Privacy Policy

Protecting your personal information is very important on the 4uHa website. Use of the 4uHa website (abbreviated to Four ears j.d.o.o.) is possible without providing personal information, however, if the respondent wishes to use some of the services of this website, the processing of personal information may be necessary. If data processing is necessary, but there is no legal basis for it, the respondent will always be asked for consent.

The processing of personal data, such as the name, surname, address, email address or telephone number of the respondent will always comply with the General Regulation on the protection of personal data and the legislation of the Member State applicable to the website of 4uHa. Through these Privacy Policies, we would like to inform the public about the nature, scope and purpose of the personal information we collect and process. Furthermore, we would like to inform the respondents about their rights.

As Head of Data Processing, 4uHa’s website has implemented a number of technical and organizational measures to ensure complete protection of the personal data being processed. However, data transmission over the internet can in theory have security flaws, so 100% protection may not always be guaranteed. For this reason, each respondent may submit personal information by alternative methods, e.g. by phone call.

1. Definitions

The privacy policies of the 4uHa website are based on the terms used by EU legislation in the drafting and adoption of the General Data Protection Regulation. Privacy policy is readable and understandable to the general public, as well as to my clients and business partners. To ensure this, I will first explain the terminology used.

We use the following terms in these Privacy Policy, among other things:

a) Personal information

Personal information is any information relating to any identified natural person (the “respondent”). An identified natural person is one who can be identified, directly or indirectly, by name and surname, identification number, location data, online identifiers such as the physical, psychological, genetic, mental, economic, cultural or social identity of an individual.

b) Respondent

Respondent is any natural person whose identity is established or identifiable, and whose personal data is subject to processing by the processing manager in charge of processing personal data.

c) Processing

Processing is any process or set of procedures applicable to personal information, whether it be automated processes such as collecting, recording, organizing, structuring, saving, adjusting or modifying, extracting, viewing, using, transmitting, disseminating or placing available, aligned, restricted, deleted or destroyed.

d) Processing restriction

A restriction on processing is the marking of stored personal data in order to limit their processing in the future.

e) Profiling

Profiling is any method of automated processing of personal data consisting of the use of personal data to determine the personal preferences of an individual, more specifically to analyze and overlook aspects of job performance, economic situation, health, personal preferences, interests, reliability, behavior , locating and moving each individual individual.

f) Pseudonymization

Pseudonymisation is the processing of personal data in such a way that the respondent can no longer be assigned characteristics without using additional data that are collected in a separate manner and subject to measures of a technical and organizational nature that ensure that the data cannot be applied to any a natural person whose identity is established or identifiable.

g) The head of the processing of personal data or the person in charge of the processing of personal data

The head of the processing of personal data or the person in charge of the processing of personal data is any natural or legal person, public institution, agency or other body that alone or in cooperation with others determines the purpose and manner of processing personal data; in places where the purpose and method of processing personal data is governed by the legislation of an EU Member State, the criterion for the selection of the processing manager will be under the jurisdiction of the legislation of the EU Member State.

h) Performer of personal data processing

The executor of the processing of personal data is a natural or legal person, public institution, agency or other body that performs the processing of personal data on behalf of the head of the processing of personal data.

i) The recipient

The recipient is a natural or legal person, public institution, agency or other body to whom personal information has been provided, whether third party or not. However, national authorities that receive personal data through a specific query that is in line with EU or Member State law will not be considered as recipients; the processing of personal data by these national authorities will be in accordance with the applicable regulations regarding the purpose of data processing.

j) Third party

A third party is a natural or legal person, public institution, agency or other body, other than the respondent, the processing manager or the processing executor, who, with the direct permission of the processing manager or processing performer, is authorized to process the personal data of the respondents.

k) Consent

Respondent’s consent is any well-defined, informed and unambiguous indication of the respondent’s desire that he or she, through a statement or clear affirmative action, expresses consent to the processing of personal data relating to him or her.

2. Name and address of the personal data processing manager
The head of the processing of personal data under the General Regulation on the protection of personal data or other laws concerning the protection of personal data applicable in the EU Member States is:

Mislav Bašić, Director

Tituša Brezovačkog 4, 10 000 Zagreb

Croatia

Phone number: +385 95 3052 128

Email: mislav@4uha.hr

Website: www.4uha.com

3. Name, surname and address of the personal data protection officer

The personal data protection officer appointed by the manager is:

Antonela Andreata

Tituša Brezovačkog 4, 10 000 Zagreb

Croatia

Phone number: +385 95 3052 128

Email: antonela@4uha.hr

Website: www.4uha.com

Any respondent can contact our Data Protection Officer directly at any time with any questions and suggestions regarding data protection.

