PRELIMINARY PROVISIONS
REGOS Privacy policy (hereinafter: Policy) defines the basic principles and rules of personal data protection, which we implement in accordance with relevant regulations, opinions of regulatory bodies and good practices in the field of data protection.
The main task of REGOS is the collection and processing of data on receipts and contributions for the pension insurance pillars I and II, management of unified accounting of personal accounts of compulsory pension fund members, transfer of total assets of compulsory pension fund members from closed personal accounts to legal recipients, keeping of the register and reporting, electronic exchange and delivery of data from the register.
REGOS has established personal data protection management processes by consolidating an organizational structure with roles and responsibilities. We have established rules and principles of processing, protection measures, we have established reporting processes, supervision, and we are working on raising awareness in the field of personal data protection.
We continuously implement appropriate technical and organizational measures for personal data protection, taking into account the nature, scope, context and purpose of processing, as well as exposure of personal data protection to risk.
This Policy applies to the collection, processing and protection of your personal data and the use of cookies and other similar analytical tools when visiting and using the services on the https://www.regos.hr website.
PURPOSE OF AND LEGAL GROUNDS FOR PERSONAL DATA PROCESSING
REGOS processes your personal data primarily when their processing is necessary for the performance of basic tasks of REGOS, and does so in accordance with the regulations of the Republic of Croatia and the European Union law.
We process your personal data on the basis of law, contracts, legitimate interest and/or consent in order to:
- perform the tasks of REGOS in accordance with the applicable regulations https://regos.hr/en/about-regos/legal-framework/
- implement the procedures for procurement of goods, works and services and to conclude and implement procurement contracts
- implement employment tenders, conclude employment contracts and fulfill the rights and obligations from the employment relationship, etc.
- addressing your requests for exercising the right to access information, based on the Act on the Right of Access to Information
You can find a detailed description of personal data categories and purpose of their processing in the following documents:
PERSONAL DATA PROCESSING THROUGH VIDEO SURVEILLANCE
REGOS may process your personal data in the event of a visit to the business premises of REGOS. Such processing is based on the legitimate interest of REGOS. Recordings obtained through the video surveillance system will be submitted by REGOS upon request to competent authorities (police, court) if it is necessary for carrying out procedures based on special regulations.
We keep the recordings obtained through the video surveillance system for a maximum of six months, except in the case of judicial, administrative, arbitration or other proceedings, when we keep the recordings until the proceedings have been definitively concluded.
SHARING OF PERSONAL DATA
In certain cases, REGOS may transfer your personal data to other persons, if required by regulations.
We may forward your personal data for use to providers of IT and technical solutions and services who act as processors. We have concluded contracts or agreements with the aforementioned processors, in which the handling of personal data is laid out in detail. Therefore, they are not able to process your personal data without our order and to forward them to third parties.
REGOS will not share your personal data with other people for marketing purposes.
Your personal data will not be available to anyone who is not authorized by REGOS.
SECURITY OF PERSONAL DATA AND TERMS OF USE
We collect and process personal data in a way that ensures adequate security and confidentiality and enables effective application of data protection principles.
All REGOS employees undertake to keep data by signing an employment contract.
REGOS undertakes all appropriate technical and organizational protection measures taking into account the nature, scope, context and purposes of processing, as well as exposure to the risk of personal data protection with the aim of preventing accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure or access to data.
RIGHTS OF DATA SUBJECTS
The data subject, the person whose data is being processed, can at any time request the exercise of the following rights:
- the right of access to data
- the right to correct or supplement personal data
- the right to data deletion
- the right to restriction of personal data processing
- the right to withdraw consent/permission for data processing
- the right to object to the processing of personal data
However, we draw attention to the fact that the exercise of users’ rights may be limited or excluded. Sometimes, REGOS will not be able to comply with the user's request, if such action would be in conflict with the legal obligation of REGOS arising from Croatian or European Union regulations, or if such action is impossible due to protection of the public interest of the Republic of Croatia, preserving professional secrecy or due to the exercise of the official authority of REGOS to carry out certain processing of personal data.
USE OF COOKIES
The REGOS website uses cookies for the purpose of improving your user experience, facilitating the functionality of our services and measuring the REGOS website traffic. You can find more information about cookies at the following link: https://regos.hr/vise-o-kolacicima.
We will not use any cookies or similar technologies for which we do not obtain your consent, except for those cookies and similar technologies that are strictly necessary for the functioning of the REGOS website.
CONTACT DETAILS
For all questions about our Privacy Policy and about the processing and protection of personal data, please contact us at:
- zastitapodataka@regos.hr
- REGOS, Gajeva 5, 10 000 Zagreb, with the indication "For the data protection officer".
PRIVACY POLICY CHANGES
Privacy policy of REGOS can be amended at any time by publishing an amended text. You will be informed about this in a timely manner through our website in accordance with the principle of transparency.
This Policy was last updated on 1 October 2024.