Hrvatske Autoceste d.o.o. (hereinafter: HAC), as a controller of personal data processing protect your privacy and process only personal data that are necessary for the purpose for which they were collected.
1. Basic information about the personal data processing controller
Hrvatske Autoceste d.o.o., for operation, construction and maintenance of motorways, Zagreb, Širolina 4, OIB: 57500462912, tel.: 01/4694 444.
2. Purposes and legal bases of personal data processing
We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC ( hereinafter: the General Regulation), as follows:
2.1. For the purpose of the contract implementation, ie for the purpose of taking action at your request before executing the contract, within the context of Clause 6 (1) (b) of the General Regulation.
If you do not provide us with the information necessary to enter into the contract, we will not be able to provide you with our services.
The rights and obligations from contractual relations related to the use of the motorways and toll collection are regulated in detail by the Terms and Conditions of the Use of the Motorway and Toll Collection.
2.2. For the purpose of fulfilling legal obligations under Clause 6 (1) (c) of the General Regulation, namely:
- obligations to organize toll collection systems and establish interoperability with electronic toll collection systems of other motorway operators, obligations to monitor and analyze traffic safety on public roads and obligations to initiate expropriation procedures for public road construction, all under the Roads Act (OG 84 / 11, 18/13, 22/13, 54/13, 148/13, 92/14, 110/19),
- acting upon requests for exercising the right to access information, in accordance with the Law on the Right to Access Information;
- handling consumer complaints, in accordance with the Consumer Protection Act;
- employment in Hrvatske Autoceste d.d.
2.3. If the processing is necessary for the performance of a task in the public interest, within the scope of Clause 6 (1) (e), for the purpose of:
- informing the public about the condition and road speed, exceptional events and meteorological conditions important for the safe flow of traffic;
2.4. Based on a legitimate interest within the scope of Clause 6 (1) (f) of the General Regulation, for the purpose of:
- answering your questions;
- keeping records of the parties' visits to the official premises of the HAC,
- protection of persons and property through video surveillance,
- notifications of changes and improvements and new functionalities of our services.
2.5. Based on the consent within the scope of Clause 6 (1) (a) of the General Regulation, for the purpose of:
We primarily collect personal data from you personally, in connection with the provision of motorway use services and toll payment, or when you contact us with a request or inquiry. Based on a legitimate interest, we may also collect your personal data indirectly, through video surveillance of our business premises and certain parts of the motorway, or from competent institutions such as the Police and the Croatian Vehicle Centre.
3. Processing of personal data via video surveillance
We process personal data via video surveillance in accordance with the General Regulation and the Act on the Implementation of the General Regulation on Data Protection (OG 42/2018).
Purposes of processing:
a) protection of persons and property,
the legitimate interest of HAC and third parties, except when these interests are stronger than the interests or fundamental rights and freedoms of respondents who require the protection of personal data.
video recordings may be submitted on request to the competent authorities (police, judicial authorities), if this is necessary for the conduct of proceedings within their competence on the basis of special regulations.
the keeping time of recordings depends on the capacity of the specific video storage system and the purposes of the recording itself, but for a maximum of 6 months, unless the evidence is in court, administrative, arbitration or other proceedings.
The website www.hac.hr and the web portal of surcharges (internet sites) use the so-called cookies. Cookies are small files that your browser saves to your computer or mobile device when you visit our website.
Cookies serve to make our website work optimally and to enable us to make further improvements in order to improve your experience. Blocking cookies is possible, but some features of our website will not be available to you then. More detailed information about cookies is available in Cookie settings.
5. Personal data security
We process your personal data in a way that ensures a high level of security and confidentiality while applying the principles of data protection processing in terms of reducing the amount of data, the scope of processing and the storage period. We apply technical and organizational protection measures to prevent the unauthorized use or disclosure of data or its destruction or loss.
6. Disclosing personal information to third parties
We undertake to keep your personal data in accordance with the highest applicable standards, which means that we will not unreasonably disclose or make it available to third parties.
In certain circumstances, we have a legal obligation to provide your personal data to the police, judicial authorities or other competent authorities for the purpose of performing tasks within their competence, based on special regulations.
We may also pass on your personal data for use to providers of information and communication solutions and services who, as processors, act on behalf of HAC as the processing manager. We have entered into data protection agreements with the data processors, which prescribe in detail the handling of personal data, and the data processors have undertaken to perform the processing in accordance with our order and the General Regulation.
We do not pass on your personal information to third parties for direct marketing purposes.
7. Period of retention of personal data
We will keep your personal information until the purpose for which it was collected is fulfilled. After the cessation of the purpose for which they were collected, we no longer process or store your personal data, unless we are required to do so by regulations.
8. Your rights regarding the processing of personal data
8.1. Right to access – You have the right to access your personal data that we process about you and you may request detailed information, in particular about the purpose of their processing, the type (s) of personal data being processed, including access to your personal data, recipients or categories of recipients as well as about the period during which the personal data will be stored. Access to personal data may be restricted only in cases provided for by EU laws or national law, or where such restriction respects the fundamental rights and freedoms of others. If you submit the request electronically, unless you request otherwise, we provide you with the information in the usual electronic form.
8.2. Right to correction – If we process your personal information that is inaccurate, you may at any time ask us to correct it, and if it is incomplete, you have the right to supplement it.
8.3. Right to deletion – You have the right to request the deletion of personal data relating to you if one of the following conditions is met: (i) your personal data is no longer necessary in relation to the purpose for which we collected or processed it; (ii) you have withdrawn the consent on which the processing is based in accordance with Clause 6 (1) (a) or Clause 9 (2) (a) and if there is no other legal basis for the processing; (iii) you have objected to the processing of your personal data in accordance with Clause 21 (1) of the General Regulation and if there are no stronger legitimate reasons for our processing; (iv) personal data have been unlawfully processed; (v) personal data must be deleted in order to comply with a legal obligation under EU law, or the law of the State to which the controller is subject; (vi) personal data have been collected in connection with the provision of information company services referred to in Clause 8 (1) of the General Regulation.
Those rights shall not be applicable to the extent that processing is necessary: (i) for the exercise of the right to freedom of expression and information; (ii) to comply with a legal obligation requiring processing under EU law or the law of the Member State to which the controller is subject, or to carry out a task in the public interest or in the exercise of the controller's official authority; (iii) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Clause 89 (1), to the extent that the right referred to in paragraph 1 is likely to impede or seriously jeopardize the achievement of objectives; processing; (iv) to make, pursue or defend legal claims.
8.4. Right to Restrict Processing – You have the right to obtain a processing restriction if: (i) you dispute their accuracy; (ii) if the processing is illegal and you object to their deletion; (iii) if the controller no longer needs the personal data but you have requested them for the purpose of making, realizing or defending legal claims; (iv) if you have objected to the processing of your personal data.
8.5. Right to object – if we process your data for the purpose of performing tasks of public interest or in the exercise of our official powers, or we invoke our legitimate interests in processing them, you can object to such processing.
9. Information and contact
If you have any questions regarding the processing of your personal data, please contact our Data Protection Officer.
Data protection officer info: tel: 01/46964 413, fax: 01/4694 431, e-mail: firstname.lastname@example.org.
You also have the right to lodge a complaint with the national supervisory authority (Personal Data Protection Agency, Zagreb, Selska cesta 136) or the supervisory authority within the EU.
Hrvatske Autoceste d.o.o.