4. Cookies

4uHa’s website uses cookies. Cookies are text files that your browser saves to your computer system.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique cookie identifier. It consists of a series of characters that websites and servers can assign to the specific browser in which the cookie is stored. This allows the websites and servers visited to differentiate individual browsers from other browsers with different cookies. Each browser can be identified by a unique cookie ID.

By using cookies, 4uHa’s website provides visitors with more affordable services that would not be possible without the use of cookies.

The information and offers of the website can be optimized through cookies so that the user and his user experience come first. As stated previously, cookies allow us to identify users of the website. The purpose of this is to make it easier for the user to use the website. For example, a user who uses cookies does not have to enter access information every time they access the website because this process is downloaded by the website that places the cookie on the computer system. Another example of using cookies is a shopping cart in a web shop. The web store remembers items that the user placed in the cart via cookies.

The Respondent may at any time prevent the placement of cookies by editing the settings of the browser he / she uses, thereby permanently disabling the placement of cookies. Furthermore, cookies already set can be removed at any time through any browser. However, if a respondent disables the setting of cookies in their browser, they will not be able to use all the functions of the website.

5. Collection of general data and information

4uHa’s website collects general information and information when a respondent or automated system accesses the website. This general information and information is then saved to the server as log files. Collects (1) browser type and version, (2) operating system (3) web site from which my web site is accessed (so-called referrals), (4) subpages, (5) date and time of web site access, (6 ) IP address, (7) Internet service provider, and (8) other similar data and information that may be used in the event of an attack on the information system.

We do not draw any conclusions about the respondent when using this general information and information. In contrast, this information is needed to (1) properly deliver the content of the website, (2) optimize the content of the website and its marketing, (3) ensure the long-term viability of the system and the website, (4) provide the necessary assistance to government bodies in case of prosecution for cyber-attack. Therefore, 4uHa’s website analyzes anonymously collected data and information statistically with the aim of increasing data protection and security, and to ensure the optimum level of protection of all the collected personal data it processes. The anonymous data of the server log files is saved separately from the personal data of the respondents.

6. Register to our website

The respondent has the option of registering on the leader’s website with his or her personal information. What personal information is passed on to the manager is determined by the appropriate entries used for registration. The personal data entered by the respondent is collected and stored solely for internal use by the manager and for his or her own purposes. A manager may request a transfer to one or more services (eg, a service package) that also uses personal information for internal purposes attributable to the manager.

By registering on the manager’s website, the date and time of the IP address assigned by the Internet service provider (ISP) and used by the respondent are stored. The storage of this information takes place in the background as it is the only way to prevent misuse of our services and, if necessary, enable us to investigate the offenses committed. Storing this information is necessary to secure the leader. This information is not transmitted to third parties unless there is a legal obligation to transfer the data or if the transfer serves the purpose of prosecution.

Respondent registration, with a voluntary indication of personal information, is necessary to enable the facilitator to offer content or services that can only be offered to registered users because of the nature of the subject. Registered persons may at any time change the personal information provided during registration or completely delete it from the manager’s personal data collection.

The personal data processing manager must at any time provide, upon request, information to each respondent on what personal information is stored about the respondent. Furthermore, the personal data collection manager will correct or delete personal data upon request or indication of the data subject (respondent), provided that there are no legal storage obligations. All employees of the manager are available to the respondent in this regard as a contact person.

7. Subscribe to the newsletter

On the 4uHa website, users have the option to sign up for the newsletter. The input box determines what type of personal information is forwarded, as well as when the newsletter is requested by the personal data processing manager.

4uHa’s website informs clients and business partners via newsletters about their offers and news. The respondent can receive the newsletter only if (1) the respondent provides a valid email address, (2) the respondent requests to send the newsletter by subscribing to the mailing list. A confirmation email will be sent to the respondent’s email address before sending the first newsletter for legal reasons, in a double-consent procedure. Confirmation email is used as proof that the owner of the email address is a respondent authorized to receive newsletters.

When registering to receive newsletters, the IP address of the computer system issued by the Internet service provider used by the respondent during registration, as well as the date and time of registration, is also saved. The collection of this information is necessary in order not to abuse the email address of the respondents in the further period and serves as the legal protection of the head of personal data processing.

Personal information collected during registration will be used solely for the purpose of sending newsletters. Furthermore, subscribers will be notified via email of modifications to newsletters or changes in technical circumstances as long as necessary to ensure that newsletters are sent smoothly. There will be no transfer of collected personal information to a third party. Respondent may terminate the newsletter subscription at any time. The consent to save personal information given by the respondent to send newsletters may be withdrawn at any time. A link can be found in each newsletter to remove the privilege. Printing from newsletters is also possible directly from the website or through direct communication with the head of personal data processing.

