller.
  • If you’ve accepted the cookie setup, we store cookies to your computer, which allows us to recognize your computer on your next visit.
  • You can always restrict the cookie setup as well as their processing, and here you can see how.
  • We store your data for 2 years, but if you delete a cookie, we can no longer identify you.
• For the purpose of protecting the website and fixing any website malfunction
  • The legal basis for processing is the legitimate interest of the controller.
  • We share this information with the provider of IT hosting services and site maintenance services
  • Data records are stored on server for not longer than 2 years

2. When submitting an inquiry using a web form on our website directly from you we gather: name and surname, e-mail address and the inquiry content.

We use this data:

• For the purpose of providing information and communication related to your inquiry
  • The legal basis of processing is the legitimate interest of the controller.
  • The data is stored for 2 years.

Your inquiry can be related to provision of services for which we need additional information. If that is the case, we will inform you about the data protection concerning the processing necessary for such services.

3. When sending an inquiry by e-mail, we collect directly from you: the e-mail address and the information you enter in the inquiry.

• We use this data to provide you with information and communication related to your request
  • The legal basis of processing is the legitimate interest of the controller.
  • The data is stored for 2 years.

4. When you send a complaint to our service, we collect directly from you: first and last name, e-mail address, country address and telephone number.

• We use this data to resolve a written complaint about our service
  • We use this information to resolve a written complaint about our service
  • The data is stored for 2 years.

5. When registering for the use of our services, we collect directly from you the first and last name, e-mail address, telephone number, address, OIB.

Registration is not necessary for purchase, and we use the information quick and easy purchase and payment, access to your archive and order status, and storage of shipping and billing addresses:

• The legal basis of processing is legitimate interests
• The information is stored until your request for account closure and deletion, in accordance with legal obligations

6. When making a purchase, we collect directly from you the first and last name, e-mail address, telephone number, shipping address, if you are a registered user, we withdraw information from your user profile.

This information is mandatory and we are unable to provide you with the service unless we collect it. We use this data:

We use this data:

• For the purpose of purchase
  • The legal basis for processing is a contract.
  • The data is stored until your request for deletion and is deleted after the expiry of the statutory storage period (2 years).
• For the purpose of delivery
  • The legal basis for processing is a contract.
  • The data is stored until your request for deletion and is deleted after the expiry of the statutory storage period (2 years).

If you enter information that is not yours for delivery, you are obliged to notify the data owner and do so with his / her consent.

7. When making an online payment, the information of the payment card holder and necessary to make the authorization and payment. This information is collected and processed directly by the online payment service provider, and the processing manager does not have access to this information.We do not process profiling and profile-based automated decision making.
8. When you sign up for our newsletter we collect directly from you your e-mail address
   We use this data:
   • For the purpose of providing information and communication related to your request.
     • The legal basis of the processing is the consent you provide at check-in and can be withdrawn at any time.
     • We share this information with a MailChimp provider and are located in the US.
     • The data is stored until the withdrawal of the privilege.

Use of cookies and tracking technologies

On our websites we use cookies and tracking technologies in order to assure the proper functioning of our website and to provide easier handling, to analyze the use and the page performance as well as to show you primarily those ads that might interest you.

1. What are cookies

Cookies are a small piece of data that we store on your computer when you visit our web site and they enable us to recognize you as you come back to our site again. They contain a very small amount of data and do not contain any of the personal information you submit when using services on our website. Cookies can be stored temporarily (used only during one sigular visit to the website) or permanently, which means that they remain stored after you visit a website and used for later visits to the same website.

2. Deleting and blocking the cookies

When you visit our website we ask of you a permission to store the cookies on your computer. In case you decline it we store on your computer only those cookies that are necessary for the website to function correctly. If you do not want to accept cookies and do not agree to use them, you can delete all cookies or block them completely in your browser and the instructions on how to do it in your browser can be found under the following links:

• Google Chrome
• Mozila Firefox
• Safari
• Internet Explorer
• Opera

If you delete or disable cookies we cannot assure the proper functioning of some parts of our web pages.

3. Third party cookies

Analytical
Service provider: Google Analytics

• Privacy Policy can be found here
• The processing can be limited here

Targeted third-party advertising
Service provider: Google Adwords

• Privacy Policy can be found here
• The processing can be limited here

Service provider: Facebook (Facebook Pixel)

• Privacy Policy can be found here
• Facebook gathers information about your interests and connects them with your data saved on your Facebook profile. The processing can be limited here

Information about how you can turn off the cookies for different services can be found on:

• http://www.allaboutcookies.org
• http://www.youronlinechoices.eu

How do we protect your data?

We continuously work on the appropriate technical, organizational and personnel improvements in order to protect the collected personal data and to prevent unauthorized access to personal data or their loss. Access to the website is secured from the theft of the data, with an appropriate level of encryption and protected by a secure protocol (HTTPS). The data on computer servers is stored in a controlled, secure environment, protected from unauthorized access and misuse. The access to the data is granted only to the authorized controller and to the authorized personnel  of the service provider. All persons given access to your personal data are obligated by their contracts to maintain confidentiality of the data and to provide adequate protection.

With whom do we share your data and for what purposes?

The Controller cannot distribute, rent or in any other way share your personal data with third parties, except for the purposes of processing listed in Data Protection Declaration. The data is shared with the providers of the IT services and of the services that analyze the visits and the use of the website. The data we share are only those necessery for third party services and it is the third party legal obligation to use them only for purposes stated in the legal agreement.

What are your data subject legal rights and how can you realize them?

You have the right to request access to your personal data, to change and delete your personal data or to limit their processing. You also have the right to file a complaint. In case of data processing that is legally based on Consent,  you can withdraw your Consent at any time, partially or completely, but bear in mind that the withdrawal of Consent does not affect the lawfulness of the processing of personal data until the withdrawal enters into effect. In the event of a data erasure request we will inform you if we are obligated to store the data, which data we are unable to delete, and what is the deadline and legal basis for data retention. You can accomplish all your rights deriving from the Decree by submitting a request for exercising rights to shop@dirtyoldempire.com The Controller will respond to your request within a month of receiving it, and the deadline may be extended for up to two months, depending on the complexity of the request. If we are unable to confirm that you are the owner of the personal information that your request relates to, we will not be able to meet your request. If you feel that your rights have been violated, you have the right to file a complaint with the supervisory body – The Personal Data Protection Agency. For any additional information concerning the data protection you can always contact the Controller using the contact information listed on our web site.

Publishing date: 1.3.2018.