Mealpass “PRIVACY” POLICY
General information
Protection of personal data Veta savjetovanje d.o.o. with headquarters in Zagreb, Ožujska 1 (further: Veta savjetovanje, “us”, “we”) is approached with great seriousness. We strive to process your personal data in accordance with applicable regulations, including the laws of the European Union. This document determines the legal basis for the processing and collection and use of personal data, the actions taken for this purpose, and informs you of your rights related to the processing of your personal data. Veta savjetovanje uses personal data for the purposes specified in this document or for another purpose that is stated each time you submit your personal data.
What does security of personal data mean to us?
Veta savjetovanje takes the data it owns seriously. We have implemented policies and procedures in this regard. We have provided training in the field of personal data protection, confidentiality and security. We regularly check the implemented protection models in terms of their adequacy in the security of owned data.
What is personal data?
Personal data is information about an identified or potentially identified natural person (for example: first and last name, e-mail address, card number, IP address). Veta savjetovanje processes personal data for various purposes. Depending on the purposes, various legal bases, ways of collecting and storing data can be applied.
What is data processing?
Data processing is all actions and procedures performed with your personal data (for example, their collection, storage, deletion or analysis).
Our principle is to maintain transparency in the field of the basis and methods of personal data processing.
In accordance with our policy, we only collect personal data for certain purposes, and we ask clients to provide personal data only when it is absolutely necessary.
Who is the Controller of your personal data?
In the case of contracts concluded with Veta consulting, the data processing manager in terms of:
“Regulations of the European Parliament and the Council of Europe of April 27, 2016 regarding the protection of natural persons in connection with the processing of personal data and regarding the free flow of such data and the repeal of Regulation 95/46/WE (general regulation on the protection of personal data) ” is Veta consulting in relation to your personal data.
What does that mean?
This means that Veta savjetovanje decides on the goals and method of processing your personal data, i.e. how they will be used.
How to contact us to get more information about the processing of your personal data?
You can contact us in the following ways:
• Veta savjetovanje doo, Ožujska 1, 10000 Zagreb with a note on the envelope “Personal data”,
• Via e-mail to the address: dpo@mealpass.hr,
• Or by phone at number: 0952149266
• via the contact form at the web address: www.mealpass.hr
How did we get your data?
We received them through different communication channels, depending on the type of cooperation with, among others:
– the company that concluded a contract with us on the accession of its employees to the MealPass program. Your data has been forwarded to us by your employer.
– a company that expressed an interest in recognizing the benefits of the MealPass Program for its employees. Your information was forwarded to us by your employer,
– if you personally forwarded your data to us when joining the MealPass program on the basis of a special contract that connects us with third parties, based on specially prepared computer systems for that purpose, or if you yourself are a party to such a contract,
– due to your participation (as a user of the MealPass program) in promotional campaigns of Veta savjetovanje (for example in contests or surveys), based on the justified interest of the administrator or with a specially given consent.
What is the purpose and legal basis of processing your data?
We process your data because:
- on the basis of a legally based interest Veta savjetovanje
• you have given us your consent in order to provide services related to participation in the MealPass program (including processing, applications and complaints)
• we have a legally-based interest in data processing in the form of direct marketing, which consists of the offer of new products or services by Veta savjetovanje, and which aims to increase the quality of services by researching the degree of satisfaction with the service through contact through a communication channel that you have personally chosen
• conducting analyzes and statistics that help us expand the range of services provided and the availability of our Partners’ outlets
• because it is necessary for the performance of contractual obligations from the contract concluded with Veta savjetovanje (for example, for maintaining a user account on the web platform)
• we confirm your identity at the points of sale of our Partners
• we perform calculations resulting from the contract with the company that registered your participation in the MealPass program or if you are personally a party to such a contract
• we send you technical data
• we detect fraud and abuse that is contrary to the terms of use of the MealPass Application
Your data is processed for tax and accounting purposes, if required by law.
