Contact Us Regarding These Policies or Your Personal Data

If you wish to contact us regarding these policies or your personal data, please use the following contact details:

• E-mail: info@pepperpulse.com
• Data Protection Officer: Goran Vrabec

How and When Do We Collect Your Personal Data?

We collect your personal data when it is necessary for fulfilling your consumer needs or for our business operations:

During your registration, Pepper Pulse will request certain information (personal data) such as your name, surname, email address, etc.

When you access the website www.pepperpulse.com, we will also collect your IP address, which is considered personal data.

As a customer or user of our site, upon entering your personal data post-registration, especially in the case of making a purchase, you enter into a contractual relationship that forms the basis for purchasing products and ordering services of your choice at www.pepperpulse.com.

Processing your personal data in this case is necessary to execute the contract in which you are a party as a buyer or user, or to take actions at your request before entering into a contract. Essential information for purchasing includes your name, surname, address, country, telephone number, email address, payment method (IBAN), and delivery address.

Creating and managing your user account. Information collected during the creation of a user account on the website www.pepperpulse.com, during registration via social networks, and in our stores. Depending on the frequency of our interaction, data may include: name and surname; gender, email address, home address, telephone number, photograph, date of birth or age group, ID, username, and password, etc.

Situations in which we collect other types of data such as the date and time of access to the site, information about the hardware, software, or internet browser you use, as well as about the operating system of your computer, application version, and your language settings. We may collect information about clicks and your access to the page www.pepperpulse.com that are displayed to you.

When you purchase our product for contract execution, details of your name, surname, and delivery address will be shared with our partners who perform delivery services on our behalf and for our account.

When you contact our customer service or users and request our assistance or pose a question to exercise any of your rights guaranteed by applicable regulations.

When you reach out to us via social networks, we collect data that you have made available to us when posing inquiries or requests.

When you request a product return or wish to unilaterally terminate a concluded contract, we collect your name, surname, personal identification number, address, account details, and purchase amount, depending on the chosen payment method.

When you participate in our sweepstakes, we will process data depending on the type of sweepstakes, about which we will additionally inform you in the sweepstakes rules. Data that can be processed include, for example, name, surname, and address for sending prizes.

When you pose any inquiry related to our offer, we will process your contacts and/or other data you provide when sending inquiries.

If you respond to our direct marketing campaigns, for example, by filling out a data entry form on our website.

If our partners or principals provide your data in an authorized manner.

In case of presentations at fairs, conferences, and other similar events, we may record the event by taking photographs or shooting video materials, and photographs and video footage of individuals are collected.

Pepper Pulse recommends all customers or users of the site to take care of their entry password for the user account. When choosing a combination of characters for the password, we recommend combining uppercase and lowercase letters and numbers. Use a password of at least eight characters. We recommend changing the password periodically (at least once every six months).

If you are under 16 years of age, please do not provide us with any information without the approval of a parent or guardian.

We process your personal data because legal regulations require certain actions from us, or because the processing is necessary for the execution of a contract or to take actions before entering into a contract, or based on our legitimate interests, except when those interests are overridden by the interests or fundamental rights and freedoms of individuals that require the protection of personal data.

If we cannot process personal data based on the aforementioned legal grounds, we will request your consent. If the processing is based on your consent, you have the right to withdraw consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

We process your personal data when necessary for the conclusion and fulfillment of rights and obligations arising from the sales contract, for marketing purposes, and for the purposes of improving our business and your user experience (e.g., when you purchase or order products and/or services from us, when you complete a survey about our products and services, etc.).

Please pay attention to the mandatory scope of data we request because, in the case that the customer or user does not provide the requested information determined as mandatory to perform the requested or expected activity for you, unfortunately, it will not be possible to include you in the same, without the requested data the activity will not be technically feasible.

Processing of Personal Data in the Payment Process

At the time of payment on the website www.pepperpulse.com, as a condition for purchasing products and services via credit or debit cards, Pepper Pulse requests customer data to activate the payment process. During payment processing via contracted service providers for processing and billing (credit or debit cards), contractual partners of Pepper Pulse as Processors or Independent Controllers of personal data, your data will be shared.

For the aforementioned purpose, your personal data as a customer (e.g., customer’s name and surname, customer’s address, customer’s card details) are temporarily stored with payment processing service providers (Visa, Maestro, MasterCard) who store these details in accordance with the highest degree of protection and confidentiality of data.

