CVIT HAPPENS, a sole proprietorship for floristry services, owned by Antun Bauer, with registered office in Zagreb and business address at Ilica 49, owner’s personal identification number (OIB): 52224114373 (hereinafter: “CVIT HAPPENS”), is fully committed to protecting your privacy and personal data during their processing. This Privacy Policy explains how we collect and use your personal data to fulfil our legal obligations, establish and execute contractual rights and duties, and outlines your rights and choices in this context.
Who is responsible for the security of your personal data?
CVIT HAPPENS is responsible for the security of the collected personal data.
Your data will be processed by CVIT HAPPENS as the data controller and, simultaneously, as a data processor under the terms of the agreement concluded with you. To ensure data protection and enable processing, as well as to fulfil your rights as a data subject, personal data may be disclosed to individuals and legal entities we collaborate with based on contractual or legal obligations (e.g. tax advisors, accounting services, law firms, competent public authorities).
Which personal data do we process?
We may process the following categories of personal data:
Data necessary to establish a contract and maintain communication such as: full name, residential address, personal identification number (OIB), occupation or business title, postal and business addresses, landline and mobile phone numbers, fax number, email address, photographs;
Billing and payment data, and data required for compliance with anti-money laundering and anti-terrorism financing laws: bank account numbers, payment card data, and related financial details;
Additional business-related data necessary for contract execution or provided voluntarily, such as instructions, specific requests or orders;
Publicly available information from official registers, records and databases;
Details of communication (written correspondence, phone calls) necessary to exercise contractual rights and obligations.
How do we collect personal data?
We collect and process your personal data depending on the circumstances, including:
When data is necessary to establish and perform contractual obligations;
When you contact us directly, via electronic communication or through the contact form on our website www.cvithappens.com, or through our staff with the purpose of initiating a business relationship;
When our staff contacts you or the legal entity you are affiliated with (as shareholder, beneficial owner or employee), with the goal of establishing or expressing interest in a business relationship;
For the distribution of promotional materials and marketing of our services and products;
In certain cases, we may obtain your personal data via third parties, such as your employer or associated business partners, or from publicly available registers and official sources.
Are you obliged to provide personal data?
In general, the provision of personal data is voluntary, and there are typically no negative consequences if you choose not to provide them. Certain data—such as publishing your photograph on CVIT HAPPENS’ intranet or website (www.cvithappens.com)—is entirely voluntary and processed only based on your explicit consent.
Any consent you have given can be withdrawn at any time by submitting a written statement. A verbal withdrawal will be accepted if there are justified circumstances that prevent you from providing a written statement.
However, in some cases, CVIT HAPPENS cannot perform business activities or take legal actions without the necessary personal data—for example, when such data is required to process your orders, instructions, requests, or for establishing contractual relations. In such cases, collecting and processing personal data is a precondition for providing our services unless another legal basis (such as a statutory or contractual obligation) exists.
Purposes for which we process personal data
We process personal data exclusively for the following (“Permitted Purposes”):
To establish and fulfil contractual obligations;
For marketing, promotion, and advertising of our products and services;
For managing and administering business processes related to contract execution (e.g. payment processing, accounting, auditing, collections, and support services);
To comply with applicable legal obligations, including those under European Union or third-country law (as long as they do not conflict with Croatian law);
For improving our services and communication;
For ensuring the security and access control of our business premises, IT systems, online platforms, and websites;
To identify individuals authorised to represent our contractual partners, sign purchase orders, accept offers, or enter into agreements with us;
To comply with court decisions or official orders, and to exercise or defend our legal rights;
For statistical purposes related to our business operations;
For any other purpose necessary to fulfil the above.
When you have given explicit consent, we may also process your personal data for:
Contacting you about products and services we offer, including sending brochures, offers, or newsletters;
Market analysis and other promotional activities.
For marketing-related communications, where legally required, we will only send information for which you have provided consent, and only for as long as that consent is not withdrawn. We will not use your personal data for any other purposes or for profiling outside the scope defined here.
Legal basis for processing your personal data
Depending on the purpose of processing, your personal data may be processed on the following legal grounds:
Your consent to process your personal data for one or more Permitted Purposes;
The necessity of processing to perform a contract or take steps at your request prior to entering a contract;
Compliance with our legal obligations;
Protection of your vital interests;
Our legitimate interests, in accordance with Regulation (EU) 2016/679 (GDPR) and the Croatian Data Protection Implementation Act.
