PRIVACY POLICY

LASER SMOOTH d.o.o., MBS 040480383, OIB 74130823997, with its registered office at Frana Supila 6, 51000, Rijeka, Croatia (hereinafter: the Company), as the data controller, hereby informs you about the processing and protection of your personal data.

1. What processing does this notice cover?

This notice refers to the processing of personal data of visitors to our websites (laserhouse.hr) (hereinafter: Users). If you do not fall into any of the above categories, please contact us at info@lasersmooth.hr so that we can provide you with the appropriate privacy notice that applies to you.

2. What information do we collect about you?

When you contact us, we collect and process your personal data (for example, information you provide to us by filling out forms on our website or by phone, email, or otherwise). This includes data you provide when registering to use our website, when ordering our services (e.g., when you place an order on our site, participate in discussions or other social network functions on our website, participate in a prize draw, promotion, or survey, fill out an application form, for example, to participate in a recording), as well as when you report a problem with our website. The data you provide may include your name, address, email address, phone number, personal description and photograph, age, date of birth, gender, and other data as defined in each case.

Each time you visit our website, we automatically collect the following data:

– technical data, which may include the IP address of the computer from which you access the internet, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type, and mobile device brand; this data may also be collected and processed on our behalf by third-party cookies. More information about this can be found via the link at the bottom of each individual page.

– data about your visit, which may include the full URL clickstream to, through, and from our website (including date and time), information about pages you viewed or searched for (including articles you read, categories you accessed), page response times, download errors, duration of visits to certain pages (including average time spent on certain pages, viewing certain content or videos), average time spent in the application, number of views from those applications, average number of articles you viewed on our website, information about page interaction (such as scrolling, clicks, and mouse-overs), methods used to navigate away from the page, user behavior data, and phone numbers or email addresses you used to contact our customer service representatives.

In some cases, we obtain your personal data from third parties, such as business partners, subcontractors for technical, payment, and delivery services, advertising networks, analytics providers, search information providers, and credit agencies. When visiting and registering on one of our platforms, we may obtain your personal data from independent social network providers (Facebook, Gmail), if you voluntarily register through such a provider’s platform.

3. How do we use your personal data and on what legal basis?

General: We may process your personal data for the performance of a contract concluded with you; when it is necessary to fulfill a legal obligation (e.g., legislation governing criminal liability for public incitement to hatred, violence, or intolerance); when it is necessary for our legitimate interests (or the legitimate interests of a third party) and your interests (e.g., for detecting and preventing fraud or ensuring network and information technology security), unless your fundamental rights override those interests; when it is necessary to protect your or another person’s vital interests; or when it is necessary for public interest or official purposes.

In some cases, we will process your personal data only with your consent. In such cases, we will separately ask you to explicitly give your consent. You can withdraw your consent at any time by replying to the email received or in the settings of your user profile on the specific website. This does not affect the lawfulness of processing carried out before the withdrawal of consent.

When we request personal data for the fulfillment of legal or contractual obligations, the provision of personal data is mandatory for you. This means that if you do not provide the requested personal data, we will not be able to manage our contractual relationship or fulfill the obligations arising from that relationship. In all other cases, the provision of personal data is voluntary.

We may also process your personal data, such as identification data, contact details, and residential address, for the possible exercise of our rights against you in the future. This processing is based on our legitimate interest in exercising rights in potential disputes.

a. Users and clients:

For the provision of services, delivery of goods, and processing of payments in accordance with relevant contracts (including subscription agreements), we may process your personal data, such as identification data, contact details, and bank details. Such processing is based on the performance of a contract or a legal obligation.

We may use the data to provide you with information about goods or services that we believe may be of interest to you. If you are an existing client, we will only contact you by email with information about similar products or services that you have previously purchased or about which we have negotiated (direct marketing), unless you have previously told us that you do not wish to receive such messages. If you want us to use your data in this way, please tick the appropriate box on the form through which we collect your data (e.g., order form or registration form).

Without your explicit prior consent, we will not share your data with third parties for marketing purposes.

We may also use your data to measure or understand your preferences regarding program content and to enable interactive features of our services if you choose to do so; to measure the effectiveness of advertising displayed to you and others; and to display relevant advertising and recommendations for products or services that may be of interest to you.

b. Participants:

Regarding your participation in the production or recording of television or other media content, we may collect and process your personal data for registration, participation, and communication with you. This processing is based on the performance of a contract you have entered into as a participant (e.g., by filling out and signing a participation form).