8. Newsletter-Tracking

The newsletter of the 4uHa website contains so-called tracking pixels. Tracking pixel is a miniature graphic element embedded in an email that is sent in HTML format to allow logging and analysis. This provides a statistical analysis of the success of marketing campaigns. Through tracking pixels, 4uHa’s website can see when and if an email was opened by a respondent and what links the respondent followed.

Such personal information collected through tracking pixels in the newsletter is saved and analyzed by the head of personal data processing in order to optimize the process of sending newsletters and also to tailor the content of future newsletters to the interests of respondents. Personal information collected in this way will not be passed on to a third party. Respondent may withdraw consent at any time. Upon termination of the authorization, the personal data processing manager will delete the personal data.

9. Possibility of contact through the website

The 4uHa website contains information that enables quick contact through electronic media as well as direct communication, including the so-called email address. If the respondent contacts the head of personal data processing via email or contact form, the transferred personal information is automatically saved. Personal data transferred voluntarily by the respondent to the head of the processing of personal data are automatically stored for the purpose of processing or further communication with the respondent. There is no transfer of this type of personal information to a third party.

10. Routine deletion or blocking of personal data

The head of the processing of personal data will only process and hold the personal data of the respondents only in the time required to achieve the goals of keeping the personal data, or until the deadline allowed by EU legislation or other legislators under the responsibility of the head of the processing of personal data.

If the reason for storing personal data cannot be fulfilled or the retention period specified by EU legislation or other competent legislators expires, the personal data of the respondents will be routinely blocked or deleted in accordance with legal requirements.

11. Respondents’ rights

a) The right to confirm personal information

Each respondent has the right guaranteed by EU law to obtain from the head of the processing of personal data whether his or her personal data is being used or processed. If the respondent wishes to exercise this right to confirm, he or she may at any time contact the head of the processing of personal data.

b) The right to access personal data

Each respondent has the right guaranteed by the EU Legislation to receive free of charge information about his or her personal data stored at any time, as well as a copy of the requested personal data. Furthermore, the European provisions and directives allow the respondent access to the following information:

the purpose of processing personal data;

the type of personal information requested;

the recipient or type of recipients to whom personal data are shared, in particular recipients from third countries or international organizations;

where possible, the envisaged period of retention of personal data, or in the case of impossibility, the criterion determining that period;

the existence of the right of the respondent to request from the head of the processing of personal data the correction or deletion of personal data, the restriction of the processing of the personal data of the respondents or the right of the respondents to object to the processing of personal data;

the existence of a right of appeal to the supervisory authority;

if personal data were not collected directly from the respondents, information on the source of personal data available;

the existence of an automated decision-making process to which Article 22 (1) and (4) of the General Regulation on the protection of personal data applies, and in that case the information available on the logic of automatism, as well as the importance and foreseeable consequences for respondents.

Furthermore, the respondent is entitled to information if his or her personal information is transferred to third countries or international organizations. In this case, the respondent is entitled to information about the security measures implemented in the data transfer.

If the respondent wishes to exercise this right of access, he or she may at any time contact the head of the processing of personal data.

c) The right to rectify personal data

Each respondent has the right guaranteed by the EU Legislation to receive corrections of inaccurate personal data at any time from the head of the processing of personal data. Considering the purpose of the processing of personal data, the respondent has the right to complete his / her incomplete personal data with, among other things, through a supplementary statement.

If the respondent wishes to exercise this right of correction, he or she may at any time contact the head of the processing of personal data.

d) Right to delete personal information (Right to be forgotten)

Each respondent has the right, guaranteed by European law, to request the deletion of personal data relating to the respondent at any time without delay. The data processing manager is obliged to immediately delete personal data where at least one of the conditions applies, until the processing is necessary:

Personal information is no longer needed in terms of the purpose for which it was collected or processed.

The respondent withdrew his or her consent for the processing of personal data based on Article 6, paragraph 1 or Article 9, paragraph 2 of the General Regulation on the protection of personal data, and where there is no longer a legal basis for processing the data.

The respondent objects to the processing of data under Article 21, paragraph 1 of the General Regulation on the protection of personal data, and there is no legal basis for processing the data, or the respondent objects to the processing of the data under Article 21, paragraph 2 of the General Regulation on the protection of personal data.

Personal information is processed illegally.

Personal data must be erased under a legal obligation under EU law or the law of the Member State of the processing of personal data by the national.

Personal data have been collected in connection with the provision of information society services under Article 8, paragraph 1 of the General Regulation on the protection of personal data.

If at least one of the reasons above applies, and the respondent requests the erasure of personal information collected by the 4uHa website, he or she may contact the head of the personal data processing. The personal data processing manager will ensure that the deletion of personal data is carried out immediately.

