SUPER A&A CONSULTING d.o.o. PRIVACY NOTICE

This privacy notice explains what to expect when Super A&A Consulting d.o.o., Trnsko 47a, Zagreb, OIB: 41393122971 (‘Super A&A Consulting’) collects your personal data when you use our services. Super A&A Consulting is committed to protecting your personal data whenever you engage with our services. Whenever you provide such information, we will use your data in accordance with all applicable data protection laws, including the General Data Protection Regulation (GDPR). Your data will be stored in a secure environment with limited access.

We promise to collect, use, and store your personal data in a secure manner.We promise to use your personal data transparently and only for specified purposes.We promise to inform you about how we use your data and who we may share it with.

What data do we collect about you?

The personal data we collect depends on the reason for collection. In most cases, it includes basic personal information such as:

• Full name, personal identification number (OIB), address, email, date of birth, signature, contact details, etc.

How will we use the information we collect?

Super A&A Consulting will use your personal data for several purposes, including:

• For pre-contractual actions necessary for submitting offers and concluding agreements.

• For the conclusion and fulfillment of contracts regarding the use of our products and services.

• To fulfill our legitimate business interests, while always considering your rights and interests.

• To fulfill legal obligations in accordance with applicable laws.

• To respond to your inquiries and complaints.

• To send you marketing communications about our products and services. We will only do this if you have provided clear consent. The legal basis for sending marketing messages is your explicit consent for your personal data to be used for such purposes. You always retain control over your data and may opt out of receiving further marketing communications in the same way you initially gave your consent.

Your data will be stored within our company and trusted third parties, except in cases where disclosure is required by law (e.g., to government bodies or law enforcement agencies).

Super A&A Consulting does not share personal data with third parties unless the individual (data subject) has given explicit consent, or if the disclosure is required by law.

Your personal data, such as name and address, may be shared with third parties such as delivery services or in cases involving credit/debit card payment processing or similar situations related to the purposes mentioned above. Our legitimate interest for such data sharing is to provide you with the best and most complete service possible. Since we are responsible for your personal data, we always ensure that your data remains protected and secure during transfer.

How long will we retain your data?

Your personal data will be stored for as long as necessary to fulfill legal obligations, contractual obligations, or for the purposes for which it was collected.

Personal data used for marketing communications will be retained for as long as your consent remains valid.

What rights do I have regarding my personal data?

According to the GDPR, you have the right to request:

• Access to your personal data by submitting a subject access request.

• Correction, deletion, or restriction of your data, where justified.

• **Data portability **

• **Right to object **

• **Right to lodge a complaint with a supervisory authority **

COOKIES

To ensure proper website functionality, improve site performance, and enhance your browsing experience, our website stores a small amount of information (cookies) on your device.

A cookie is a piece of information stored on your computer by a website you visit. Cookies typically save your preferences, such as preferred language or address. When you return to the website, your browser sends the stored cookies back to the website, allowing it to display content tailored to your preferences.

Cookies can store a wide range of information, including personal data (e.g., name or email address). However, this information can only be saved if you explicitly allow it. Websites cannot access data you did not provide, nor can they access files on your computer. Default cookie storage and sending activities are not visible to you. However, you can adjust your browser settings to accept or reject cookies, delete stored cookies automatically upon closing the browser, and more.

You have the right to disable cookies. Internet browsers are usually set to accept cookies by default, but you can adjust this in your settings.

Disabling cookies allows you to choose whether or not to permit cookie storage on your device. For instructions on cookie settings, choose your browser.

Please note: If you disable cookies, certain website features may not function properly.

Types of cookies we use:

**1. Essential cookies ** These cookies enable core functionality such as navigation and access to secure areas of the website. They do not require your consent.

**2. Analytical cookies (Google Analytics) ** We use Google Analytics to understand how visitors interact with our website (e.g., number of visits, visit duration, most viewed pages). Google Analytics uses cookies to collect this data, and user IP addresses are anonymized. These cookies are only activated once the user provides consent.

**3. Marketing cookies ** Meta Pixel allows us to track advertising effectiveness on Facebook and Instagram and display personalized ads. These cookies help us measure conversions and retarget visitors. They are also only activated after user consent.

Managing Cookies

Upon your first visit to our website, you will be shown a cookie notification with options to select which types of cookies you accept. You can change your preferences at any time by clicking on the “Cookie Settings” link at the bottom of the page.

You can also delete or disable cookies through your browser settings.

DATA SUBJECT RIGHTS

**Access to your personal data by submitting a subject access request ** Every data subject has the right to know whether their personal data is being processed, and if so, what data is being processed. They also have the right to information about the purpose of processing, legal basis, categories of personal data, data sharing with third parties, and retention period.

**Correction, deletion, and restriction of data processing, if justified ** Data subjects may request the correction, deletion, or restriction of their personal data, as well as the completion of incomplete personal data.

**Data portability ** The data subject has the right to transfer their personal data to another data controller without hindrance.

**Right to object ** Under EU law, every data subject has the right to object, based on their particular situation, at any time, to the processing of personal data relating to them, based on points (e) and (f) of Article 6(1) of the GDPR. To exercise this right, the data subject may contact the data controller at any time. You may also object to the processing of your data for direct marketing purposes, in which case your personal data will no longer be used for such purposes.

**Right to lodge a complaint with a supervisory authority ** You have the right to submit a complaint regarding any violation of your data protection rights to the competent authority:

**Croatian Personal Data Protection Agency (AZOP) ** Martićeva 14, 10000 Zagreb, Croatia

If you wish to exercise your rights related to personal data processing or believe that our processing is not compliant with data protection regulations, please contact us in writing at:

**Super A&A Consulting d.o.o. **Trnsko 47A, 10000 Zagreb, CroatiaOIB: 41393122971

Email: info@superaaconsulting.hr

You will be notified of any changes to this Privacy Policy on our website: [LINK]