Information on data processing – IC Website

1. INTRODUCTION

Control of personal data collected through the online platform of Inter Cars Kosova (hereinafter: Service or Platform), the entity that decides e.g. how your personal data will be used is Inter Cars Kosova Int sh.p.k. (hereinafter: Controller). Contact with the Controller is possible via the telephone number +383 48 304 307 and email [email protected] The data controller is responsible for the security of the personal data provided and for their processing in accordance with the law.

Your personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR) as well as Law No. 06/L-082 on the Protection of Personal Data of the Republic of Kosovo and other data protection laws currently in force.

During a visit to the Website, the following is collected:
- personal data provided by the user of the Website,
- data collected and recorded automatically.

2. DATA COLLECTED – BASIC INFORMATION

The following information refers to all uses of personal data provided by you and by the Controller.

The controller processes the personal data of:
- users of the Website who use services and functionalities, the use of which does not require login (e.g. contact form, access to information and content that does not require the creation of an account).

Your data will not be used to make decisions based solely on automated processing of personal data, including profiling within the meaning of Article 22 of the GDPR and Article 21 of the Personal Data Protection Law.

While respecting all data security guarantees, personal data processed through the Service may be communicated – in addition to persons authorized by the Controller – to other entities, including:
- entities that have the right to receive them in accordance with legal provisions,
- entities that process them on behalf of the Controller, e.g. technical service providers, analytical service providers, entities that provide consulting services,
- other data controllers to the extent necessary for the fulfillment of the contract, services and legal requirements, e.g. notary or legal offices, contractors providing services to the controller on the basis of concluded contracts, auditors.

The Controller, to the extent necessary for the proper performance of the contract, may transfer your personal data to countries outside the European Economic Area (hereinafter: EEA), which guarantee a high level of protection of personal data. These guarantees come in particular from the obligation to implement the standard contractual clauses adopted by the European Commission. The Controller may also transfer data to countries outside the European Economic Area that do not guarantee an adequate level of protection. However, the Controller will ensure that the transfer is carried out in a safe, controlled manner and secured by appropriate agreements with their recipients that meet the established legal conditions.

3. USER RIGHTS

The Controller informs that, in relation to the processing of personal data obtained through the Service, each data subject has the right to make a request regarding:
1) access to data (information on the processing of personal data or a copy of the data),
2) correction of data (when it is incorrect),
3) erasure of personal data (right to be forgotten),
4) restriction of processing of personal data,
5) transfer of data to another controller,
6) objection to the processing of your data when the basis for the processing is the legitimate interest of the Controller,
7) withdrawal of consent when the Controller will process personal data on the basis of consent, at any time and in any manner, without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal - according to the principles set out in the law.

Every data subject has the right to file a complaint with the supervisory authority such as the Information and Privacy Agency of the Republic of Kosovo if they consider that the processing of personal data is not in accordance with the law.

4. PERSONAL DATA PROVIDED BY THE USER

Your personal data may be processed by the Controller in particular:

For the use of the website (legal basis - Article 5(1)(1.2) of the Personal Data Protection Law) - 'performance of the contract'.

For the purpose of marketing communication by electronic means of communication (in particular email, web-push), if you have given your specific consent to the processing of your data for this purpose (legal basis - Article 5(1)(1.1) of the Law on the Protection of Personal Data) - 'consent'.

5. AUTOMATICALLY COLLECTED DATA

Using the Website involves sending requests to the server, which are automatically recorded in event logs. Event logs record user session data. In particular, these include the IP address, device type and name, date and time of visit to our service, information about the web browser and operating system.

The data stored in the event logs are not linked to specific individuals. Access to the content of the event logs is limited to persons authorized by the Controller to administer the Service.

A chronological log of event information is only auxiliary material used for administrative purposes. Analysis of event logs makes it possible, in particular, to detect threats, ensure proper security of the Service and perform statistics to obtain a better understanding of how the Service is used by users.

User session data is used to diagnose problems with the functioning of the Platform and to analyze possible security breaches, to manage the Service and to perform statistics (legal basis - Article 5(1)(1.5) of the Law on the Protection of Personal Data) - 'legitimate interest'.

The service uses cookies for its operation. Please see below for more information -cookie policy.

6. FINAL PROVISIONS

The Controller reserves the right to make changes to this document, in particular in the event of:
- technology development,
- changes in the general applicable legal provisions, including those related to the protection of personal data or information security,
- development of the Service (e.g. implementation of additional functionalities and services).

The Controller will inform users about changes to this document by posting an appropriate notice on the website.