In places where the data processing manager has allowed the disclosure of personal data, and in accordance with Article 17, paragraph 1, it is mandatory to delete said personal data, the data processing manager shall take reasonable steps, including technical measures, taking into account the technical feasibility and cost of the application. informed other personal data processing managers that the respondent requested that all links, copies or replicas of personal data be deleted until such processing was no longer required. The Head of Personal Data Processing at 4uHa’s website will ensure that these measures are implemented on a case-by-case basis.

e) The right to restrict the processing of personal data

Each respondent under EU law is guaranteed the right to obtain from the head of the processing of personal data the right to restrict the processing of personal data in cases where the following applies:

The accuracy of personal data is challenged by the respondent which allows the personal data processing manager to check the accuracy of personal data.

The processing of personal data is illegal, and the respondent opposes the erasure of personal data and instead seeks a restriction on the use of said personal data.

The personal data processing manager is no longer required for processing, however the respondent is required to establish, implement or defend legal claims.

The respondent objected to the processing of personal data under Article 21, paragraph 1 of the General Regulation on the protection of personal data, pending verification that the legal basis of the head of the processing of personal data exceeds those of the respondents.

If at least one of the reasons above applies, and the respondent requests a restriction on the processing of personal data collected by the 4uHa website, he or she may contact the head of the processing of personal data. The head of the processing of personal data will provide a restriction on the processing of personal data.

f) Right to transfer of personal data

Each respondent under EU law is guaranteed the right to receive personal data relating to him or her by the head of the processing of personal data, in a structured, largely used and legible format. Respondent has the right to transfer said personal information to another head of personal data processing from the current head of personal data processing without any interference, as long as the processing of personal data is based on consent under point A, Article 6, paragraph 1 or point A, Article 9, paragraph 2 Of the General Regulation on the protection of personal data, or under a contract under point B of Article 6, paragraph 1 of the General Data Protection Regulation, and the processing of data is carried out automatically, as long as the processing of data is not necessary for tasks of public interest or for the official duty of the processing manager personal information.

Furthermore, under the existing right to transfer of personal data referred to in Article 20, paragraph 1 of the General Regulation on the protection of personal data, the respondent has the right to transfer his or her personal data directly between the head of the processing of personal data where technically feasible where this procedure does not jeopardize the rights and the freedoms of other respondents.

In order to exercise its right to the transfer of personal data, the respondent may at any time contact the Head of Personal Data Processing of the 4uHa Company website.

g) Right to object

Each respondent under EU law is guaranteed a right of objection based on his or her own situation, at all times, to the processing of personal data relating to the respondent, based on points E and F of Article 6, paragraph 1 of the General Data Protection Regulation. It may also apply to profiling based on this Regulation.

4uHa’s website will not continue to process personal data in the event of a complaint, except where there is a serious legal basis for the processing of personal data, which may override the interests, rights and freedoms of respondents, or to establish, implement or defend legal claims.

If the 4uHa website processes personal data for marketing purposes, the respondent is entitled to object at any time to the processing of personal data used for these purposes. This also applies to profiling that is closely related for the purposes of such direct marketing. If the respondent objects to the processing of personal data for direct marketing purposes, the 4uHa website will no longer process the personal data of the respondents for direct marketing purposes.

In addition, the respondent has the right to object to the processing of personal data by 4uHa’s website based on his / her own situation, which are used for scientific or statistical purposes under Article 89, paragraph 1 of the General Regulation on the protection of personal data, unless the processing is data required for public interest purposes.

In order to exercise the right of objection, the Respondent may at any time contact the Head of Personal Data Processing of the 4uHa Company website. In addition, despite the Regulation 2002/58 / EC, the respondent may, in the context of using information society services, exercise his right to object by automated means using technical specifications.

h) Automated decision making, including profiling

Each respondent under EU law is guaranteed the right not to be subject to decision-making based solely on the automated processing of personal data, including profiling, which may have legal or similar consequences for him or her, as long as the decision (1) is not part of an agreement between or (2) is not permitted under EU law or by individual Member States to take appropriate measures to safeguard the rights, freedoms and interests of respondents, or (3) is not based on the express consent of the respondents.

If the decision (1) is required for a contract between the respondent and the head of the personal data processing, or (2) is based on the express consent of the respondents, the 4uHa website will implement measures that will safeguard the respondent’s rights, freedoms and interests, minimum right to human intervention by the personal information manager to whom he / she will express his / her position and challenge the decision.

If the respondent wishes to exercise the rights regarding automated individual decision-making, he or she may at any time contact the Head of Personal Data Processing of the 4uHa Company website.

i) Right to withdraw and terminate the privilege

Each respondent under EU law is guaranteed the right to withdraw and / or withdraw their consent to the processing of personal data at any time.

If the respondent wishes to exercise the right to withdraw and / or withdraw his / her consent, he or she may at any time contact the Head of Personal Data Processing of the 4uHa Company website.