Depending on the nature of the specific media content, we may, with your consent, publish your photographs, video, audio, or audiovisual recordings, but in many cases, we are not obliged to seek your consent for the processing of your data for journalistic, artistic, or literary activities. This does not prejudice our copyrights and intellectual property rights to such content.

4. How and to whom do we disclose your personal data?

We will not sell your personal data to third parties.

Within the company, only a limited number of employees have access to your personal data, based on the need to know or to perform business processes, such as employees in the marketing, legal, production, news, and IT departments. These employees are bound by confidentiality regarding personal data. We take appropriate technical and organizational measures to protect personal data. Company employees have the right to process personal data only according to company instructions and as necessary in connection with their work tasks.

We may share personal data with government authorities or law enforcement agencies if required by applicable law or if necessary for the exercise of our rights, including our terms of use, or for the protection of our legitimate interests (including the legitimate interests of third parties) in accordance with applicable legislation.

We may also disclose your personal data to third parties, including:

(i) service providers who provide administrative, professional, and technical support to the company in the areas of IT, security, and business resources;

(ii) business partners, suppliers, and subcontractors for the performance of any contract concluded with you (including subscription to our services);

(iii) advertisers and advertising networks that need your data to select and display relevant advertisements. We do not disclose data about identifiable individuals to advertisers, but we provide them with aggregated data about our users (e.g., we can inform them that 500 men under 30 clicked on their ad every day). With such aggregated data, we can help advertisers reach a specific target group. We may use the personal data we have collected from you to fulfill the requirements of our advertisers by displaying their ads to the desired target audience;

(iv) analytics and search engine providers who help us improve and optimize our website; the company may, if necessary, also share personal data with external advisors (e.g., lawyers, accountants, auditors). In some cases, we may disclose personal data to affiliated companies (including all subsidiaries or our ultimate holding company and its subsidiaries) listed at: http://www.cetv-net.com. Together with affiliated companies, we have ensured appropriate safeguards against the possible disclosure of personal data. We may share personal data with affiliated companies and other third parties in the context of certain transactions, including transactions involving a change of control of the company, the sale of a significant portion of assets, or restructuring. The company exercises due diligence in selecting unrelated service providers and requires them to maintain appropriate technical and organizational security measures to protect personal data and to process personal data solely according to the company’s instructions. Service providers may use subcontractors, who must also meet the same data protection requirements as the service provider.

5. Storage of personal data and its transfer abroad

Your personal data that we collect is stored in the European Union (EU) and the European Economic Area (EEA). However, data collected by third parties through cookies (e.g., Google Double Click for Publishers) typically serves traffic from the data center closest to the origin of the traffic. This means that the transfer of such data, including advertising traffic, may pass through servers located within the EEA, but also outside the EEA. For more information, please see our Cookie Policy, which is available at the bottom of each website. Also, your personal data may be transferred and stored in a country outside the EU and EEA, where the laws and regulations protecting your data may be different or provide a lower level of protection than in the country where you operate.

We will not intentionally transfer your personal data outside the EEA unless appropriate safeguards are in place, including: (i) an adequacy decision by the European Commission regarding the recipient country or countries; (ii) a “privacy shield” certification; (iii) appropriate binding corporate rules; (iv) an approved code of conduct with binding and enforceable obligations for the controller or processor in a country outside the EU and EEA; (v) an approved certification mechanism with a binding and enforceable obligation for the controller or processor in a country outside the EU and EEA; or (vi) standard EU contractual clauses approved by the European Commission.

For additional information on such transfers and safeguards, please contact the Data Protection Officer or the authorized CME Data Protection Officer using the contacts provided below.

6. Your rights

You can ask us for confirmation of whether your personal data is being processed, a copy of your data, or its modification/correction. In certain circumstances, you have the right to request the erasure of your personal data or the transfer of some data to you or others based on the right to data portability. You also have the right to object to certain processing of your personal data (e.g., processing for direct marketing purposes or for decisions made solely by automated processing, including profiling). If you have given consent for the processing of your personal data, you have the right to withdraw that consent without negative consequences for you. If we process data based on legitimate interest, you have the right to object to such processing. You also have the right to restrict the processing of personal data in certain circumstances.