The processing of data during payment transactions is necessary to perform all actions preceding the purchase or formation of a contract with the data controller. Regarding the legal basis of data processing related to specific types of payment or legal entities providing said services, payment data such as name, surname, code, amount, account number, or other transactional codes are shared with the card company, bank, or third party through which the payment is made, all at the request of the data subject who independently chooses the method of payment.

At no point does Pepper Pulse possess, collect, or process personal data entered for the purpose of processing and billing of card payments.

Pepper Pulse advises customers to take care of the data mentioned on the card to prevent these details from being accessible to third parties and to avoid misuse.

In summary, we primarily collect your personal data directly from you whether to enter into a contract with us, to execute an action upon your request, when you order certain products or services, or complete a particular form, or when you wish to be our registered user.

We treat your personal data as confidential, and it is appropriately protected by Pepper Pulse and/or our trusted partners.

What Data Do We Collect Directly from You and for What Purpose?

Typical categories of data we collect from users include: name, surname, and address to fulfill our obligation of product and service delivery.

Sometimes, we may ask for additional personal data such as: educational background, date of birth, gender, contact information, billing address, delivery address, financial information including credit, debit card details, or other payment information you provide while filling out forms on www.pepperpulse.com, during payment on www.pepperpulse.com, or when communicating with us via telephone or email, your history of purchasing our products and services, and additional information that you voluntarily share with us. We also collect personal data that you provide when filling out online forms.

We collect your personal data for:

1. Executing the service, fulfilling the contract, or another method of ensuring the requested service.
2. Using all services on the website www.pepperpulse.com.
3. Providing the most effective response to your inquiry and processing your requests.
4. Sending materials, offers, and contacting.
5. Improving the quality of content, functionality, and services.

What Privacy Rights Do You Have?

Be aware that at any time, you have the right to request Pepper Pulse to:

Enable Access to Your Personal Data

You have the right to obtain confirmation as to whether or not your personal data are being processed and, if such personal data are being processed, access to the personal data. Information on access includes, among other things, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an unconditional right, and the interests of other individuals may limit your right of access.

You have the right to receive a copy of the personal data being processed. For further copies requested by you, we may charge a reasonable fee based on administrative costs.

Request Correction of Incorrect Data

You have the right to have your inaccurate personal data rectified. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Request Deletion of Personal Data

Under certain conditions, you have the right to have us delete your personal data, and we are obliged to delete such personal data.

If your personal data are required for us to perform a contractual obligation towards you, Pepper Pulse might become unable to perform such contractual obligations.

Also, if your personal data are needed to fulfill certain legal obligations (e.g., tax obligations), your request may not be feasible.

Restrict Access to Your Data (by us and/or third parties) in Certain Processes or Entirely

Under certain conditions, you have the right to request the restriction of processing of your personal data. In this case, the corresponding data will be marked and may be processed only for certain purposes.

Object to the Way We Use Your Data

Under certain conditions, you have the right at any time to object to the processing of your personal data, for reasons related to your particular situation, or when personal data are processed for direct marketing purposes, and you can request us to no longer process your personal data.

Request for Data Portability to Another Data Processor (Right to Data Portability)

Under certain conditions, you have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transfer these data to another data controller without hindrance from PEPPER PULSE.

If you believe that your rights are not being respected, you have the right to lodge a complaint with the Data Protection Agency.

Where Is Your Personal Data Stored?

The personal data we collect about you are stored in a secure environment. Your personal data are protected from unauthorized access, disclosure, use, alteration, or destruction by any organization or individual.

The collected data will be stored only for as long as necessary for the purposes mentioned above.

Your personal data will not be kept in a form that allows you to be identified for longer than Pepper Pulse reasonably deems necessary for achieving the purpose for which they were collected or processed. Pepper Pulse will retain certain personal data for a period prescribed by law or regulation obligating Pepper Pulse to retain data.

We use various security measures, including encryption and authentication, to protect and maintain the security, integrity, and availability of your data.

Among other things, we use the following measures:

1. Strictly limited personal access to your data on a “need-to-know” basis,
2. Secure transfer of collected data,
3. Installation of firewalls on IT systems to prohibit unauthorized access,
4. Continuous monitoring of IT systems to detect and prevent misuse of personal data.

All your data are stored on our secure servers and the secure servers of our partners and are accessed and used in accordance with our policies and security standards (or equivalent standards of our subcontractors or business partners).

In addition to the above, it is important to note the following: if a judicial, administrative, or extrajudicial procedure is initiated, personal data may be stored until the end of such a procedure, including any period for declaring legal remedies.

