Privacy policy
INTRO
This Privacy Notice informs you about the data we collect about you, how we use such data, and with whom we share it. It is very important for us that you read the following Privacy Notice to be informed about the processing of your personal data and your rights under applicable data protection.
1. DEFINITIONS
2. ABOUT SERNITY
3. COLLECTING, PROCESSING, AND KEEPING PERSONAL DATA
3.1. GENERAL INQUIRY VIA EMAIL
3.2. YOU INITIATED COMMUNICATION WITH US OVER SOCIAL MEDIA PLATFORMS
3.3. WHEN YOU BROWSE OUR WEBSITE
3.4. NEWSLETTER SUBSCRIPTIONS
3.5. LINKS TO OTHER WEBSITES
4. WHO WE SHARE PERSONAL DATA WITH
5. TRANSFERING THE PERSONAL INFORMATION IN THIRD COUNTRIES:
6. YOUR RIGHTS:
6.1. THE RIGHT TO OBJECT TO THE USE OF YOUR DATA
6.2. HOW TO EXERCISE YOUR RIGHTS
6.3. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
7. CHANGES TO THIS PRIVACY NOTICE:
1. DEFINITIONS
Serenity Studio or US or WE refers to the Serenity Studio, obrt za usluge, Kustošijanska 313, 10000 Zagreb, Croatia.10000 Zagreb
sandra@serenitystudio.hr
GDPR – the EU General Data Protection Regulation (the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC).
SERVICES means purchase and sale of products offered by Serenity Studio.
PERSONAL DATA / PERSONAL INFORMATION means any information that relates to an identified or identifiable living individual.
CONTROLLER means the natural or legal person which determines the purposes and means of the processing of personal data, and that person is responsible for processing such personal data in accordance with the GDPR and other applicable personal data protection European laws and the laws of the Member States on the protection of personal data.
PROCESSOR refers to a natural or legal person who processes personal data on behalf of the controller.
SUB-PROCESSOR refers to a natural or legal person who processes personal data on behalf of the controller, as specified in the agreement and in accordance with our instructions.
YOU refers to an individual, natural person, whose personal information is collected and processed by Serenity Studio.
2. ABOUT SERENITY STUDIO:
We, Serenity Studio, obrt za usluge, Kustošijanska 313, 10000 Zagreb, Croatia.10000 Zagreb will be held responsible as a Controller for all personal data you provide us with in connection with offering our Services.
SERENITY STUDIO is a trading for own account offering purchasing and sale of Services. While providing these services to our customers and processing personal data, we act either as the controller or the processor, depending on the situation.
We act as the controller in situations when we process personal information for our own purposes, and we are committed to processing that information as described in this Privacy Notice.
Contact details:
Serenity Srudio, obrt za usluge
Kustošijanska 313
10000 Zagreb
Croatia
or
E-mail:
sandra@serenitystudio.hr
3. COLLECTING, PROCESSING, AND KEEPING PERSONAL DATA
Unless otherwise agreed with you, we will collect only the basic personal data required in connection with our business relationship. While doing business with you, we will also collect business-related data which may include information on purchases, services and other business activities, product feedback and any other information you may provide to us.
We might collect your personal data directly by you or indirectly for one of the following reasons:
1. General inquiry via email;
2. You initiated communication with us over website contact form of social media contacts;
3. When you browse our website – third party service (i.e. Google Analytics);
4. Newsletter subscriptions
5. From other sources (e.g. public databases, joint marketing partners, social media platforms, from people you are connected to on social media platforms, public forums, and other third parties).
We collect personal data depending on the above-mentioned specific situation. We collect the only necessary information.
3.1. General inquiry via email – when you contact us with a question about our services and when we are looking for new business opportunities
Personal data we collect: name, e-mail address, phone number, country, and related information such as your company’s name, business role, telephone number.
Legal basis for collecting the data: performance of a contract (GDPR article 6.1.(b), legitimate interest according to GDPR article 6.1.(f) in the sense of providing our Services to you.
Time period for keeping the data: if we do not enter into an agreement, we will delete your personal data within 6 (six) months after our last communication. Also, on the basis of legitimate interest, if you no longer wish to be contacted, you can object by sending an email to
3.2. You initiated communication with us over social media platforms
Personal data we collect: name, e-mail address, and telephone number.
Legal basis for collecting the data: consent (GDPR article 6.1.(a), legitimate interest according to GDPR article 6.1.(f).
Time period for keeping the data: in the case you did not purchase our Services, when based on the legitimate interests we will keep the data until you object to the processing of your personal data for this purpose, or, in the case of the given consent until you withdraw your consent.
3.3. When you browse our website – third party service(i.e. Google Analytics)
Personal data we collect: usually we collect IP addresses, browser type, the pages you’ve visited and the order you visited them, as well as whether you’re a new or returning visitor. This information is only processed in a way that does not identify anyone, but is helping us to maintain and improve our website and business. For more information please read our
Cookie Policy
Legal basis for collecting the data: consent (GDPR article 6.1.(a), legitimate interest according to GDPR article 6.1.(f).
