For entrepreneurs and organizations
By industry
For collaboration
Odaberite sučelje
Odaberite sučelje koje odgovara uslugama koje koristite.
Legal document
Privacy and Cookie Policy
Legal document
Privacy and Cookie Policy
Legal document
Privacy and Cookie Policy
Data controller
Data controller
Data controller
KUPUJ ONLINE d.o.o.
Ul. Fiorella La Guardie 13, 51000 Rijeka
Contact: +385 51 309 402
E-mail: info@kupujonline.com
KUPUJ ONLINE d.o.o.
Ul. Fiorella La Guardie 13, 51000 Rijeka
Contact: +385 51 309 402
E-mail: info@kupujonline.com
KUPUJ ONLINE d.o.o.
Ul. Fiorella La Guardie 13, 51000 Rijeka
Contact: +385 51 309 402
E-mail: info@kupujonline.com
Data protection officer (DPO)
Data protection officer (DPO)
Data protection officer (DPO)
Contact: dpo@feralis.hr
Contact: dpo@feralis.hr
Contact: dpo@feralis.hr
Collection of personal data
Collection of personal data
Collection of personal data
Purpose of collecting personal data
Purpose of collecting personal data
Purpose of collecting personal data
Personal data may be collected through this website for the following purposes:
to respond to an inquiry/request you have submitted;
for the purpose of preparing a contract and creating administrative access to the BillKO dashboard;
for the purpose of completing a service purchase;
to ensure better functionality of the features on this website.
Personal data may be collected through this website for the following purposes:
to respond to an inquiry/request you have submitted;
for the purpose of preparing a contract and creating administrative access to the BillKO dashboard;
for the purpose of completing a service purchase;
to ensure better functionality of the features on this website.
Personal data may be collected through this website for the following purposes:
to respond to an inquiry/request you have submitted;
for the purpose of preparing a contract and creating administrative access to the BillKO dashboard;
for the purpose of completing a service purchase;
to ensure better functionality of the features on this website.
Categories of personal data
Categories of personal data
Categories of personal data
The following categories of personal data may be collected through this website:
Identification data;
Contact information;
Organization-related data;
Financial data;
Other data you provide to us through messages.
The following categories of personal data may be collected through this website:
Identification data;
Contact information;
Organization-related data;
Financial data;
Other data you provide to us through messages.
The following categories of personal data may be collected through this website:
Identification data;
Contact information;
Organization-related data;
Financial data;
Other data you provide to us through messages.
Legal basis for processing personal data
Legal basis for processing personal data
Legal basis for processing personal data
This website uses the following legal bases for collecting personal data:
Performance of a contract/service: Personal data is processed to enable the execution of a contract (service) or to take steps at the request of the data subject prior to entering into a contract (service provision).
Explicit consent: Certain data may be processed based on explicit consent. This includes data collected through cookies, which users agree to beforehand. Withdrawal of cookie consent does not affect the lawfulness of data processing carried out prior to the withdrawal.
This website uses the following legal bases for collecting personal data:
Performance of a contract/service: Personal data is processed to enable the execution of a contract (service) or to take steps at the request of the data subject prior to entering into a contract (service provision).
Explicit consent: Certain data may be processed based on explicit consent. This includes data collected through cookies, which users agree to beforehand. Withdrawal of cookie consent does not affect the lawfulness of data processing carried out prior to the withdrawal.
This website uses the following legal bases for collecting personal data:
Performance of a contract/service: Personal data is processed to enable the execution of a contract (service) or to take steps at the request of the data subject prior to entering into a contract (service provision).
Explicit consent: Certain data may be processed based on explicit consent. This includes data collected through cookies, which users agree to beforehand. Withdrawal of cookie consent does not affect the lawfulness of data processing carried out prior to the withdrawal.
Recipient of personal data
Recipient of personal data
Recipient of personal data
The personal data collected may be transferred to providers of information and communication solutions, payment services, and other service providers acting as our data processors. These processors guarantee an adequate level of data protection and have implemented appropriate technical and organizational measures to ensure data security and compliance with the requirements of the General Data Protection Regulation (GDPR). A data processing agreement/contract has been concluded with such processors based on the Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors, which forms a dedicated part of the contract. This agreement specifies detailed rules for handling personal data, and processors are not authorized to process personal data without our prior instruction nor to transfer it to third parties. It is important to note that personal data will not be transferred to third parties for direct marketing purposes.
