Your privacy is important to us. This Privacy Policy describes how DESTILERIJA KULINA d.o.o., Derventa, Kulina 92, 74400, Derventa (“we”, “us”, “our”) collects, uses, and protects the personal data you provide to us through the korijenrakija.com website (“Website”), in accordance with the Personal Data Protection Act of the Federation of Bosnia and Herzegovina and the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).
Below, we want to inform you about the personal data we collect when you visit our korijenrakija.com website, as well as the purposes for which those data are processed.
Our website is not intended to provide services to persons under 18 years of age.
What is the purpose of the Privacy Policy?
The General Data Protection Regulation (EU) 2016/679, adopted by the European Parliament and the Council on 27 April 2016, has been directly applicable in all EU Member States since 25 May 2018 and represents a binding legal framework. The purpose of this regulation is to ensure the protection of individuals’ rights to privacy and the security of their personal data during processing.
The Privacy Policy is designed to provide transparency on how personal data is collected, processed, and protected, and ensures a consistent and legally compliant approach to data processing within Bosnia and Herzegovina as well as the entire EU, including transfers of data to countries outside the EU.
Who are we?
DESTILERIJA KULINA d.o.o., based in Derventa, Kulina 92, 74400 Derventa, acts as the data controller of your personal data and is responsible for determining the purposes and methods of processing, as well as implementing all necessary measures to protect your data. In the case of customer data, it also acts as a joint data controller together with the affiliated distributor company.
What data do we process, how, and for how long?
Collection of data submitted via the contact form
When sending inquiries through the contact form, we require your basic personal data (name and surname) and contact details (phone and email) in order to process your inquiry and provide feedback.
We retain data as long as we have your consent, if processing is based on consent, or as long as we have a legitimate interest to process data if the data is processed based on legitimate interest. If you are interested in specific data retention periods, you can always contact our data protection officer.
The mandatory set of basic personal data provided in communication with our company (name, surname, personal identification number/OIB, address, service performed) is collected and stored for invoicing purposes in accordance with applicable accounting and tax regulations.
Who processes your personal data?
The data controller collects and processes your personal data through this website for marketing purposes, business process improvement, and enhancing user experience, fully complying with applicable personal data protection regulations.
This Privacy Policy describes how the data controller processes the personal data of customers and/or potential customers.
The data controller implements appropriate technical and organizational measures to ensure the security and protection of your personal data from unauthorized access, loss, or misuse.
For any questions related to personal data processing, you can contact our data protection officer via email at info@korijenrakija.com.
Our website contains links to other websites and social media platforms (such as Facebook and Instagram) that have their own privacy policies, to which this Privacy Policy does not apply. The data controller is not responsible for the practices and conditions of third parties. You can read more about third-party privacy policies on their respective sites.
Consumer’s right to complain
Every customer is guaranteed the right to submit a complaint regarding the services provided and the delivered product. For complaint processing purposes, we collect the necessary personal data of the complainant, which we store for up to 12 months in accordance with the regulations governing consumer rights protection.
Who can have access to your data?
In providing and improving our services, we rely on verified and trusted business partners. Your personal data may be accessible exclusively to authorized external processors, for the purpose of processing your inquiries, order fulfillment, and delivery. All partners we cooperate with are committed to strict confidentiality and are required to comply with this Privacy Policy and applicable data protection regulations.
Your rights
You can contact us at any time to exercise your rights in the field of personal data protection. In accordance with applicable regulations, you have the following rights:
Right to access personal data
You have the right to request confirmation of whether we process your personal data, as well as access to those data. You also have the right to know which data we process, for what purposes, on what legal basis, and for what period, and to request a copy of your personal data.
Right to rectification
If you believe that some of the data we hold about you are inaccurate or incomplete, you have the right to request their correction or completion.
Right to object
You have the right to object at any time to the processing of your personal data, especially when it is processed for direct marketing purposes (e.g., sending newsletters).
Right to restriction of processing
In certain situations, you have the right to request the restriction of processing of your data. This includes cases when you dispute the accuracy of the data, when you object to data erasure despite the lack of legal grounds for processing, or while your objection is being processed.
Right to erasure (“right to be forgotten”)
You may request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected, if you withdraw consent, lodge a justified objection, or if the data are unlawfully processed.
Right to data portability
If your data are processed automatically on the basis of a contract or consent, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and, if necessary, transfer them to another data controller.
Right to withdraw consent
You may withdraw your consent at any time, after which we will stop processing data based on that consent. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. You can withdraw your consent by contacting our data protection officer via the contact information provided at the beginning of this Policy.
If you believe that the processing of your personal data by our organization is not in compliance with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority – the Croatian Personal Data Protection Agency (AZOP), Metela Ožegovića 16, 10000 Zagreb, phone: 01 4609 000, email: azop@azop.hr for the territory of Croatia. For Bosnia and Herzegovina, the competent authority is Federalna uprava za inspekcijske poslove, Odjel za zaštitu osobnih podataka, Hamdije Kreševljakovića 8, 71000 Sarajevo, phone: +387 33 278 400, email: info@fuzp.gov.ba.
The need for cookies and tracking technologies
Here we want to inform you about how we use cookies and related tracking technologies on our websites.
Cookies
Our website uses cookies – small text files stored on your device – to customize the user interface and improve browser functionality. Before any non-functional cookies are activated, we request your consent through a cookie consent banner.
Categories of cookies we use:
Functional – necessary for the proper functioning of the website
Statistical – help us understand how users use the site (e.g., Google Analytics)
Marketing – used to track users to display relevant ads
Details about cookies can be found in the Cookie Policy.
Cookies necessary for the proper functioning of the website cannot be disabled because they are essential for basic services such as privacy settings, login, or completing forms. Such cookies are set as a response to your activities on the site.
All other cookies, especially those collecting personal data for analytical or marketing purposes, are used only with your prior express consent. If you do not give consent, you can still freely use all functionalities and contents of our website. Using our website is possible without accepting cookies. You can adjust or completely disable cookie usage at any time in your browser settings. You can also manage cookies via settings in the Cookie Policy.
Data sharing with third parties
Data may be shared with trusted third parties providing analytics and behavioral tracking services on the website:
Google LLC (Google Analytics) – USA (data transfer according to standard contractual clauses, data center within the EU)
Microsoft Corporation (Microsoft Clarity) [heatmap tool name, e.g., Hotjar Ltd.] – USA (data transfer according to standard contractual clauses, data center within the EU)
All our partners commit to data protection in accordance with GDPR and the Personal Data Protection Act of the Federation of Bosnia and Herzegovina.
9. Updating the Privacy Policy
We reserve the right to periodically amend or supplement this Privacy Policy, primarily to comply with changes in legal regulations or changes in the purpose and manner of personal data processing.
Regardless of any amendments, we will never limit or diminish your rights guaranteed by this Privacy Policy or applicable law.
In the event of significant changes that may affect your rights or the way your data is used, we will inform you promptly and clearly via this page or another appropriate channel.
