Privacy Policy

This Privacy Policy (“Policy”) applies to the processing of personal data carried out by Naturala d.o.o., Nikole Šubića Zrinskog 28, 33520 Slatina (hereinafter: Naturala), as the data controller of personal data relating to:

• Naturala employees
• Naturala job candidates
• Naturala management board members
• Naturala business partners and suppliers
• Whistleblowers reporting irregularities at Naturala
• Naturala visitors and visitors to Naturala websites

Purpose and Scope of the Privacy Policy

In its business operations, relations with employees, clients, and business partners, Naturala promotes and respects privacy and the personal dana protection and ensures the highest level of information security in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable regulations in the field of personal data protection and information security.

The purpose of this Policy is to ensure that the personal data processed by Naturala are adequately stored and protected, retained only for as long as necessary, and securely deleted or destroyed when no longer required.

Principles of Personal Data Processing

Naturala has adopted and implements the following principles when collecting, processing, and storing personal data:

Legality, Fairness and Transparency
Personal data are processed only when there is an appropriate legal basis (e.g., contractual relationship, data subject’s consent, legal obligation, or Naturala’s legitimate interest).
When collecting data and throughout the entire processing procedure, data subjects are provided with all relevant information about the processing of their personal data and their rights, in clear and simple language.

Purpose Limitation
Personal data are collected for clearly defined and legitimate processing purposes and are not processed for purposes incompatible with the originally specified purpose. Naturala transparently states the purposes for which the collected data will be used and limits personal data processing activities to those necessary to achieve the purpose of processing.

Data Minimization
When collecting personal data, Naturala limits the dana collecting to what is necessary, appropriate and relevant for achieving the purpose of processing.

Storage Limitation
Personal data are stored in a form that permits identification of data subjects for no longer than necessary to achieve the purpose of processing. After the purpose has been fulfilled and in accordance with legal requirements, Naturala will delete or anonymize the personal data.

Accuracy
Naturala ensures the accuracy and up-to-date status of personal data throughout the processing. Inaccurate or incomplete data will be promptly updated or deleted if accuracy cannot be ensured.

Integrity and Confidentiality
Naturala implements appropriate technical and organizational measures to protect personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
The level of protection and the type of measures applied are based on an assessment of the risk of a particular processing operation to the rights and freedoms of data subjects.

Technical and integrated protection of personal data
When designing new personal data processing systems and processes, and when changing or extending existing ones, Naturala shall apply data protection provisions taking into account the latest developments, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of individuals arising from the processing.

Reliability
In personal data processing activities, Naturala ensures appropriate records and other evidence that make it possible at any time to demonstrate the reliability of and compliance with the above principles.

Rights of Data Subjects

Depending on the legal basis and the manner of personal data processing, data subjects may exercise the following rights in relation to processing carried out by Naturala:

• The right of access to data and information about dana processing, including a copy of personal data;
• The right to rectification;
• The right to erasure of data;
• The right to restriction of processing;
• The right to data transfer;
• The right to object (where processing is based on Naturala’s legitimate interest);
• Rights relating to automated decision-making and profiling.

Data subjects may exercise their rights by submitting a request to the following email address: zastita.podataka@naturala.eu

Regardless of the purpose and legal basis of the processing, all data subjects may always lodge a complaint with the supervisory authority: The Croatian Personal Data Protection Agency, Zagreb, azop@azop.hr.

Any future amendments to this Policy will be announced and published in a timely manner.

Date of last amendment: 27th of January 2026

Note:
Details of the processing of personal data in accordance with Article 13. of The General Data Protection Regulation is available in the Notices on the processing of personal data.