Third Parties with Whom We Share Data

It is important to note that we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of and for Pepper Pulse. For example, for marketing, finance, advertising, payment processing, delivery, and other services within and outside the web store. These service providers are obliged, according to relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we strictly determined. Also, we bind them to adequately protect your data and to consider them as a business secret.

Data Processing by Partners Outside the European Union

In some instances, partners providing services on behalf of or for Pepper Pulse may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to treat your data with special security measures in accordance with regulations in force in the European Union. In the United States, we will review existing contracts and check the security standards guaranteed by our partner to ensure the protection of all our subjects with the latest standards approved and suggested by the competent authorities.

Duration of Personal Data Storage

Pepper Pulse will not retain your personal data longer than the period for which the data are needed to fulfill the purpose of their use, except in cases where the law prescribes a data retention period (for example, data related to unilateral contract termination and consumer complaints will be kept for 1 year, data related to exercising your privacy rights will be kept permanently, data related to sweepstakes will be kept for 5 years, while account data will be stored for 11 years).

If you write a comment, the comment and its metadata are retained indefinitely. This is so we can automatically recognize and approve subsequent comments, instead of holding them in a queue for approval. For users who register on our website (if any), we also store the personal data they provide in their user profiles. All users can see, edit, or delete their personal data at any time (except they cannot change their username). Website administrators can also view and edit that information. Order information is kept as long as legally necessary for accounting purposes.

How Will We Use Your Data?

We process your personal data when necessary for the conclusion and fulfillment of rights and obligations arising from the sales contract, for marketing purposes, and to improve our business and your user experience (e.g., when you purchase or order products and/or services from us, when you contact our customer service, when you fill out a survey about our products and services, etc.).

The purposes for which we use your data are described in these rules, and if your data will be processed for other purposes, you will be informed prior to such (new) processing.

Cookies

To maintain our website and ensure that its functionalities are at the expected level, Pepper Pulse uses technology known as “cookies”.

Cookies are small files that we send to your computer and can later access. They can be temporary or permanent. Thanks to cookies, you can easily browse our pages. Cookies show us what interests you and other visitors to our website, which helps us improve it.

Read more about cookies in our Cookie Usage Policy

Other Websites

This Privacy Policy applies only to the use and processing of data that Pepper Pulse collects from users (data subjects). Other websites that can be accessed through www.pepperpulse.com have their own confidentiality statements and data collection methods, as well as their use and disclosure.

Pepper Pulse is not responsible for the methods and conditions of operation of third parties.

Pepper Pulse collects and processes personal data through user interactions on social networks such as Facebook, Instagram, Twitter, and YouTube. Persons appointed by Pepper Pulse have access to messages and/or posts on these social networks; however, personal data collected through them, especially those contained in messages, are not stored or further processed by Pepper Pulse except for the purposes stated in these Rules.

Pepper Pulse uses a business profile using the services of Facebook, Instagram, Twitter, and YouTube, and their Privacy Policies or confidentiality statements and how they use your personal data can be viewed at:

FACEBOOK: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect&__coig_consent=1

Twitter: https://twitter.com/en/privacy

YouTube: https://policies.google.com/privacy?hl=hr

If you have questions regarding the collection and processing of data by Facebook, Twitter, Instagram, and/or Google or wish to exercise any of your rights guaranteed by the General Data Protection Regulation, contact:

FOR FACEBOOK:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data Protection Officer Contact: https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with how your personal data are collected and processed, you may contact the leading supervisory body of Facebook, the Irish Data Protection Commissioner, or the Personal Data Protection Agency of the Republic of Croatia.

FOR INSTAGRAM:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data Protection Officer Contact: https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with how your personal data are collected and processed, you may contact the leading supervisory body for Instagram, the Irish Data Protection Commissioner, or the Personal Data Protection Agency of the Republic of Croatia.

FOR GOOGLE:

1600 Amphitheatre Parkway Mountain View, CA 94043 United States

Data Protection Officer Contact: https://support.google.com/policies/contact/general_privacy_form

If you are not satisfied with how your personal data are collected and processed, you may contact the leading supervisory body of Google or the Personal Data Protection Agency of the Republic of Croatia.

FOR TWITTER:

One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND

Data Protection Officer Contact: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

Effective Date and Changes to the Privacy Policy

These Rules come into effect upon publication on the Internet site.

Pepper Pulse reserves the right to modify and supplement the Privacy Policy, which will be published on the website.