Privacy policy

1. Introduction

1.1 In order to protect your personal data, Fabrika dečje hrane d.o.o. Dobanovci, Maršala Tita 206, registration number 21212270 (hereinafter referred to as ‘Fabrika’), in the capacity of controller, informs you in this Privacy Policy of the method of processing your data that becomes available to Fabrika through your use of the websites www.babyfoodfactory.com, nutrinobebe.com, and nutrinolab.com.

1.2 Fabrika takes care of your privacy and processes all your personal data in a legal, fair, and transparent way, fully in compliance with the Law on Personal Data Protection, GDPR, and other territorially applicable regulations governing personal data protection (hereinafter referred to as ‘Law’).

1.3 The below text of the Privacy Policy informs you in detail about what personal data we collect and how we process it.

2. Technical data

2.1 Access to Fabrika’s website is possible without registering.

2.2 When accessing the website, the data about the unique IP address, which is anonymized, is recorded. The IP address is used to log sessions, enable website security, and process potential access misuse.

2.3 Furthermore, when visiting websites, hosting and internet service providers record metadata: tracking and determining the source and destination of communication; initiation, duration, and termination of communication; transfer status; transferred data size; identification of the user’s terminal equipment; location of the user’s mobile terminal equipment; browser software type, language, and version, and operating system.

2.4 The internet service operator providing a person with service can identify the person based on the IP address used at a specific time, at the request of the relevant national authority, in line with the applicable regulations.

2.5 In the above cases, the legal basis for processing your personal data is the operator’s legitimate interest, bearing in mind that these data are required for the normal technical functioning of websites and identifying sessions.

3. Cookies

3.1 Fabrika’s website uses cookies. Cookies are files in your browser that are stored on your device and that contain certain settings and data for exchange with our system. Cookies can be temporary, if they are stored during the session, or permanent, if they are stored after the session.

3.2 The different types of cookies depend on their purpose: — Functional cookies — enable smooth functioning of the website and their basic features;— content setting cookies — enable personalized features: remembering your website settings (for example, the selected language); — marketing cookies — monitor the visitor behaviour for the purpose of targeted marketing (showing relevant promotional content). Marketing cookies can come from external advertising companies (third-party cookies), and they are used to collect information about the websites visited by the user for the purpose of user-targeted advertising.

3.3 Fabrika is authorized to use functional cookies without your consent, and you will be informed about the cookies we use via a ‘cookie banner’ when you first access the website in order to consent to their use.

3.4 You can delete cookies on your computer at any time or change your browser settings pertaining to cookies. However, keep in mind that if you change the cookie settings, you might not be able to use all the features of the website.

3.5 In this case, the legal basis for processing cookies is your consent and Fabrika’s legitimate interests.

4.Google Analytics

4.1 Our websites www.nutrinobebe.com and www.nutrinolab.com use Google Analytics, an analytical service by Google Inc. 1600 Amphitheater Parkway, Mountainview, California 94043, USA (hereinafter referred to as ‘Google’). Google Analytics uses cookies that help analyse users’ website use: the pages you visit on Fabrika’s website and the time you spend on them, the number of active visitors, click analysis, visitor interests and demographic indicators, the pages from which you visit Fabrika’s website, and the like. Google uses this information to create a report on the activities on the website, which allows us to analyse their content and design and implement their technical and content improvements.

4.2 Your IP address transmitted by your browser to Google Analytics is not merged with other Google data. In addition, your IP address data is anonymized before creating analytics. When using Google Analytics, we do not process or forward any of your data to Google that could be used to identify you.

4.3 Google sends the information collected as described above to servers in the USA, where they are stored. Fabrika has activated IP anonymization on its websites; this means that Google shortens your IP address within EU member states or other European Economic Area countries before sending it.

4.4 You can find more information about the terms of use and data privacy protection at http://www.google.com/analytics/terms/gb.html.

4.5 You can prevent cookies from being stored by setting up your browser software to do so. In addition, you can prevent Google’s recording of data generated by cookies (including your IP address) and processing them by downloading and installing the browser extension at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

5.Facebook Pixel

5.1 The websites www.nutrinobebe.com and www.nutrinolab.com use the Facebook pixel, a tool by Facebook, Inc. 1601 South California Avenue, Palo Alto, CA 94304, SAD (hereinafter referred to as ‘Facebook’). The Facebook pixel enables the monitoring of activity of users logged in to their Facebook accounts, specifically their interaction with Facebook ads and Fabrika’s websites — when the user gets redirected to Fabrika’s websites by clicking on a Facebook ad. This process is designed to evaluate Facebook ads’ effectiveness for statistical and market research purposes, and it may help to optimize future advertising efforts. The collected data is anonymous, which means it cannot be used to identify you, and we do not send any personal data to Facebook.

5.2 Your browser automatically establishes a direct connection with Facebook’s servers. We can in no way influence the scope or further use of the data collected by Facebook through this tool, which is why we want to inform you that, to the best of our knowledge, Facebook receives the information that you accessed our website or clicked on our ad. If you are registered with Facebook, Facebook may associate your visit with your account. Even if you are not registered with Facebook or have not logged in to Facebook, the service provider might obtain and store your IP address or other identifiable data. Facebook further uses your data in line with Facebook’s Data Policy, found at https://www.facebook.com/about/privacy/.

5.3 The above feature can be deactivated at https://www.facebook.com/settings/?tab=ads#.

6.Google Tag Manager

6.1 The website www.nutrinobebe.com uses the Google Tag Manager (GTM) tool. This service allows website tags to be managed through an interface. GTM implements only tags. That means that the tool does not use any cookies or collect personal data. GTM runs other tags that collect data as needed. If deactivation is done at the domain or cookie level, it remains valid for all tracking tags if implemented with GTM.

