Gallanta Chairs

IT Media as Data Controller

IT Media d.o.o., Vukovarska 36, ​​20000 Dubrovnik, OIB: 123456789 (hereinafter: "Gallanta") as a data controller takes care of the protection of your privacy. With this Personal Data Protection Policy, we want to inform you how we collect and process your personal data, and at the same time familiarize you with your rights in accordance with the General Data Protection Regulation EU 2016/679. You can contact us on the phone numbers or through the contact form available on our website www.gallantachairs.com in the Contact section.

Data Protection Officer

Gallanta takes modern technical and organizational measures to protect users' personal data, and for all questions related to the protection of personal data, we have appointed a data protection officer whom you can contact at szop@gallanta.com or by writing to Ulica grada Vukovara 36, ​​20000 Dubrovnik with the indication "for the Data Protection Officer".

What personal data we collect

• When signing up for our newsletter

  If you want to receive information about our products and services, you can sign up for our newsletter via the website. In this case, we only process your e-mail address while you are receiving the newsletter. By registering, you give us your consent, which you can withdraw at any time by unsubscribing from the newsletter. Providing information about your e-mail address and signing up for the newsletter, which represents your consent, are conditions for receiving the newsletter.



• If you want to become a member of the Gallanta team

  On our website you can find advertisements for open positions or you can send us an open application in which you can write what you want to do and how you see the continuation of your career in our team and send us your resume. We process basic information about the candidate, contact information, information about education and work experience, as well as other information that the candidate himself submits in his resume, and which are necessary for us to consider for the purpose of establishing an employment relationship, that is, in order to take actions before concluding an employment contract. If you applied for an open job advertisement, we process your personal data only during the selection process and then store it for a period of 24 months, and if you sent us an open application, we will store it based on your consent until we need a new one. an employee of your description, and for a maximum period of two years. If you sent an open application, and after that you no longer want your CV to be stored with us, inform our officer about the withdrawal of consent and your data will be deleted.



• When you contact us via the contact form, e-mail or phone

  On our website, you have a contact form at your disposal through which you can send us your inquiries as well as the phone numbers of our services. The legal basis for processing this personal data is consent. In this case, we process your first and last name, e-mail address and phone number and other data that you make available to us, all for the purpose and for the time required to respond to your inquiry.



• When you use our products and services

  When providing reservation services or purchasing products/services online, Gallanta may act as a manager or executor depending on the individual contractual relationship with the business partner. During implementation, we process the following personal data: name and surname, address, postal code and city, phone number, e-mail address, card number, card expiration date and CVC number entered by users in hotel, restaurant, etc. reservation forms. , with whom we have arranged contractual relations, and we provide services for their guests for the purpose of payment or reservation of products and services. The purpose of data processing is to process requests for the purpose of realizing our clients' products/services, and Gallanta collects only those data that are a necessary prerequisite for their implementation. Please note that Gallanta does not store card data, but tokenizes and prepares a one-time use process within a given time frame created by the guest.



• When you visit our website - Cookies

  A cookie is information that can be stored on your computer or other device such as a tablet or mobile phone when you visit a website. The cookie saves your settings, i.e. settings for the website, such as the desired language, sorting, etc. In this way, the content of the website is adapted to your needs. Cookies can store a range of information, including some personal data, but only if you enable it. We use cookies to determine and analyze website traffic and to provide you with a better experience in using all services through our website. You can disable cookies by blocking them on your computer through the Internet browser settings, but this may have a negative effect on the use of Internet pages. Learn more about cookies in our Cookie Policy.

With whom we share your personal data

We may share your data with third parties:

• processors who provide us with a specific service that includes data processing, and who have a contractual obligation to maintain confidentiality and ensure the security of your personal data processing;
• providers of other services with whom we cooperate for the purpose of providing our services, the so-called third parties;
• state authorities at their request.

Your rights

• Right of access

  At any time, you can request confirmation of whether your personal data is being processed and detailed information about the processing, in particular about the purpose of the processing, about the type/categories of personal data that are being processed, including access to your personal data, about the recipients or categories of recipients, and about the intended period in which personal data will be stored.



• Right to rectification

  You have the right to obtain the correction of incorrect and incomplete personal data without delay.



• Right to erasure

  You have the right to request the deletion of your personal data. If the request is justified and if the law does not oblige us to store data, the data will be deleted without undue delay.



• Right to restriction of processing

  You have the right to request the restriction of the processing of your personal data in cases provided for by the General Data Protection Regulation EU 2016/679. In particular, we emphasize that you can limit the processing of personal data based on legitimate interest as a lawful basis for processing.



• Right to object

  You have the right to object to the processing of your personal data in all cases provided for in the General Regulation. We especially point out that you can raise an objection to processing based on legitimate interest as a legal basis for processing and limit or completely prohibit processing.

In order to ensure and simplify the exercise of your rights, we have prepared a request form for exercising the rights of the data subject that you can send to our data protection officer at szop@gallanta.com. It is possible that in certain cases we will ask you to prove your identity. If your personal data is the subject of processing based on your consent, you can withdraw your consent at any time, but this will not affect the legality of the processing that was based on consent before its withdrawal. In the event that you believe that the processing has resulted in a violation of your personal data and a violation of the provisions of the General Regulation, you can submit a complaint to the supervisory authority - the Personal Data Protection Agency.

Security of personal data processing

We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables effective application of data protection principles, reduction of the amount of data, scope of their processing, storage period and their availability. For this purpose, we have introduced appropriate technical and organizational protection measures that ensure a level of security that corresponds to the risks posed by data processing and the nature of the personal data being protected, bearing in mind the characteristics and costs of their introduction.

Since the services provided by Gallanta include the processing of card data, they are collected and processed at high levels of protection in accordance with the PCIDSS standard with the application of cryptographic methods. We regularly review processing that may pose a risk to the rights and freedoms of individuals and have taken appropriate protective measures to protect personal data from accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, especially in cases where processing involves the transfer of personal data via networks and from all other illegal forms of processing.

Amendments and entry into force

Gallanta regularly reviews, supplements and changes this Personal Data Protection Policy to always reflect the actual state of personal data collection and processing. All amendments and additions shall become effective on the date of publication on this website.

The last amendments were published: May 14, 2024.