1.  INTRODUCTORY PROVISION

This Privacy Policy (“Privacy Policy“) explains how we handle and treat your personal data when you (i) visit our site, www.cadeli.hr (the “Site“) or (ii) download our brochures (the “Brochures). It also includes information about individuals who apply to work at Cadeli.

This Privacy Policy will inform you of the nature of your personal data that is processed by us and how you can request that we delete, update or provide you with access to it.

This Privacy Policy is intended to assist you in making informed decisions when using the Site and our Brochures to understand how your personal data may be processed by us when you apply to work at Cadeli.

Please also note that this Privacy Policy only applies to the use of your personal data obtained by us.

2.  CADELI

Cadeli d.o.o. is a company specialized in providing services in structural engineering and design with headquarters in Rijeka. We place great emphasis on providing technically correct and economical engineering solutions. We offer innovative and economical design services using modern technologies and software. Our success is based on providing professional quality services on time and on budget.

Cadeli acts as the data controller with respect to you. Our identification and contact detail are as follows:

Cadeli Ltd

company id. no. 87172066218

registered address at Sarsoni 36, Viskovo, 51216 tel. +38591 949 1904

e-mail info@cadeli.hr

3.  WHAT PERSONAL DATA DO WE COLLECT

We may collect personal data from you in the course of our business, including through your use of our Site, when you contact or request information from us, such as downloading companies brochures. We may process the following personal data:

If you are a visitor to the Site or if you subscribe for our marketing communication: name and job title, contact information including the company you work for, email address and country you are located in, your preferences and interests If you are a potential recruit to join Cadeli: name and job title, contact information including email address, curriculum vitae, including your age and/or gender if you provide it to us, your education, employment history, and similar matters and similar information that you may provide to us, other information relevant to potential recruitment to Cadeli.

COOKIES

We also use cookies (small text files stored by your web browser when you use websites) and related technologies, such as pixels and beacons (collectively “Cookies”), to collect and store information when you use our applications. We use third-party analytics tools, such as Google Analytics. To learn more about our use of Cookies, see our Cookie Statement.

Except as described in our Cookie Statement, whether we collect data through the use of Cookies is up to you. You can change your mind at any time by going into your Settings within the application or by managing your Cookie preferences in the cookie dialog box.

SOCIAL NETWORKING DATA

Our applications may include content, buttons, or other tools that link to another company’s services and/or platform(s) (“Plugins”). We collect information about your use of Plugins through third-party programs, such as Facebook Ads, LinkedIn Campaign manager, and others. If you use an application that contains Plugins, information can be transferred directly from your device to a third-party provider of services and/or platforms. We do not control the data collected by Plugins. If you are

logged in to a social network, the social network may be able to link your use of our application to their services and/or platform.

For example, if you interact with a Plugin by clicking on “Like,” “Follow,” or “Share,” or by writing a comment, this information may automatically appear in your profile on the relevant social network service or platform. Even if you are not logged in, the Plugins may send your IP address to social network services and/or platforms.

Please note this when using our applications.

When you connect to a social networking service or platform on a device that is also used by others, these other users may be able to see the information that is stored or displayed in connection with your profile on the social networking service page.

4.  WHAT ARE THE PURPOSES OF THE PROCESSING OF PERSONAL DATA AND THE LEGAL BASIS FOR THE PROCESSING

We may use your personal data for the following purposes and on the following legal basis:

Sales

We collect and maintain personal data that you voluntarily submit to enable us to affect the sale of our services to you and which are necessary to fulfill legal obligations relating to the conclusion of the contract.

Legal basis for this is that the processing is necessary for compliance with legal obligations.

Marketing communications

We use the personal data that we receive from you or observe about you from your interactions with us to send you marketing communications.

We will only send you marketing communications where you have consented to receive such marketing communications, or where we have a lawful right to do so.

Customer insight

We analyze the personal data which we obtain from you during our customer and other surveys in order to improve our relationship with potential clients.

Legal basis for this processing is your consent.

Anti-piracy

We collect and analyse personal data which we obtain in connection with our anti-piracy program and relevant technical measures. Legal basis for this processing is our legitimate interest.

Recruitment

We use your personal information to assess your suitability for any position for which you may apply. Legal basis for this processing is our legitimate interest.

5.  WHO DO WE SHARE YOUR PERSONAL DATA WITH

We may share personal information with a variety of the following categories of third parties as necessary:

our professional advisers such as lawyers and accountants, government or regulatory authorities, third parties to whom we outsource certain services.

6.  THIRD-PARTY CONTRACTORS

As mentioned above, we may cooperate with sub-contractors, who will process personal data on our behalf and at our direction. We conduct an appropriate level of due diligence and put in place contractual documentation in relation to any

sub-contractor to ensure that they process personal data appropriately and according to our legal and regulatory obligations.

7.  HOW LONG DO WE KEEP YOUR PERSONAL DATA FOR

Personal data collected based on your consent will be retained by us until the consent is revoked.

8.  CONFIDENTIALITY AND THE SECURITY OF YOUR PERSONAL INFORMATION

We are committed to keeping the personal data provided to us secure and we have implemented appropriate information security policies, rules and technical measures to protect the personal data that we have under our control from unauthorized access, improper use or disclosure, unauthorized modification and unlawful destruction or accidental loss.

All of our partners, employees, consultants, workers and data processors (i.e. those who process your personal data on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal data, are obliged to respect the confidentiality of such personal data.

9.  WHAT ARE YOUR RIGHTS

You have the following rights in relation to the personal data we hold about you:

Right of access

If you ask us, we’ll confirm whether we’re processing your personal data and, if necessary, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.

Right to rectification

If the personal data we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified. If you are entitled to rectification and if we’ve shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Right to erasure

You can ask us to delete or remove your personal data in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Right to restrict processing

You can ask us to ‘block’ or suppress the processing of your personal data in certain circumstances, such as where you contest the accuracy of that personal data or you object to us. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible

for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Right to data portability

You have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Right to object

You can ask us to stop processing your personal information, and we will do so, if we are:

relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or processing your personal data for direct marketing purposes.

Right to withdraw consent

If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.

Right to lodge a complaint with the supervisory authority

If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the relevant Supervisory Authority.

Please note that some of these rights may be limited in particular where we have an overriding interest or legal obligation to continue to process the data.

10.  CHANGES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy from time to time. To ensure that you are always aware of how we use your personal data we will update this Privacy Policy from time to time to reflect any changes to our use of your personal data. We may also make changes as required to comply with changes in applicable law or regulatory requirements. Where it is practicable, we will notify you by email of any

significant changes. However, we encourage you to review this Privacy Policy periodically to be informed of how we use your personal data.