• 1 General Information

This policy informs Users of our privacy policy regarding the collection, use and disclosure of Personal Information (“Personal Data”) we receive from customers and users of http://www.crocusconsult.com (hereinafter: the “Site”). Customers and users shall be referred to collectively as “Users”. Like many website operators, we collect information that users intentionally provide upon filling a contact form or provided by “cookies”.

The controller of Personal Data is: MIAMART s.r.o. with its registered seat on Lermontovova 3, 811 05 Bratislava, Slovakia, registered in the Commercial Register District – Court: Bratislava, Insert No: 150401/1, Section: SRO. Company Identification No: 53560841; Tax Identification No: 2121413624; VAT ID: SК2121413624. (hereinafter: the “Controller”).

The legal grounds for the processing of Personal Data are:

1. User’s expressed consent (Article 6(1)(a) of the GDPR) – for example through sharing contact data in order to receive market reports, newsletters and marketing content from the Controller;
2. the necessity to process Personal Data to undertake activities before the conclusion of a contract at User’s request or to perform a contract to which User is a party or to which User is a representative (Article 6(1)(b) of the GDPR) – e.g. responding to User’s queries;
3. the necessity to process Personal Data to fulfil the legal obligation incumbent on the Controller (Article 6(1)(c) of the GDPR) – e.g. processing of Personal Data for the purposes of client identification or fulfillment of tax obligations;
4. the necessity to Process Personal Data for the purposes of the legitimate interests pursued by the Controller (Article 6(1)(f) of the GDPR) – for example processing Personal Data in order to indemnify against claims.

The purpose of the processing of Personal Data is:

1. conducting informational and marketing activities by the Controller (e.g. sending real estate market reports, newsletters, trade offers, information about promotional actions, competitions and other events) – only subject to User’s expressed consent
2. taking actions aimed at concluding a contract between the Controller and the User (e.g. handling User’s queries and User – Controller communication);
3. performance of the agreement by the Controller (e.g. providing services in the scope of researching and leasing appropriate warehouse area, renegotiating existing lease contracts, sale and purchase of warehouse real estate and acquiring land for the purposes of industrial investments); protection of the legitimate interests pursued by the Controller.

Personal Data will be stored for the time necessary to perform the activities referred to in section 4 above and 7 years after their completion (the limitation period for claims), unless the applicable provisions of law impose on the Controller the obligation or right to store Personal Data for a longer period of time. Personal Data stored for the purposes of sending commercial information and direct marketing will be stored and processed until User withdraws consent to their processing, requests to remove or limit their processing, objects to their processing and/or requests their transfer, or due to the liquidation of the company activity.

The Controller collects Personal Data provided voluntarily by the User. Collected Personal Data includes name, surname, email address and contact telephone number. Users are not obliged to provide these data. Providing these data is not a statutory or contractual requirement. Failure to provide these data may result in inability to take actions aimed at concluding a contract, inability to perform the contract and take action related to it, as well as in the inability to fulfill legal obligations incumbent on the Controller.

The recipients of Personal Data are entities cooperating with the Controller in the scope of the Controller’s activity; entities providing services to the Controller (e.g. accountants, IT, legal, capital group members), authorized public administration organs.

Personal Data may be transferred to third countries. The Controller, each time when transferring Personal Data to a third country, shall undertake all necessary measures to ensure, that the transfer is in compliance with personal data protection regulations.

• 2 Data change or cancellation

Users have the right to:

1. in the case of Personal Data processing on the basis of expressed consent – withdraw consent at any time (though this does not affect the lawfulness of the processing of Personal Data from before the withdrawing of consent and the lawfulness of the processing of Personal Data on legal grounds other than consent);
2. object to the processing of their Personal Data;
3. demand access to his/her Personal Data, rectification and erasure of his/her Personal Data and demand limitation of the processing of his/her Personal Data and their transfer;
4. file a complaint to the supervisory authority (the President of the Office for Personal Data Protection).