The personal data collected may be transferred to providers of information and communication solutions, payment services, and other service providers acting as our data processors. These processors guarantee an adequate level of data protection and have implemented appropriate technical and organizational measures to ensure data security and compliance with the requirements of the General Data Protection Regulation (GDPR). A data processing agreement/contract has been concluded with such processors based on the Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors, which forms a dedicated part of the contract. This agreement specifies detailed rules for handling personal data, and processors are not authorized to process personal data without our prior instruction nor to transfer it to third parties. It is important to note that personal data will not be transferred to third parties for direct marketing purposes.
The personal data collected may be transferred to providers of information and communication solutions, payment services, and other service providers acting as our data processors. These processors guarantee an adequate level of data protection and have implemented appropriate technical and organizational measures to ensure data security and compliance with the requirements of the General Data Protection Regulation (GDPR). A data processing agreement/contract has been concluded with such processors based on the Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between controllers and processors, which forms a dedicated part of the contract. This agreement specifies detailed rules for handling personal data, and processors are not authorized to process personal data without our prior instruction nor to transfer it to third parties. It is important to note that personal data will not be transferred to third parties for direct marketing purposes.
Data collection through social media
Data collection through social media
Data collection through social media
The pages and profiles we manage on social media (LinkedIn) are always listed under the exact name of the data controller.
Personal data about our contacts collected through these platforms is used solely for responding to inquiries or comments and is not processed or stored for any other purpose.
The pages and profiles we manage on social media (LinkedIn) are always listed under the exact name of the data controller.
Personal data about our contacts collected through these platforms is used solely for responding to inquiries or comments and is not processed or stored for any other purpose.
The pages and profiles we manage on social media (LinkedIn) are always listed under the exact name of the data controller.
Personal data about our contacts collected through these platforms is used solely for responding to inquiries or comments and is not processed or stored for any other purpose.
Data retention period
Data retention period
Data retention period
Personal data collected through this website is processed only until the purpose for which it was collected has been fulfilled. After the purpose ceases, the personal data is no longer processed, unless legal regulations require us to continue processing or the processing is based on our legitimate interest.
Data processed on the basis of consent is stored until the purpose of processing is achieved or until you withdraw your consent.
Personal data collected through this website is processed only until the purpose for which it was collected has been fulfilled. After the purpose ceases, the personal data is no longer processed, unless legal regulations require us to continue processing or the processing is based on our legitimate interest.
Data processed on the basis of consent is stored until the purpose of processing is achieved or until you withdraw your consent.
Personal data collected through this website is processed only until the purpose for which it was collected has been fulfilled. After the purpose ceases, the personal data is no longer processed, unless legal regulations require us to continue processing or the processing is based on our legitimate interest.
Data processed on the basis of consent is stored until the purpose of processing is achieved or until you withdraw your consent.
Use of cookies
Use of cookies
Use of cookies
This website uses essential (technical) cookies and non-essential cookies only when the user has given prior consent for their use. Essential technical cookies are necessary for the functioning of the website and cannot be disabled.
Non-essential cookies — typically statistical and marketing — are used only when the user consents to them, for the purpose of improving system performance and enhancing the user experience. At any time, the user may manage such cookies and withdraw consent to stop further processing without any negative consequences.
Several websites currently allow users to disable cookie storage for different services. You can find more information on the following pages:
This website uses essential (technical) cookies and non-essential cookies only when the user has given prior consent for their use. Essential technical cookies are necessary for the functioning of the website and cannot be disabled.
Non-essential cookies — typically statistical and marketing — are used only when the user consents to them, for the purpose of improving system performance and enhancing the user experience. At any time, the user may manage such cookies and withdraw consent to stop further processing without any negative consequences.
Several websites currently allow users to disable cookie storage for different services. You can find more information on the following pages:
This website uses essential (technical) cookies and non-essential cookies only when the user has given prior consent for their use. Essential technical cookies are necessary for the functioning of the website and cannot be disabled.
Non-essential cookies — typically statistical and marketing — are used only when the user consents to them, for the purpose of improving system performance and enhancing the user experience. At any time, the user may manage such cookies and withdraw consent to stop further processing without any negative consequences.
Several websites currently allow users to disable cookie storage for different services. You can find more information on the following pages:
More information about cookies
More information about cookies
What are cookies?
What are cookies?