12. Protection of the applicant’s data and the process of processing the submitted data

The personal data processing manager collects and processes the personal data of the applicant for the purpose of processing the request. Processing can also be done electronically. This is the case if the applicant submits the relevant application documents via email or through a web form on the manager’s website. If the manager concludes an employment contract with the applicant, the information provided will be stored for the purpose of carrying out the employment relationship in accordance with legal requirements. If the manager has not concluded a contract of employment with the applicant, the applications shall be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the manager are opposed to deletion.

13. Facebook Privacy Policy

At 4uHa’s website, the head of personal data processing has embedded Facebook components. Facebook is a social network.

A social network is a place for social networking on the Internet, an online community that typically allows users to interact with each other in a virtual space. The social network serves as a platform for the exchange of opinions and experiences, or to provide personal or business related information to the Internet community. Facebook allows its users to create private profiles, upload pictures and connect through friend requests.

Facebook is the property of Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person using Facebook lives outside the US or Canada, the head of personal data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

By opening any page of 4uHa’s web site operated by a personal data processing manager who has a Facebook plugin installed, the respondent’s browser will display the corresponding Facebook component. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. During this technical procedure, Facebook was provided with information about a specific subpage visited by the respondent.

If a respondent is logged in to Facebook, at the same time, Facebook may detect each of its reviews of 4uHa’s website while visiting a webpage visited by specific subpages. This information is collected through the Facebook component and credited to the respondent’s Facebook account. If the respondent clicks on any Facebook button integrated on the 4uHa website, such as the Like button, or if the respondent submits a comment, then Facebook transfers the information to the respondent’s personal Facebook account, thereby storing personal information.

Each time a respondent is logged into Facebook while accessing 4uHa’s website, Facebook will receive information through the Facebook component. This will happen whether or not the respondent clicks on the Facebook component. If the respondent does not want the transfer of this type of information, they can prevent it by logging out of their Facebook account before accessing 4uHa’s website.

The privacy policy posted by Facebook at https://facebook.com/about/privacy/ provides information about the collection, processing and use of personal information by Facebook. Also, it explains what settings Facebook provides to protect the personal information of respondents. Also, various configuration options are available to prevent the transfer of personal information to Facebook. The respondent may use the above options to prevent the transmission of personal information.

14. Google Analytics Personal Data Protection Provisions (with anonymization feature)

At 4uHa’s website, the personal data processing manager installed the Google Analytics components (with an anonymization function). Google Analytics is an Internet service; collecting and analyzing visitor behavior data on a website. The web analytics service, among other things, collects information about the webpage the respondent came from, which pages they visited, or how often and how long they viewed a particular subpage. Web analytics is used to optimize the website and to conduct online advertising analysis.

Google Analytics is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

For web analytics purposes through Google Analytics, the personal data processing manager uses the “_gat._anonymizelp” application through which the respondent’s IP address is shortened by Google and anonymized when a 4uHa company website is accessed by a respondent from an EU Member State or other country under the jurisdiction of the European Economic space.

The purpose of the Google Analytics component is to analyze traffic to a 4uHa website. Google uses the information and information collected, inter alia, to evaluate the use of the Website and to provide reporting that displays activity on the Website and to provide other services related to the use of the Website.

Google Analytics places a cookie on the respondent’s computer system. The definition of cookies is already explained in this document. Setting cookies allows Google to analyze the use of the website. Each review of a subpage of a 4uHa web site operated by a personal data processing manager that incorporates a Google Analytics component will automatically provide the Google Analytics component with the information necessary for the purpose of online advertising and the calculation of a fee belonging to Google. During this technical process, Google will receive personally identifiable information, such as the respondent’s IP address (used to understand where visits and clicks are coming from, creating a commission calculation based on this).

The cookie serves to store personal information such as the time of access to the website, the location from which it is accessed and the frequency of access to the website by the respondents. With each visit to 4uHa’s website, such personal information, including the respondent’s IP address, will be forwarded to Google and placed there. Google may pass on this personal information through a technical procedure to a third party.

As noted above, the respondent may prevent cookies from being set by appropriate browser modifications at any time. Such modifications would also prevent Google Analytics from placing a cookie on the respondent’s computer system. It is also possible to delete cookies already set via a browser or other software solution.

In addition, the respondent may object to the collection and processing of personal data generated by Google Analytics related to the use of the 4uHa website. In order to do this, the respondent must download and install the browser add-on located at https://tools.google.com/dlpage/gaoptout. This add-on via JavaScript lets Google Analytics know that information about a visit to a site by a respondent should not be collected and processed. Google considers the installation of this add-on browser a valid objection to the collection of personal information. If at any other time a deletion, formatting, or reinstallation of the respondent’s computer system occurs, the respondent will need to reinstall browser add-ons to disable Google Analytics. If for some reason the respondent or authorized person has removed the browser add-on, or the browser add-on is disabled, it can always be reinstalled or activated.