Time period for keeping the data: until you object to the processing of your personal data for this purpose, and until you withdraw your consent – for more information please read our
Cookie Policy
3.4. Newsletter subscriptions
Personal data we collect: e-mail address, name.
We will send you updates and information about our new products and services, upcoming events or other advertising campaigns or news via email. We also gather statistics around email opening and click rates.
Legal basis for collecting the data: consent (GDPR article 6.1.(a), legitimate interest according to GDPR article 6.1.(f) in the sense of informing you about Us and our Services.
Time period for keeping the data: in the case of marketing communication is based on our legitimate interests we will keep the data until you object to the processing of your personal data for this purpose, or, in the case of the given consent – until you unsubscribe (i.e. withdraw your consent).
SERENITY STUDIO may save your e-mail address for the purpose of sending promotional and educational newsletters. Your e-mail address is stored in Kutina, on the company’s server, and will also be forwarded to the Mailchimp service that we use to send newsletters. We will keep your e-mail address until you unsubscribe from the newsletter. You can withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing based on consent prior to its withdrawal. You can unsubscribe from receiving our newsletter at any time by clicking on the Unsubscribe icon that you will have in each individual issue of the newsletter. By withdrawing your consent you will no longer receive our newsletters but you will still be able to use our website and our other services.
3.5. Links to other websites
This website contains links to other websites. Please note that SERENITY STUDIO cannot be held responsible for respecting the privacy of other websites. We encourage our users to read the privacy statements of each website that collects personal information. This Privacy Notice applies solely to information collected on the eshark.gg website.
4. WHO WE SHARE PERSONAL DATA WITH
We may share your personal information with:
– third parties as sub-processors, where required or permitted by applicable law;
– third parties as sub-processors in order to provide specific functionalities such as targeted marketing and other tools necessary for providing our services;
– third parties who are legally authorized to process credit decisions, fraud prevention and to pursue debtors; and
– third parties who are legally authorized to request access and sharing of your personal information, for the purposes of criminal procedures or because of threats to public security.
Otherwise, no third parties will have access to your personal information unless there is a legal requirement or you give us permission to do so.
5. TRANSFERING THE PERSONAL INFORMATION IN THIRD COUNTRIES:
Considering the mentioned above, we may share your personal information with third parties which are situated outside of the European Economic Area, however, all transfers of personal information are done in accordance with EU GDPR data protection standards.
6. YOUR RIGHTS:
In accordance with EU General Data Protection Regulation you have the right to:
– The right to be informed about the collection and use of your personal information is a key transparency requirement under the GDPR;
– The right of access to personal information, which means to request a copy of your personal information we hold about you;
– The right to rectification of your personal information if the information is incomplete or inaccurate;
– The right to erasure (the right to be forgotten) when your personal information is no longer needed or when your personal information has been used unlawfully, in accordance with your request for erasure;
– The right to restrict the processing of your personal information in certain circumstances as an alternative to the right to erasure of your personal information;
– The right to data portability means that we can obtain and reuse your personal information for our own purposes;
– The right to object to the processing of your personal information in a way that will stop or prevent us from processing your personal information on our legitimate interest, e.g. for direct marketing purposes;
– Rights in relation to automated decision making and profiling; and
– The right to file a complaint with your national Data Protection Authority (DPA).
You can exercise above mentioned rights in accordance with the EU General Data Protection Regulation and national regulations on personal data protection.
6.1. THE RIGHT TO OBJECT TO THE USE OF YOUR DATA
You have the right to object, i.e. to stop or prevent the organization from using your data in certain circumstances, and we may not need to stop processing your personal data if we give you strong and legitimate reasons to continue using your data.
You can only object to processing when we are using you data:
– For our legitimate interests; and
– For direct marketing purposes.
In cases where we invoke a legitimate interest as a legal basis for processing of your data, at any time you may lodge an objection against such processing. In that case, we are obliged to prove to you (1) that there are convincing legitimate reasons for data processing on our or third party’s side, which go beyond your interests, rights or freedoms, or (2) that data processing is necessary for us to establish, exercise or defense of legal claims.
On the other hand, in the case of direct marketing purposes, we cannot refuse your objection and we will stop using your data for direct marketing purposes. You can exercise this right by using the unsubscribe link.
6.2. HOW TO EXERCISE YOUR RIGHTS
If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact our Data protection Officer by sending an email to:
sandra@serenitystudio.hr
6.3. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that we are processing your personal data illegally, you have the right to lodge a complaint with the personal data protection supervisory authority. In the Republic of Croatia this body is Agencija za zaštitu osobnih podataka ( www.azop.hr ). If your habitual residence, place of work or place of the alleged infringement is in another EU Member State, or you believe that your rights have been violated in another EU Member State, in any cases, you can lodge a complaint with a supervisory authority of that country.
7. CHANGES TO THIS PRIVACY NOTICE:
This Privacy Notice last update was in April 2021. From time to time you may wish to check back if this Privacy Notice has changed or amended as required to comply with applicable data protection law.
If you have any questions about your privacy, or you wish to withdraw your consent for the processing of your personal data, or to exercise any of your rights arising from this Notice, you can do that at any time by sending an email to:
sandra@serenitystudio.hr
English 
Croatian