Cookies are small files that a web browser stores on a computer, mobile device, or any other device used to visit a website. They are stored at the request of the website and used for its future needs. These needs vary depending on the cookie’s purpose — for example, cookies may store the language selected on a multilingual site, track the order of visited pages, store items in a shopping cart, or save information such as a user’s IP address, username and password, email address, geolocation, device type, visited pages, and more.
Cookies are small files that a web browser stores on a computer, mobile device, or any other device used to visit a website. They are stored at the request of the website and used for its future needs. These needs vary depending on the cookie’s purpose — for example, cookies may store the language selected on a multilingual site, track the order of visited pages, store items in a shopping cart, or save information such as a user’s IP address, username and password, email address, geolocation, device type, visited pages, and more.
Cookies are small files that a web browser stores on a computer, mobile device, or any other device used to visit a website. They are stored at the request of the website and used for its future needs. These needs vary depending on the cookie’s purpose — for example, cookies may store the language selected on a multilingual site, track the order of visited pages, store items in a shopping cart, or save information such as a user’s IP address, username and password, email address, geolocation, device type, visited pages, and more.
Types of cookies by duration
Types of cookies by duration
According to duration, cookies can be:
Persistent cookies – these remain stored on the device after the browser is closed. Websites use them to save data such as login details, language settings, or cookie preferences so users do not have to re-enter them during future visits. Persistent cookies may remain stored for days, months, or even years.
Session cookies – these are removed when the browser is closed. They store temporary information, such as recently visited pages or items added to a shopping cart during an online purchase.
According to duration, cookies can be:
Persistent cookies – these remain stored on the device after the browser is closed. Websites use them to save data such as login details, language settings, or cookie preferences so users do not have to re-enter them during future visits. Persistent cookies may remain stored for days, months, or even years.
Session cookies – these are removed when the browser is closed. They store temporary information, such as recently visited pages or items added to a shopping cart during an online purchase.
According to duration, cookies can be:
Persistent cookies – these remain stored on the device after the browser is closed. Websites use them to save data such as login details, language settings, or cookie preferences so users do not have to re-enter them during future visits. Persistent cookies may remain stored for days, months, or even years.
Session cookies – these are removed when the browser is closed. They store temporary information, such as recently visited pages or items added to a shopping cart during an online purchase.
Types of cookies by source
Types of cookies by source
According to their source, cookies can be:
First-party cookies – stored by the website the user is visiting directly (e.g., an online store during a purchase).
Third-party cookies – stored by other websites or web services that form part of the primary website visited by the user. They are often used to track user behavior or to support certain services (e.g., a web chat service saving a user identifier to route messages correctly).
According to their source, cookies can be:
First-party cookies – stored by the website the user is visiting directly (e.g., an online store during a purchase).
Third-party cookies – stored by other websites or web services that form part of the primary website visited by the user. They are often used to track user behavior or to support certain services (e.g., a web chat service saving a user identifier to route messages correctly).
According to their source, cookies can be:
First-party cookies – stored by the website the user is visiting directly (e.g., an online store during a purchase).
Third-party cookies – stored by other websites or web services that form part of the primary website visited by the user. They are often used to track user behavior or to support certain services (e.g., a web chat service saving a user identifier to route messages correctly).
Cookies by function
Cookies by function
The most common functional categories of cookies include:
Technical/essential cookies – required for the basic functioning of the website, such as session identifiers or the content of a shopping cart.
Functional cookies – allow enhanced functionality and personalization, such as storing language preferences.
Statistical cookies – collect aggregated data on how users interact with the website, without identifying individual users.
Marketing cookies – collect data on user behavior and preferences to display personalized advertisements.
The most common functional categories of cookies include:
Technical/essential cookies – required for the basic functioning of the website, such as session identifiers or the content of a shopping cart.
Functional cookies – allow enhanced functionality and personalization, such as storing language preferences.
Statistical cookies – collect aggregated data on how users interact with the website, without identifying individual users.
Marketing cookies – collect data on user behavior and preferences to display personalized advertisements.
The most common functional categories of cookies include:
Technical/essential cookies – required for the basic functioning of the website, such as session identifiers or the content of a shopping cart.
Functional cookies – allow enhanced functionality and personalization, such as storing language preferences.
Statistical cookies – collect aggregated data on how users interact with the website, without identifying individual users.
Marketing cookies – collect data on user behavior and preferences to display personalized advertisements.