Who we may share your personal data with
We may share your personal data in the following situations:
Your personal data may be shared confidentially when necessary to fulfil our contractual obligations, for administrative purposes, issuing invoices, data backups, exercising or defending our contractual rights, or for other legitimate business purposes.
If you are our business partner, your data may be shared with external collaborators such as legal firms, accounting services, tax advisors, credit institutions, business entities necessary for the fulfilment of mutual contractual obligations, debt collection agencies, public authorities, and bodies with public authority where required to protect contractual rights or due to legal obligations or public interest.
Your personal data may also be shared with third parties on a confidential basis for the purpose of gathering your feedback on the quality of our services and products to help us improve them.
Your data may be shared with third parties to whom we have transferred rights from our contractual relationship with you.
Additionally, we may instruct third parties to process your personal data on our behalf and according to our instructions as the data controller. In such cases, CVIT HAPPENS remains fully responsible for the confidentiality and security of your personal data and will ensure compliance with all relevant regulations.
Your personal data may also be used for statistical purposes to monitor visits and usage of our website, with the aim of improving our services and user experience.
In all other cases, we will disclose your personal data to third parties only with your explicit consent, whether provided as a separate document or as part of a contract, or when required by law or upon a valid order issued by a competent authority or public body.
Personal data of third parties you provide to us
If you provide us with personal data of other individuals (e.g. your employees, directors, or business contacts), you must ensure and guarantee that you are authorised to do so. You confirm that we may lawfully process and use this data without taking additional steps to verify permissions.
You must ensure that the third party is:
aware of the disclosure of their data to us;
has consented to it;
and has been fully informed about this Privacy Policy, including our identity, contact information, purposes of processing, data access rights, correction, deletion, transfer, and the right to lodge a complaint.
Data protection
We apply appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, loss, or alteration. Personal data may be stored both in physical (paper) and electronic formats, within systems designed for personal data protection.
Data transfers
In case of personal data transfers to EU/EEA countries or to third countries that do not offer the same level of data protection as the Republic of Croatia, we will take all necessary measures to ensure adequate protection in line with GDPR and national laws.
This includes the use of standard contractual clauses issued by the European Commission (e.g. Decision 2001/497/EC and 2004/915/EC). In such cases, we ensure that recipients provide an equivalent level of data protection.
Updating your personal data
If any of the personal data you have provided changes (e.g. your email address, home address, etc.) or if you become aware that we hold inaccurate personal data, please notify us by sending an email to: cvit.happens@gmail.com.
CVIT HAPPENS shall not be held liable for any loss arising from inaccurate, false, incomplete, or outdated personal data provided to us.
How long we retain your personal data
We will delete your personal data once the legitimate purpose for which it was collected no longer applies, or if you withdraw your consent—unless we are legally required to retain such data. In all cases, we will retain your data only as long as necessary to fulfil the rights and obligations arising from a contractual relationship or business cooperation, including the need for debt recovery.
Your rights
Subject to the applicable legal framework (GDPR and Croatian law), you have the following rights:
The right to withdraw consent at any time (where processing is based on consent and no other legal basis applies);
The right to access your personal data;
The right to obtain information about how your data is processed;
The right to receive a copy of your personal data that we hold;
The right to request correction or restriction of processing;
The right to request erasure of your data;
The right to data portability;
The right to object to the processing of your personal data.
To exercise any of these rights, please contact us via email at: cvit.happens@gmail.com.
We may request proof of identity to ensure compliance with data protection regulations and to prevent unauthorised access. We reserve the right to charge a fee in cases of repeated or excessive requests.
We will respond to all your requests and complaints promptly.
If you are not satisfied with our response, you may file a complaint with the competent data protection authority:
Croatian Personal Data Protection Agency (AZOP) – http://azop.hr
We will provide you with updated contact details of the authority upon request.
Changes to this Privacy Policy
This Privacy Policy was last updated on 25 May 2018. We reserve the right to update it periodically to reflect changes in data processing practices or applicable legal requirements. Updates become effective upon publication.
How to contact us
We value your opinion regarding our Privacy Policy.
You can contact us via:
Email: cvit.happens@gmail.com
Postal address:
CVIT HAPPENS
Sole proprietorship for floristry services
Owner: Antun Bauer
Ilica 49, 10000 Zagreb, Croatia
Zagreb, 4 November 2020
CVIT HAPPENS, Sole proprietorship for floristry services, Owner: Antun Bauer