Additional information and Google’s guidelines regarding personal data protection can be found at https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/analytics/terms/us.html . Additional information regarding Google Analytics can be found at https://www.google.com/analytics/.

15. Google Remarketing Privacy Policy

On the 4uHa website, the Personal Data Processing Manager has installed Google Remarketing components, which are specific to Google AdWords, and allow ads to be shown to the Internet by users who have already been to the website of the legal or natural person displaying the ad. Google Remarketing integration enables end-user advertising that shows relevant end-user ads.

Google Remarketing is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is to serve ads based on user interests. Allows ads to run on the Google Advertising Network or other websites based on individual needs and aligned with the interests of users.

Google Remarketing sets a cookie on a respondent’s computer system. The definition of cookies is in the text above. By setting a cookie, Google recognizes a visitor to the 4uHa website while browsing other websites that are on the Google advertising network. Every review of a page that has the Google Remarketing component integrated, the respondent’s browser is automatically identified by Google. During this technical procedure, Google will receive personal information from respondents, such as IP address and internet behavior, that Google uses to display relevant ads.

Cookies are used to store personal information, in this case the websites visited by the respondent. Each time we visit a website, personal information, including IP address, is sent to Google in the US. This personal information is stored by Google in the US. Google may share this personal information through a technical procedure with a third party.

The respondent may, as noted above, prevent cookies from being set at any time by appropriate browser modifications, thereby permanently disabling them. Such browser modifications would also prevent Google from placing cookies on the respondent’s computer system. In addition, cookies already set by Google may be removed at any time through a browser or other computer program.

Additionally, the respondent may object to Google advertising based on his or her interests. In order to do this, the respondent must go to www.google.de/settings/ads and make the desired changes to the browser.

Additional information and Google’s guidelines regarding personal data protection can be found at https://www.google.com/intl/en/policies/privacy/.

16. Google-AdWords Personal Data Protection Provisions

At 4uHa’s website, the Personal Data Processing Manager installed Google AdWords components, an Internet advertising service. Allows the advertiser to place ads on Google’s search engine and Google’s advertising network. Google AdWords allows an advertiser to define specific keywords that will serve an ad to a Google search engine when a user types that keyword into a search engine. On the Google Advertising Network, ads are displayed on relevant websites using an automated algorithm, taking into account predefined keywords.

Google AdWords is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote 4uHa’s website by including relevant ads on third-party websites and Google search results.

If a respondent accesses 4uHa’s website through a Google ad, Google will embed a conversion cookie into the respondent’s computer system. The definition of cookies has already been explained. The conversion cookie loses its validity after 30 days and is not used to identify the respondent. If the cookie has not expired, it is used to check which subpages the respondent has visited, such as a shopping cart on a webshop. Through cookie conversion, Google and the head of personal data processing can detect whether the person who visited the site through AdWords ads generated sales, or whether they made or abandoned the sale of the goods.

The information collected through the conversion cookie is used by Google to generate statistics on the visit to the 4uHa website. These statistics are then used to determine the total number of users who visited the site through AdWords ads and to determine the success or failure of each AdWords ad, and to optimize AdWords ads for the future.

The Conversion cookie stores personal information, such as websites visited by a respondent. Each time you visit 4uHa’s website, personal information such as the respondent’s IP address is sent to Google in the US. This personal information is stored by Google in the US. Google may share this personal information through a technical procedure with a third party.

The respondent may, as noted above, prevent cookies from being set at any time by appropriate browser modifications, thereby permanently disabling them. Such browser modifications would also prevent Google from setting the cookie conversion on the respondent’s computer system. In addition, cookies already set by Google AdWords may be removed at any time through a browser or other computer program.

Additionally, the respondent may object to Google advertising based on his or her interests. In order to do this, the respondent must go to www.google.de/settings/ads and make the desired changes to the browser.

Additional information and Google’s guidelines regarding personal data protection can be found at https://www.google.com/intl/en/policies/privacy/.

17. Instagram Personal Data Protection Provisions

At 4uHa’s website, the head of personal data processing has embedded Instagram components. Instagram is a service that can be characterized as an audiovisual platform that allows users to share pictures and videos, and share those materials on other social networks.

The owner of Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Each time you access a 4uHa website operated by a personal data processing manager who has an Instagram component installed, a browser on the respondent’s computer system will automatically display a preview of the specified Instagram component. During this technical procedure, Instagram will receive information about the specific subpage visited by the respondent.