Security of personal data processing
Security of personal data processing
Security of personal data processing
We collect and process personal data in a manner that ensures an appropriate level of security and confidentiality, enabling the effective application of data protection principles, data minimization, limited processing scope, controlled retention periods, and restricted accessibility. To achieve this, we have implemented suitable technical and organizational protection measures that provide a level of security appropriate to the risks posed by data processing and the nature of the personal data being protected, taking into account the characteristics and costs of implementing such measures.
We ensure the highest level of data protection for BillKO plan users. For secure data transmission between the user’s computer and our servers, we use the PCI DSS standard with TLS 1.2 cryptographic protocols and SSL technology with a minimum of 128-bit encryption or higher. All personal data, credit card numbers, or other payment information submitted by users is transmitted exclusively through a secure connection with at least 128-bit encryption.
We regularly review processing activities that may pose a risk to the rights and freedoms of individuals and have implemented appropriate safeguards to protect personal data from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access — especially in cases where processing involves transmitting personal data over a network — as well as from all other unlawful forms of processing.
We collect and process personal data in a manner that ensures an appropriate level of security and confidentiality, enabling the effective application of data protection principles, data minimization, limited processing scope, controlled retention periods, and restricted accessibility. To achieve this, we have implemented suitable technical and organizational protection measures that provide a level of security appropriate to the risks posed by data processing and the nature of the personal data being protected, taking into account the characteristics and costs of implementing such measures.
We ensure the highest level of data protection for BillKO plan users. For secure data transmission between the user’s computer and our servers, we use the PCI DSS standard with TLS 1.2 cryptographic protocols and SSL technology with a minimum of 128-bit encryption or higher. All personal data, credit card numbers, or other payment information submitted by users is transmitted exclusively through a secure connection with at least 128-bit encryption.
We regularly review processing activities that may pose a risk to the rights and freedoms of individuals and have implemented appropriate safeguards to protect personal data from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access — especially in cases where processing involves transmitting personal data over a network — as well as from all other unlawful forms of processing.
We collect and process personal data in a manner that ensures an appropriate level of security and confidentiality, enabling the effective application of data protection principles, data minimization, limited processing scope, controlled retention periods, and restricted accessibility. To achieve this, we have implemented suitable technical and organizational protection measures that provide a level of security appropriate to the risks posed by data processing and the nature of the personal data being protected, taking into account the characteristics and costs of implementing such measures.
We ensure the highest level of data protection for BillKO plan users. For secure data transmission between the user’s computer and our servers, we use the PCI DSS standard with TLS 1.2 cryptographic protocols and SSL technology with a minimum of 128-bit encryption or higher. All personal data, credit card numbers, or other payment information submitted by users is transmitted exclusively through a secure connection with at least 128-bit encryption.
We regularly review processing activities that may pose a risk to the rights and freedoms of individuals and have implemented appropriate safeguards to protect personal data from accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure, or access — especially in cases where processing involves transmitting personal data over a network — as well as from all other unlawful forms of processing.
Exercising your rights
Exercising your rights
Exercising your rights
Right of access
Right of access
Right of access
You may request confirmation at any time as to whether your personal data is being processed, as well as detailed information about the processing — particularly the purpose of processing, the type/categories of personal data involved (including access to your personal data), the recipients or categories of recipients, and the envisaged retention period.
You may request confirmation at any time as to whether your personal data is being processed, as well as detailed information about the processing — particularly the purpose of processing, the type/categories of personal data involved (including access to your personal data), the recipients or categories of recipients, and the envisaged retention period.
You may request confirmation at any time as to whether your personal data is being processed, as well as detailed information about the processing — particularly the purpose of processing, the type/categories of personal data involved (including access to your personal data), the recipients or categories of recipients, and the envisaged retention period.
Right to rectification
Right to rectification
Right to rectification
We ensure your right to rectification, allowing you to request without delay the correction of inaccurate personal data and the completion of incomplete data.
We ensure your right to rectification, allowing you to request without delay the correction of inaccurate personal data and the completion of incomplete data.
We ensure your right to rectification, allowing you to request without delay the correction of inaccurate personal data and the completion of incomplete data.
Right to erasure
Right to erasure
Right to erasure
You have the right to request the deletion of your personal data. If the request is justified and no legal regulations require us to retain the data, the data will be deleted without unnecessary delay.
You have the right to request the deletion of your personal data. If the request is justified and no legal regulations require us to retain the data, the data will be deleted without unnecessary delay.