7. Links to other websites

7.1 You can find a button on Fabrika’s websites that links to its LinkedIn page, which can be recognised by the company’s logo. If you follow the link, you will be redirected to a website operated by a third party, which becomes the controller of your personal data that is responsible for the processing of your personal data in line with the terms of use and privacy policy published on this social media platform. LinkedIn’s servers may be located outside the Republic of Serbia.

8. Scheduling a visit to Fabrika

8.1 Fabrika allows interested parties to schedule a visit to Fabrika through the contact form at www.babyfoodfactory.com. When submitting a visit request, you will be asked for your full name and phone number for further communication in order to schedule and conduct the visit.

8.2 In this case, your data is provided on voluntary basis, while your consent represents the legal basis for its processing. If you do not consent to the data processing, we will not be able to schedule a visit.

9. Contact

9.1 Fabrika allows interested parties to schedule a visit to Fabrika through the contact form on the website. Before sending a message, you will be asked for your full name, address, phone number, and email address for further communication pertaining to your message to Fabrika.

9.2 In this case, your data is provided on voluntary basis, while your consent represents the legal basis for its processing. If you do not agree to the data processing, we will not be able to respond to your inquiry.

9.3 However, depending on the content of your message, Fabrika may process your personal data on a different legal basis. For example, if you submit a product quality complaint through the contact form, further processing of your data is needed in order to comply with the controller’s legal requirements.

10. Registration and selection of candidates

10.1 Interested parties are allowed to apply for active job vacancies at Fabrika using the email address found on www.babyfoodfactory.com. Clicking on the email address launches your email app.

10.2 If you send us a job application, we will process the data that you provide us this way: your email address, information from your cover letter and resume like your full name, date of birth, mobile phone number, emails, address of residence, degrees and education background, work experience, possession of a driver’s licence and category, certificates of passed professional exams that are relevant for employment, and references. If you are invited to an interview, you will be additionally informed before the interview takes place about the processing of personal data in the following recruitment and selection process.

10.3 The processing of your data is carried out for the purpose of communicating with you, processing your application, performing the selection process, assessing your competencies and whether employment requirements are met, and potential hiring.

10.4 In this case, you provide the data voluntarily, and the legal basis for the data processing is Article 12 paragraph 1 item 2) of the Law on Personal Data Protection — the processing is necessary for taking action at the request of the data subject before entering the employment agreement.

11. Data processors and recipients

11.1 The data that we process based on your use of Fabrika’s website is processed by the following categories of persons hired by the controller: — Fabrika’s management bodies; — the person on whose server the website is hosted; — the persons hired to maintain the website; — the persons hired to provide other services to Fabrika in connection with the internet, advertising, or analytics, web server management, and the like; — Fabrika’s legal and external consultants.

11.2 In case of acquisition, status change, liquidation process, bankruptcy, restructuring, or implementing another transaction that leads to changes in Fabrika’s ownership structure or management, data might be transferred to the persons taking part in the transaction.

11.3 Fabrika and data processors enter an agreement that sets out the subject and duration of data processing, the nature and purpose of processing, the type of personal data, and the type of person whose data is processed, as well as the controller’s rights and obligations. The agreement guarantees the applying of appropriate technical, organisational, and personnel policies, in a way that ensures that the processing is in line with the provisions of applicable regulations and that ensures the protection of the data subject’s rights.

12. We might forward your data to relevant national authorities or public office holders at their request in line with applicable regulations.

12.1 The controller processes your data in the Republic of Serbia and — at the time of drafting this Privacy Policy — has no intention of transferring your data to any other country or international organisation.

13. Personal data protection measures

13.1 We process personal data with mandatory application of relevant legal, technical, personnel, and organisational policies in order to protect personal data, including protection against unauthorised or illegal processing and accidental loss, destruction, or damage, in line with the legal principles of processing. Access to data is enabled to a limited (minimally necessary) group of persons who are entrusted with tasks pertaining to data processing, and processing is limited only to activities that are required for the purposes of processing. The data is stored in a form that enables personal identification only for the time required for the purposes of processing.

14. Data subject’s rights

14.1 In line with the Law, we also want to inform you about your rights in connection with the processing of your personal data: – The right to withdraw your consent to processing at any time, whereby the withdrawal does not affect the admissibility of the processing based on your consent before the withdrawal – The right to access your data and the information about its processing, including delivering a copy of the data, whereby you are obligated to reimburse us for the data production’s necessary costs – The right to rectification and erasure of your personal data without undue delay – The right to restrict processing – The right to object to the processing of your personal data, including especially specific objections to data processing for the purposes of direct advertising, including profiling – The right to data portability, in case of automated processing based on consent or agreement.

14.2 You can exercise the above rights if the requirements prescribed by the Law are met by submitting a request to the controller through to fdh@bff.rs, or by sending a request to the controller’s address. The request must contain information about the data that it pertains to, the right that it pertains to, the date, and the petitioner’s signature. In each specific case, the controller will evaluate the merits of your request in line with the Law and respond to you within the prescribed timeframe.

14.3 If you believe that the processing of your personal data has been carried out contrary to the Law’s provisions, you have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar Kralja Aleksandra 15, 11000 Belgrade, or with another territorially competent person or organisation in charge of personal data protection.

15. Consent to personal data processing

15.1 When accessing Fabrika’s websites, electronically (by clicking on a specific button), you acknowledge that you are familiar with and agree to the processing of personal data in line with this Privacy Policy.

15.2 The Privacy Policy is subject to changes and amendments. Website users will be notified of changes or amendments when they first access the website subsequently, for the purpose of electronic acknowledgement that they are familiar with and agree to the new Policy.

15.3 The Privacy Policy takes effect on 21 April 2020.