If the respondent is logged into Instagram at the same time, Instagram will detect every visit to the 4uHa website and also what specific subpage the respondent visited during their stay on the website. The information is collected by the Instagram component and assigned to the Instagram account of the respondents. If a respondent clicks on one of the Instagram buttons on the website, Instagram will credit that information to the respondent’s Instagram account and store that personal information.

Instagram receives information through the Instagram component provided that the respondent is logged into Instagram while browsing the website. This will be the case whether or not the respondent clicked on the Instagram button. If this type of information transfer is not what the respondent wants, he or she can prevent it by logging out of his Instagram account before accessing 4uHa’s website.

Additional information and Instagram guidelines for protecting personal information can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

18. LinkedIn Privacy Policy

At 4uHa’s website, the personal data processing manager installed LinkedIn components. LinkedIn is a social network that connects users to existing business contacts and creates new business contacts. More than 400 million registered individuals in more than 200 countries use LinkedIn. So LinkedIn is currently the largest business contacts platform and one of the most visited websites in the world.

LinkedIn is owned by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, United States. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for privacy issues outside the United States.

Each time you access the 4uHa Company website operated by the Head of Personal Data Processing and on which the LinkedIn component is embedded, a browser on the respondent’s computer system will automatically display an overview of the LinkedIn component. During this technical procedure, LinkedIn will receive information on the specific subpage visited by the respondent.

If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject — and for the entire duration of their stay on our Internet site — which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.

LinkedIn receives information through the LinkedIn component provided the respondent is logged in to LinkedIn while browsing the website. This will be the case whether or not the respondent clicked on the LinkedIn button. If this type of information transfer is not what the respondent wants, he or she can prevent it by logging out of his LinkedIn account before accessing 4uHa’s website.

Under https://www.linkedin.com/psettings/guest-controls LinkedIn provides the ability to unsubscribe from emails, text messages and targeted ads, as well as the ability to manage your ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. Applicable LinkedIn privacy policies are available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn cookie notification is available under https://www.linkedin.com/legal/cookie-policy.

19. Twitter Privacy Policy

At 4uHa’s website, the head of personal data processing has installed Twitter components. Twitter is a multilingual, publicly available microblogging service where users can post and share so-called “tweets”, or short messages that are limited to 280 characters. These short messages are accessible to everyone, including non-Twitter users. Tweets are displayed to the so-called followers of the user in question. Followers are other Twitter users who follow the tweets of that user. Furthermore, Twitter allows it to reach a wide audience through hashtags, links, and tweets.

Twitter is the owner of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time you access a 4uHa website operated by a personal data processing manager with a Twitter component (Twitter button) installed, a browser on the respondent’s computer system will automatically display an overview of the specified Twitter component. During this technical procedure, Twitter will receive information about the specific subpage visited by the respondent. The purpose of integrating the Twitter component is to transmit the content of the 4uHa website to familiarize users with the content of the website and increase the number of visitors.

If the respondent is logged into Twitter at the same time, Twitter will detect every visit to the 4uHa website and also what specific sub-sites the respondent visited during their visit to the website. The information is collected by the Twitter component and assigned to the respondent’s Twitter account. If a respondent clicks on one of the Twitter buttons on the website, Twitter will credit that information to the respondent’s Twitter account and store that personal information

Twitter receives information through the Twitter component provided that the respondent is logged into Twitter while browsing the website. This will be the case whether or not the respondent clicked the Twitter button. If this type of information transfer is not what the respondent wants, he or she can prevent it by logging out of his Twitter account before accessing 4uHa’s website.

Additional information and Twitter guidelines for protecting personal information can be found at https://twitter.com/privacy?lang=en.

20. YouTube Privacy Policy

At 4uHa’s website, the head of personal data processing has embedded Youtube components. Youtube is an online video portal that allows you to post, view, rate and comment on video material for free. Youtube lets you publish all kinds of videos, so you can watch entire movies, TV shows, music videos, music videos and videos made by portal users.

YouTube is owned by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC, a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Each review of a single page of a 4uHa website operated by a personal data processing manager and featuring a Youtube component, the respondent’s computer system browser will display a built-in YouTube component. You can find more information about YouTube at https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google will obtain information about the specific subpage visited by the respondent.

If a respondent is logged into YouTube, YouTube will recognize each time they open a subpage containing a Youtube video of the subpage in question. This information will be collected by YouTube and Google and will be credited to the respondent’s YouTube account.

YouTube and Google will receive information through the YouTube component that the respondent has visited 4uHa’s website if he or she was logged into Youtube during the visit; this will happen regardless of whether the respondent clicked on the YouTube video or not. If a respondent refuses to allow such a transfer of information, he or she may prevent it by logging out of his or her YouTube account before opening 4uHa’s website.

YouTube’s privacy guidelines, which you can view at https://www.google.com/intl/en/policies/privacy/, provide information on the collection, processing and use of personal information by YouTube and Google.