In order to exercise User’s rights please contact the Controller by sending an email to info@crocusconsult.com. Upon User’s request the Controller will process User’s request within 30 days of receiving User’s message and inform the User about Controller’s activities in a separate e-mail sent to the e-mail address indicated in the form.

• 3 Security and storage of Personal Data

For the security of entrusted Personal Data, internal procedures and recommendations have been developed to prevent unauthorized access to Personal Data. the Controller monitors performance and constantly validates their compliance with the provisions of the Personal Data Protection Law and executive acts. A secure communication encryption protocol (SSL) is also used.

the Controller follows strict security procedures to ensure that User’s Personal Data is not damaged, destroyed, or disclosed to a third party without User’s permission and to prevent unauthorized access to it. Devices storing Personal Data are kept in a secure facility with restricted physical access and we use secure firewalls and other measures to restrict electronic access. 3. All the Personal Data we collect, or record is restricted to the Controller’s offices. Only employees who need the information to perform a specific job are granted access to the User’s Personal Data.

• 4 Use of cookies

Our Site uses cookies. The parameters allow to read information contained in them only to the server that created them. Cookies allow the use of information on previously visited websites.

Our cookies do not identify nor contain any Personal Data. Cookies cannot read information from User’s computer or interact with other cookies on User’s hard drive.

The information collected relates to the IP address, type of browser used, language, type of operating system, Internet service provider, time and date, location and information sent to the website via the contact form.

The collected Personal Data is used to monitor the use of our Site to improve its functioning, ensuring more effective and problem-free navigation. We monitor information about the user through Google Analytics, which records user’s behavior on the Site. Users can opt out from being tracked by Google Analytics with effect for the future by downloading and installing Google Analytics Opt-out Browser Addon for User’s current web browser: https://tools.google.com/dlpage/gaoptout?hl=en

On our Site we use the following cookies:

1. “Performance” cookies, enabling the collection of information about the use of the Site;
2. “Functional” cookies, allowing “remembering” the settings selected by the user and personalizing the user’s interface, e.g. in terms of the language or region the user comes from, the size of the font, the appearance of the website, etc.;
3. We use the following types of performance cookies:
4. SC_ANALYTICS_SESSION_COOKIE – these performance cookies are delivered by Sitecore. These files save information on visited sites and the length of visits. The Controller uses this information in order to make the Website better. These files are not used to identify the persons that use the Site.
5. SC_ANALYTICS_GLOBAL – these performance cookies are delivered by Sitecore. They monitor repeated visits that the User makes to the Site during the year. The Controller uses this information in order to make the Website better. These files are not used to identify the persons that use the Site.
6. ProspectFinder – these performance cookies are delivered by enecto. They monitor the websites visited by the User during one session and allow the identification of corporate Users on the basis of the IP address they use to access the Site. IP adresses are used to monitor the companies that visit the Site. These files are not used to identify the persons that use the Site.
7. Google Analytics cookie (“_utma/b/z2) – these performance cookies delivered by Google allow for measuring and analyzing the information on visitors, such as information on the browser in use, the numer of visits and visitors to the Site. The information generated by such cookies pertaining to the use of the Site (including the IP address of the User) are transferred and kept by Google on servers located in the United States.

We use the following types of functional cookies:

1. USE_COOKIES – these files are placed in order to determine, if the User allowed the use of cookies.
2. PREFERRED_SITE – these files are used in order to track the country setting chosen by the User.
3. Website#lang – these files are delivered by Sitecore. They are used to track the choice of language made by the User. Their names are different depending on the modified site name (for example crocusconsult#lang). 8. Users may refuse the use of cookies by selecting the appropriate settings on User’s browser, however, please note that it may limit full functionality of this website.

• 5 Final provisions

The Controller reserves the right to make changes to the Privacy Policy, which may be affected by the development of Internet technology, possible changes to the provisions of the Personal Data Protection Law and the development of the website and Services provided by the Controller. The Controller will inform Users about any changes in a visible and understandable way.

On our Site, the links to other websites may appear. Such websites operate independently of the Controller and are not in any way supervised by the Controller of Personal Data. These sites may have their own privacy policies and regulations that we recommend reading.