In case of special consent, we process your personal data in order to:
- organization of competitions and promotional actions in which you can participate
• information related to the events we organize or if we want to offer you additional services and remind you about some important information that has an impact on the provision of MealPass program services (getting the newsletter).
• recording data in “cookie” files, collecting data from websites and mobile applications.
Additionally, we will process your personal data if you agree to it:
- in “cookie” files collected from our websites in order to be analyzed by our employees which content interests you,
• for promotional purposes of our products and to promote the services and products of legal entities that cooperate with us.
How long do we keep your personal data?
Depending on the purposes, we store your personal data for a certain period of time.
• in order to provide the service – until the claim expires or the consent is withdrawn, depending on what happened first.
• for direct promotional purposes – until you opt out of the MealPass program or file an objection, whichever comes first
• for tax and accounting purposes in the scope and over time defined by law.
“Cookie” type files, IP address and identification numbers of mobile devices
- In connection with the possibility of providing services electronically, Veta savjetovanje may collect data through such technologies as “cookies” files and tracking pixels. You can read about how we use such technologies in detail at our web address www.mealpass.hr
Who do we share your personal data with?
Veta savjetovanje can transfer your personal data to legal entities that process them on our behalf, if this is in accordance with the consent you have given or is based on the justified interest of the Controller: Clients (if it is your employer or if you are bound by a contract with that legal entity through which you have the MealPass application), persons who maintain the application, couriers, providers of additional services available under the MealPass program, legal persons who perform servicing and maintenance of computer systems and terminals, legal persons who support financial services provided electronically, persons who provide services related to work with Users and persons who support our promotional activities.
We may forward your personal data (to a limited extent) to legal entities that provide us with legal support, advisory services and perform audits. In special cases, your personal data may be forwarded to public authorities for tax purposes or to authorities and legal entities responsible for combating abuse and fraud.
All the above-mentioned legal entities are located in the territory of the European Economic Area (we do not forward data outside the territory of the European Union).
What are your rights in relation to the personal data we process?
You have the following (listed below) rights related to the processing of personal data, which you can exercise by contacting us in the following ways:
• In writing to the address: Veta savjetovanje doo, Ožujska 1, 10000 Zagreb with a note on the envelope “Personal data”,
• Via e-mail to the address: dpo@mealpass.hr,
• By phone: (+385) 1 4816 119
• Through the contact form at the web address: www.mealpass.hr
The right to access personal data
You have the right to access your personal data that we keep as a Data Controller.
The right to correct your personal data
You can update or correct the personal data you have sent to us. Depending on the purposes of the processing, the change can be requested in accordance with the regulations of the service you are using or in the manner indicated above.
If a change is possible and after we have been informed that any data processed by us is no longer current, we will correct it based on the updated information. Data updating can take up to 48 hours, which is related to the technical conditions of our systems.
The right to withdraw consent for the processing of personal data
In the case of processing your personal data on the basis of consent, you have the right to withdraw your consent. To do this, please contact us in the above way.
In order to no longer receive information in the form of a newsletter, you should click on the unsubscribe link in the e-mail sent by us.
The right to object to the processing of your personal data. In which situations can you object to the processing of your personal data?
You have the right to object to the processing of your personal data if:
• the processing of your personal data takes place on the basis of a legally based interest or for statistical purposes, and the opposition is justified by the special situation in which you found yourself. Your personal data is processed for the purposes of direct marketing and is profiled for this purpose.
The right to request restrictions on the processing of your personal data
You have the right to restrict the processing of your personal data at any time, unless the processing is legally required. In this case, we will not further process your personal data or we will limit their processing, if we can legally prove the basis for processing, establishing, exercising or defending our rights.
The right to transfer your personal data
You have the right to receive your personal data from us in a structured and commonly used computer format for machine loading. You can send this data to another data controller or request that we forward your data to another data controller. However, we will do this only if the technical possibilities for this are met, and another Data Controller can accept the receipt of them.