21. Payment Method: Data protection provisions when using PayPal as your payment method

At 4uHa’s website, the manager has integrated PayPala components. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which represent virtual private or business accounts. PayPal is also able to process virtual credit card payments when a user does not have a PayPal account. The PayPal account is managed through an email address, which is why there are no classic accounts. PayPal allows you to make online payments to third parties or receive payments. PayPal also accepts trustee functions and offers customer protection services.

The owner of PayPala’s European business is PayPal (Europe) S.à.r.l. & Cie S.C.A., 22-24 Royal Boulevard, 2449 Luxembourg, Luxembourg.

If a respondent chooses “PayPal” as an online payment option during the ordering process, we automatically transfer the respondent’s information to PayPal. By choosing this payment option, the respondent agrees to transfer the personal information required to process the payment.

The personal information transmitted to PayPal is usually the name, surname, address, email address, IP address, telephone number, mobile number or other information required to process the payment. The processing of a sales contract also requires such personal information as is associated with the relevant order.

Data transfer is focused on processing payments and preventing fraud. The manager will transfer personal information to PayPal, especially if valid transfer interests are given. The transfer of personal information between PayPal and the personal data processing manager will be communicated by PayPal to the lending agencies. This transfer is for identity and credit verification.

PayPal will, if necessary, transfer personal information to its affiliates, service providers or subcontractors to the extent necessary to fulfill contractual obligations or to provide the information to be processed in the order.

Respondent has the ability to revoke consent to the processing of personal information at any time by PayPal. Revocation will have no effect on personal data that must be processed, used or transmitted in accordance with (contractual) payment processing.

The applicable PayPal data protection provisions can be downloaded at https://www.paypal.com/us/webapps/mpp/en/privacy-full.

22. Legal basis for the processing of personal data

Article 6, paragraph 1, subparagraph A of the General Data Protection Regulation is the legal basis for the processing of personal data for which we have obtained consent. If the processing of personal data is necessary for the performance of the contract of which the respondent is a part, such as when the processing of personal data is necessary for the supply of goods or services, the processing of personal data is based on Article 6, paragraph 1, subparagraph B of the General Regulation on the protection of personal data. The same applies when processing personal data needed to carry out pre-contractual measures, for example, inquiries regarding products or services. If the legal or natural person is the subject of a legal obligation requiring the processing of personal data, such as compliance with tax obligations, the processing of personal data is based on Article 6, paragraph 1, subparagraph C of the General Regulation on the protection of personal data. In rare cases, the processing of personal data is necessary to protect the interests of respondents or other natural persons. For example, if a respondent gets injured while visiting the owner’s site, personal information such as name, age, health insurance information or other vital information will need to be forwarded to a doctor, hospital, or third party. Such processing of data is based on Article 6, paragraph 1, subparagraph D of the General Regulation on the protection of personal data. Finally, the processing of personal data may also be based on Article 6, paragraph 1, Subparagraph F of the General Regulation on the protection of personal data. This legal basis is used in the processing of personal data when no previous legal basis is applicable, if the processing of personal data is necessary for the legitimate interests of the owner of a 4uHa website or a third party, except in situations where those interests threaten fundamental rights and freedoms respondents who require personal data protection. Such processing of personal data is particularly permissible since it is specifically mentioned by EU legislation. It is foreseen that it is possible to invoke a legitimate interest if the respondent is a client of the personal data processing manager.

23. Legitimate interests of the personal data processing manager or third party

Where the processing of personal data is based on Article 6, paragraph 1, Subparagraph F of the General Data Protection Regulation, a legitimate interest is to conduct business for the benefit of the employees and / or shareholders, if any.

24. Period of storage of personal information

The criterion for determining the storage period of personal data is the statutory maximum storage period. After this period, personal information is routinely deleted until it is no longer needed to fulfill the contract or to enter into it.

25. Provision of personal data as a legal or contractual precondition; Prerequisite for contracting; Respondent’s obligation to provide personal information; possible consequences if personal information is not provided

We need to clarify that the provision of personal information is partially prescribed by law (eg tax provisions) or may result from a contractual obligation (eg contractual partner information). Sometimes it is necessary to conclude a contract so that the respondent provides personal information which is then processed. For example, a respondent is required to provide personal information when entering into a contract with the owner of a 4uHa company website. Refusal to provide personal information will result in an inability to contract. Before respondent provides personal information, they will need to contact the owner of the 4uHa company website. He will then indicate to him whether the provision of personal data is legally or contractually necessary, that is, necessary for the conclusion of the contract, whether there is an obligation to provide personal data and, ultimately, the consequences if he refuses to provide personal data.

26. Existence of an automated decision-making process

As a responsible business partner, 4uHa’s website does not use an automated decision-making process, that is, profiling.