Please note that your rights are sometimes limited by data protection law; the right to object may be limited if we can demonstrate compelling legitimate grounds for the processing that override your interests. When submitting a request, you must prove your identity and provide information that allows us to respond. We will not charge for a response, unless permitted by law, in which case the fee will be reasonable and proportionate to the request.

To exercise your rights, please contact us using the contact details below. You have the right to lodge a complaint with the supervisory authority for data protection in the member state where you live, work, or where a data protection law violation occurred.

7. Retention period of your personal data

We intend to retain your personal data only for as long as necessary in accordance with our Data Retention Policy, for the purposes stated in this notice, or in accordance with applicable legislation, respecting the applicable minimum legally prescribed retention periods, or as long as necessary for the exercise of our legitimate rights (and the legitimate rights of others). We will retain the personal data of application users for the duration of their use of the mobile application or for the period prescribed by applicable relevant legislation, in accordance with our Data Retention Policy. For additional information on the retention period of your personal data, please contact us. Please note that we may process all your anonymous personal data without further notice.

When we process your personal data based on your consent, we process it only for the period specified in your consent, unless you withdraw or restrict your consent before the expiration of that period. In such cases, we will cease processing the specified personal data for the relevant purposes, taking into account possible legal obligations to process such personal data or the need for processing to pursue our legitimate interests (including the legitimate interests of others).

8. Data Security

We store your data on our own servers and on third-party servers (including cloud computing services). For this purpose, we have implemented appropriate technical and organizational measures to protect your personal data and prevent unauthorized access to it. In connection with services provided by third parties, we have entered into contractual obligations that include obligations related to the organizational and technical security of personal data. You are responsible for maintaining the confidentiality of all authentication methods (e.g., passwords) you use to access certain parts of our websites.

Data transmission over the internet is not completely secure. Although we will endeavor to protect your data, we cannot guarantee the security of data you transmit to us via our website; any data transmission is at your own risk. Upon receipt of your data, we will implement strict procedures and security measures to prevent unauthorized access.

9. Children’s Privacy

On our website, the Company does not (knowingly) collect personal data from individuals under 15 years of age. If a parent or guardian discovers that their child has provided personal data to the Company, please notify us immediately. If the Company determines that a person under 15 years of age has provided their personal data, we will immediately delete that data from our servers, unless the parent or guardian explicitly permits the Company to process the child’s personal data for specific purposes.

All websites associated with the Company’s group (including all subsidiaries or our ultimate holding company and its subsidiaries) collect and process limited personal data of children (as prescribed by applicable legislation) for services intended for children (data such as name, age, and email address may be collected to assess eligibility for participation in contests related to programs intended for children). For these websites, we ask (and encourage) children to obtain parental or guardian consent, and the Company has taken appropriate measures to verify the validity of such consents.

10. Cookies and Social Media Plugins

To distinguish users of our websites, our site uses cookies. This way, we provide users with a better experience when browsing our pages and simultaneously improve our websites. Such processing is based on your consent, expressed on our websites or through your browser settings. For more detailed information about the cookies we use, how long we store them, and for what purposes, please see our Cookie Policy published at the bottom of each website.

Our websites may contain social media features, such as buttons for Instagram, Facebook, LinkedIn, or YouTube. These features may collect data about you, such as your IP address and the pages you visit, and may set a cookie for the proper functioning of these features. The processing of this data through interactions with these features is governed by the privacy notice/policy of the company providing the service.

11. Links to other websites

Our websites may contain links to websites not controlled by the Company. When you click on a third-party link, you will be redirected to their website. If you visit any of these linked sites, please read their privacy statements. We are not responsible for the policies and practices of other companies. Our company has no control over and assumes no responsibility for the content, privacy policies, or practices of third-party websites or services.

12. Contact Us

If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, please contact us by phone at 01 8801 192, by email at info@lasersmooth.hr, or by mail at LASER SMOOTH d.o.o., Frana Supila 6, 51000, Rijeka, Croatia.

Please do not disclose sensitive personal data (e.g., information about racial or ethnic origin, political opinions, religious beliefs or other beliefs, health status, or trade union membership), your tax numbers, or criminal record data when communicating with us.

Last modified: 2025-10-27

We may update this notice from time to time and publish the new version via the Privacy Policy link on all our websites. If you have provided us with your contact details and given permission to contact you, we will inform you of significant changes. Please check this notice regularly for any changes.