SIGA LLC for Production, Trade and Export-Import, headquartered in Varaždin, Međimurska ulica 12, registered with the Commercial Court in Varaždin, registration number (MBS): 070015617, OIB: 11711059133 (hereinafter: the Company), respects your privacy and is committed to protecting your personal data. Any personal data collected through the use of the Website and Webshop will be processed solely for the intended purpose and limited to what is necessary to fulfill that purpose. This Privacy Policy describes how we collect, use, disclose, and protect the data you provide when using our services.

By using our services and website, you confirm that you have read, understood, and agreed to the terms and conditions of this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our services. This Privacy Policy may be updated from time to time, with the latest version published on our website. Continued use of our services after any changes to the Privacy Policy constitutes your acceptance of such changes.

We may update this Privacy Policy at any time. When we do, we will publish the revised version on this page, unless a different form of notification is required under applicable laws. Your continued use of our services or provision of personal data after the updated Privacy Policy is posted—or communicated by other means—will be considered your acceptance of the revised Policy.

1. Data Controller: SIGA LLC for Production, Trade and Export-Import, headquartered at Međimurska ulica 12, Varaždin, registered with the Commercial Court in Varaždin under company registration number (MBS): 070015617, OIB: 11711059133.

               Contact data:           42000 Varaždin, Međimurska ulica 12

                                            siga@siga.hr

                                            https://siga.hr/

                                            phone: +385 42 234 100

2. Purpose of Processing: The provision of services within the scope of the Company's business activities.

Legal basis for processing:    Performance of a contract; provision of information related to received inquiries; collection of data for employment purposes (collection of unsolicited job applications).

The necessity of providing personal data:  Providing personal data is not a legal obligation of the data subject, but it is necessary for the fulfillment of the purpose of processing; without providing personal data, the order received from the data subject cannot be executed.

Personal data we collect (depending on the legal basis): Full name, email address, phone number, company you work for, job position, date of birth, occupation, educational background, employment with another employer, work experience prior to employment with the Company.

3. Use of Cookies

On official websites https://siga.hr/ are used cookies — text files that the web server, through which the Internet service provider (ISP) delivers the website, places on the user’s computer.

Cookies are created when the browser on the user’s device loads the visited website, which then sends data to the browser and creates a text file (cookie). The browser retrieves and sends the cookie back to the website’s server when the user returns to it.

On our website, are used technical cookies (essential cookies, cannot be disabled) which are necessary for the functioning of the website.

4. What are your rights regarding the processing of personal data:

Right to access personal information: You have the right to access your personal data that we process about you and may request detailed information, particularly regarding the purpose of the processing, the type/categories of personal data being processed including access to your personal data, the recipients or categories of recipients, and the expected period for which the personal data will be stored. Access to personal data may be restricted only in cases prescribed by Union law or our national legislation, or when such restriction respects the essence of the fundamental rights and freedoms of others.

Right to rectification of personal data: You have the right to request correction or completion of your personal data if your data is not accurate, complete, or up to date. To do so, please send your request to us as the data controller in writing, including by electronic means of communication.

Please note that in your request, it is necessary to specify exactly what is inaccurate, incomplete, or outdated, and in what way it should be corrected. Additionally, please provide any supporting documentation to substantiate your claims.

Right to erasure (Right to be forgotten): You have the right to request the deletion of your personal data relating to you if one of the following conditions is met:

• Your personal data is no longer necessary in relation to the purposes for which we collected or processed it;
• You have withdrawn consent on which the processing is based, and there is no other legal ground for the processing;
• You have objected to the processing of your personal data in accordance with Article 21(1) of the General Data Protection Regulation, and there are no overriding legitimate grounds for the processing;
• The personal data have been unlawfully processed;
• Personal data must be deleted to comply with a legal obligation under Union law or the law of the Member State to which the data controller is subject.

Exceptions related to the exercise of the aforementioned right are provided for in Article 17, paragraph 3 of the General Data Protection Regulation (GDPR):

These rights do not apply to the extent that the processing is necessary for:

• for the exercise of the right to freedom of expression and information;
• for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1), to the extent that the rights referred to in paragraph 1 are likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• for the establishment, exercise, or defense of legal claims.

Right to Restrict the Processing of Personal Data:

You have the right to obtain restriction of processing if:

• you contest their accuracy
• if the processing is illegal and you object to the erasure of the data
• if the controller no longer needs the personal data but you have requested them for the establishment, exercise, or defense of legal claims
• if you have objected to the processing of your personal data

Right to Object:          If we process your data for the purposes of performing tasks carried out in the public interest or in the exercise of official authority, or if we rely on our legitimate interests when processing your data, you have the right to object to such processing.

Right to Lodge a Complaint with a Supervisory Authority: Data subjects have the right to lodge a complaint with the competent supervisory authority if they believe that their personal data is being processed unlawfully or in violation of their rights under the GDPR (Article 77 GDPR). For the Republic of Croatia, the supervisory authority is the Croatian Personal Data Protection Agency, located at Martićeva 14, 10000 Zagreb, Croatia. Website: https://azop.hr/, Phone: +385 1 4609 000.

5. Provision of Personal Data for Use:

We may share your personal data with providers of IT and communication solutions and services who act as data processors. We have concluded agreements with these processors that strictly regulate the handling of personal data, so they are not permitted to process your personal data without our instructions or to disclose it to third parties.

Under certain circumstances, we have a legal obligation to disclose your personal data, and the processing of personal data may include international transfers. The legal obligation may arise from national regulations or EU legislation. For example, joint supervisory activities by supervisory authorities of member states may be required, or actions may need to be taken to collect imposed but unpaid fines. Therefore, your data is disclosed to other recipients only when required by applicable regulations and only to the extent necessary to fulfill the specified purpose.

Your personal data will not be shared with third parties for direct marketing purposes.

6. Security of Personal Data:

We collect and process personal data in a way that ensures appropriate security and confidentiality, while enabling the effective implementation of data protection principles, including data minimization, limitation of processing scope, retention periods, and controlled access.

We implement all appropriate technical and organizational security measures to prevent the accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure, access, or viewing of data.

All employees of the data controller are obligated to maintain the confidentiality of personal data by signing a confidentiality agreement.

7. Retention period of personal data:

We process your personal data until the purpose for which it was collected has been fulfilled. After the purpose has ceased, your personal data is no longer used and remains stored in our system for as long as we are legally required to retain it in accordance with archival regulations.

8. Contact Information and Changes to the Privacy Policy

If you have any questions regarding the processing of your personal data, you can contact us via email siga@siga.hr

We regularly update our Privacy Policy to ensure it remains accurate and up to date, and we reserve the right to modify its content whenever deemed necessary. You will be informed of any changes and amendments in a timely manner via our website, in accordance with the principle of transparency.