The right to delete your personal data
You can ask us to delete your data if that data is no longer necessary for the purposes for which it was collected by us; you can withdraw your consent to the processing of personal data; object to the processing of your personal data; or your data was processed against the law. Then the data is deleted.
To exercise this right, contact us in the above ways.
Do we forward your data outside the European Economic Area (EEA)?
No. Your personal data will not be transferred outside the European Economic Area (EEA).
Do we process your personal data automatically, including through profiling, in a way that affects your rights?
Based on your personal data, we perform profiling, i.e. automatic assessment of some personal parameters related to you. We do this so that we can prepare an adequate offer. Based on your profile, we will be able to adapt our product to your expectations and wishes. For profiling, we use data on, for example, the size of the company you work for, the size of the city where you use the card, visits to sports facilities, type of activity. In addition, when profiling, we take into account statistical data related to the above information.
We do not make automated decisions based on profiling information about you.
Changes to this document
We will regularly review and update this document in connection with legal changes and our actions aimed at increasing the security of your data and the quality of our services.
This document was last updated on March 1, 2024.
You can contact us
If you have additional questions related to the Privacy Policy, you can send them using the contact form available at the web address www.mealpass.hr
Please write the topic in the subject line of the message, so that we can respond to your application more efficiently.
Cookie policy
Website of the company Veta savjetovanje d.o.o. with headquarters in Zagreb, Ožujska 1 (hereinafter: Veta savjetovanje) can send and use so-called “cookies” files. This Policy defines the operation of these files on pages owned by Veta savjetovanje.
What are cookies and for what purpose are they used?
Cookies are text files that are saved via the web browser on your end device (computer, laptop, smartphone, etc.). During a visit to our pages, the browser sends this file, so that it can be recognized every time. “Cookie” files are necessary to navigate our services.
What types of “cookies” do we use?
Session cookies
Session “cookies” are temporary files, which are stored from the moment of entering a given service, but only until the moment of closing the web browser session or closing the browser itself. In the services, we store only one session “cookie” – a file intended for encryption of authorization information about the user, the file is created while the user enters the service and is deleted when the browser is closed.
Permanent “cookies”
These are cookies, files that facilitate the use of a given service and are stored for a long time. The service saves a “cookie” with information about the display of messages related to the management of “cookies” files on our service. This file is kept for a period of one year, from the moment of storage on the end device.
External “cookies”
These are files based on external internet services with which our internet services cooperate.
Google Analytics files are used on our pages, which are used to collect statistical data about the service. “Cookies” are stored from the beginning of the visit on our platform. In order to get more information, please read the information about the Google Analytics Cookie.
It is also possible to opt out of the location of “cookies” files by Google Analytics on your device.
Are “cookies” dangerous?
They are not, because “cookie” files are not computer programs and cannot be used as codes. They do not spread viruses and each user has the ability to manage “cookies” files on the end device. In addition, only parts of the data are processed in the “cookie” files, which to a greater extent do not allow full identification of the user.
Management of “cookies” files
We use “cookies” files only with the user’s consent. At any moment, you can turn off or change the possibility of saving “cookies” files on your device, through appropriate settings in the web browsing software (web browser). Standard software for viewing web pages implies saving files on the end device, and thus enables us to process the data collected in these files.
Since “cookie” files are used to remember your settings related to these files, you should know what the consequences are related to changing the settings, and in particular:
- in the case of turning off the possibility of saving “cookies” files on your end device, it may happen that you cannot log in to the given services and you cannot use their functions.
- in the case of using another end device, computer profile or web browser, it is necessary to re-determine your preferences regarding “cookies” files.
In order to obtain detailed information on the topic of managing the settings of “cookies” files, we recommend following the instructions of the web browser you are using. Veta savjetovanje d.o.o. as a service operator implemented solutions requested by
Directives on privacy and electronic continuity, which includes the use of “cookies”, because taking into account the best practice, it treats its clients and users who visit our services fairly and openly.