You have the right to request the deletion of your personal data. If the request is justified and no legal regulations require us to retain the data, the data will be deleted without unnecessary delay.
Right to restriction of proceesing
Right to restriction of proceesing
Right to restriction of proceesing
You have the right to request the restriction of processing of your personal data in the situations provided by the General Data Protection Regulation (GDPR). In particular, you may restrict processing based on legitimate interest as the legal basis for processing.
You have the right to request the restriction of processing of your personal data in the situations provided by the General Data Protection Regulation (GDPR). In particular, you may restrict processing based on legitimate interest as the legal basis for processing.
You have the right to request the restriction of processing of your personal data in the situations provided by the General Data Protection Regulation (GDPR). In particular, you may restrict processing based on legitimate interest as the legal basis for processing.
Right to withdraw consent
Right to withdraw consent
Right to withdraw consent
You have the right to withdraw your consent at any time. It is important to note that withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
You have the right to withdraw your consent at any time. It is important to note that withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
You have the right to withdraw your consent at any time. It is important to note that withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Right to object
Right to object
Right to object
You have the right to object to the processing of your personal data in all cases provided by the GDPR. In particular, you may object to processing based on legitimate interest, and you may restrict or completely prohibit such processing.
You have the right to object to the processing of your personal data in all cases provided by the GDPR. In particular, you may object to processing based on legitimate interest, and you may restrict or completely prohibit such processing.
You have the right to object to the processing of your personal data in all cases provided by the GDPR. In particular, you may object to processing based on legitimate interest, and you may restrict or completely prohibit such processing.
Right to lodge a complaint
Right to lodge a complaint
Right to lodge a complaint
If you believe that the processing of your personal data has resulted in a violation of your rights or the provisions of the GDPR, you may file a complaint with the supervisory authority:
the Croatian Personal Data Protection Agency (AZOP), Ulica grada Vukovara 54, Zagreb.
If you believe that the processing of your personal data has resulted in a violation of your rights or the provisions of the GDPR, you may file a complaint with the supervisory authority:
the Croatian Personal Data Protection Agency (AZOP), Ulica grada Vukovara 54, Zagreb.
If you believe that the processing of your personal data has resulted in a violation of your rights or the provisions of the GDPR, you may file a complaint with the supervisory authority:
the Croatian Personal Data Protection Agency (AZOP), Ulica grada Vukovara 54, Zagreb.
Contact information
Contact information
Contact information
For additional information on the processing of personal data or to exercise your rights related to it, please contact us through our Data Protection Officer or by using any of the available contact options. Data Protection Officer e-mail: feralis@feralis.hr Your request will be processed within 30 days from the moment your identity is successfully verified. We will provide a response in a standard electronic format, unless you explicitly request otherwise.
For additional information on the processing of personal data or to exercise your rights related to it, please contact us through our Data Protection Officer or by using any of the available contact options. Data Protection Officer e-mail: feralis@feralis.hr Your request will be processed within 30 days from the moment your identity is successfully verified. We will provide a response in a standard electronic format, unless you explicitly request otherwise.
For additional information on the processing of personal data or to exercise your rights related to it, please contact us through our Data Protection Officer or by using any of the available contact options. Data Protection Officer e-mail: feralis@feralis.hr Your request will be processed within 30 days from the moment your identity is successfully verified. We will provide a response in a standard electronic format, unless you explicitly request otherwise.
Other information
Other information
Other information
This privacy policy is regularly reviewed, updated, and modified to accurately reflect the current state of personal data collection and processing on this website. Please review these changes periodically.In the event of significant changes or changes that may affect your rights and freedoms, we will inform you through a pop-up notification immediately upon visiting this website.
This privacy policy is regularly reviewed, updated, and modified to accurately reflect the current state of personal data collection and processing on this website. Please review these changes periodically.In the event of significant changes or changes that may affect your rights and freedoms, we will inform you through a pop-up notification immediately upon visiting this website.
This privacy policy is regularly reviewed, updated, and modified to accurately reflect the current state of personal data collection and processing on this website. Please review these changes periodically.In the event of significant changes or changes that may affect your rights and freedoms, we will inform you through a pop-up notification immediately upon visiting this website.
Last updated: January 2025
Last updated: January 2025
Last updated: January 2025
Contact
For questions about this document, contact support@billko.eu
Contact
For questions about this document, contact support@billko.eu
Contact
For questions about this document, contact support@billko.eu