DATA PROTECTION

STATEMENT OF CONVERSION

All payments will be made in the local currency of the Republic of Macedonia - Denar (den). For the informative display of prices in other currencies, the average exchange rate of the National Bank of the Republic of Macedonia is used. The amount for which your payment card will be charged will be expressed in the local currency through conversion, according to the exchange rate used by the card organizations, which cannot be known to us at the time of the transaction. As a result of this conversion, there is a possibility of a slight difference from the original prices listed on our site. Thank you for your understanding.'

USER PRIVACY STATEMENT

Leomar Group doo respects the privacy of every visitor. All visitor data will not be made available to any other person outside of Leomar Group doo and its affiliated companies. They will be used exclusively for marketing purposes of Leomar Group doo.

On behalf of the COMPANY, we undertake to protect the privacy of all our customers. We collect only the necessary, basic data about buyers/users and data necessary for operation and informing users in accordance with good business practices and in order to provide quality service. All user/customer data is carefully stored and is available only to employees who need this data to perform their work. All our employees are responsible for respecting the principle of Protection of Buyer's Privacy.

As an individual you have the right to find out what data we hold about you and to change it if necessary. You also have the right to object to further data collection. We will take all measures to meet your requirements.

By collecting this data, Leomar Group doo achieves the following:
* Makes it easier for you to use the site by not having to enter your details more than once.
* Helps us forward information and notifications faster.
* It helps us provide you with content texts that are important to you.
* You will soon be able to find services or information that Leomar Group doo has and provides.
* We use the data to improve the site.
* To determine general trends within the Site and its use.
* To notify you about new products, special offers, new information and other new services that Leomar Group doo believes may be of interest to you.

STATEMENT FOR THE PROTECTION OF CONFIDENTIAL TRANSACTION DATA

Description of the method of protection of the confidential data for the transaction:
"When paying with a card over the Internet, the data for the card is entered on a protected page of the bank. The security of the data when paying with a card is guaranteed by the processor of the payment cards on whose pages the entire payment process is carried out. At no time does the company Leomar Group doo, nor the Bank that enables the acceptance of payment cards on behalf and on behalf of the company Leomar Group doo, have access to the data from your payment card."

"When entering payment card data, confidential information is transmitted via a public network in a protected (encrypted) form using the SSL protocol and the PKI system, as currently the most up-to-date technology."
The security of the data during the purchase is guaranteed by the payment card processor, NLB banka Skopje, so that the complete payment process is carried out on the bank's website. At no time are the payment card data available in our system.
Refunds are made exclusively through VISA and Maestro payment methods, which means that the bank will refund the payment card user's account at the seller's request.

INFORMATION ON PERSONAL DATA PROCESSING IN LEOMAR GROUP DOO Skopje

Identity and contact details of the Controller:
Name: LEOMAR GROUP LLC
Headquarters: Pariska no. 13-1/1, 1000 Skopje
Email address: office@bonatti.mk
Contact phone: +389 2 3201055
Contact details for the personal data protection officer:
Name and surname: Marijana Marusić Kos
Email address: marijana@marusic-kos.mk

Our vision for personal data protection
Personal data is information that directly or indirectly refers or may refer to your person. LEOMAR GROUP DOO (hereinafter: LEOMAR GROUP) as a controller of personal data fully deserves your trust because it pays great attention to respect for privacy and the protection of personal data. LEOMAR GROUP guarantees that it will protect your personal data in accordance with the Law on the Protection of Personal Data and internal acts.
In the following you will find all the information about the nature and extent of processing of your data by LEOMAR GROUP.
Purposes, legal basis and categories of personal data processed
LEOMAR GROUP collects, processes and stores your personal data legally, transparently and fairly.
The following personal data processing processes are carried out in the LEOMAR GROUP.

PROCESSING OF EMPLOYEES' DATA
Purpose - realization of rights and obligations from an employment relationship,
Legal bases - fulfillment of legal obligation, fulfillment of contractual obligation and statement of consent,
Category of personal data
Name and surname
Address
Telephone number
EMBG,
Day, month and year of birth
Place of birth
Pol
Age
Type and degree of completed education
Title
Duration of the employment relationship (definite or indefinite time)
Working hours (full or part-time)
other personal data contained in the employee's biography (Curriculum Vitae – CV).

PERFORMING DIRECT MARKETING
Purpose - performing direct marketing, i.e. delivering information about products, promotions, novelties and offers in our stores,
Legal basis – statement of consent
The processing is carried out exclusively on the basis of your previously secured consent. Consent is provided through the following channels: a form that is filled out in our stores containing a written statement of consent and e-mail.
Categories of personal data
name and surname
home address
e-mail address and
telephone number

ONLINE SALE
Purpose – online sales
Legal basis - fulfillment of a contractual obligation
Categories of personal data
name and surname
home address
e-mail address and
telephone number

We assure you that by LEOMAR GROUP, personal data is not processed for any purpose other than the purpose for which it was collected.
At the same time, we assure you that LEOMAR GROUP fully respects the principle of minimum volume of data and collects only those data that are necessary, relevant and limited to fulfill the purpose for which they are processed.
Terms of storage of your personal data
LEOMAR GROUP does not keep your data in a form that enables your identification, longer than the time necessary to achieve the purpose for which it is processed.
The personal data of the employees are kept within the terms established by law, that is, during the duration of the employment relationship, and after the termination of the employment relationship, they are kept as a document of permanent value. The personal data of users who have given their consent for direct marketing are kept until they withdraw their consent. Personal data of online shoppers is kept for 12 months after the purchase is completed.
If an administrative or judicial procedure has been initiated, personal data may be stored until the final, i.e. legally binding, end of the procedure.
After the expiration of the storage periods, personal data is deleted from the information system of LEOMAR GROUP or from the servers of service providers, that is, the paper documentation is destroyed.
How do we store and protect your personal data?
LEOMAR GROUP processes your personal data in accordance with the provisions of the Law on Personal Data Protection.
Personal data processed by LEOMAR GROUP is protected from unauthorized access, disclosure, use, modification or destruction. The data is stored in our business premises and in our information system, but also on the servers of service providers with whom LEOMAR GROUP has concluded agreements that ensure that the service providers, as processors of personal data, comply with the regulations for the protection of personal data.
Neither LEOMAR GROUP, nor our service providers, will forward your usage data to third parties, unless there is consent from you or there is a legal obligation.
Our employees are obliged to work in accordance with the internal acts for the protection of personal data, and service providers have the same obligation, based on a contract for the processing of personal data.
Only persons authorized by LEOMAR GROUP have the right to access your personal data, to the extent necessary for the performance of their work tasks or engagement, and in accordance with the issued authorizations for processing personal data. LEOMAR GROUP applies technical and organizational measures to protect the confidentiality, integrity and availability of data, according to the risk.
Every authorized person who has access to your personal data signs a Statement committing to secrecy and protection of personal data during their processing.
What are your rights?
Right to information - You have the right to be informed about which data LEOMAR GROUP collects about you, for what purposes it processes it, how long it keeps it and whether it discloses it to third parties.
Right of access – You have the right to submit a request for access to your personal data. This right allows you to receive information about the data that is being processed for you.
Right to rectification and deletion – You have the right to request rectification or addition, as well as deletion of your personal data if the entire purpose for which they were processed has ceased, if you have withdrawn your consent to their processing, if the data has been illegally processed or there is no longer a legal basis for their processing.
Right to restriction of processing – You have the right to request restriction of processing of personal data, as an alternative to the right to deletion of data, if you dispute the accuracy of your personal data, in the period until LEOMAR GROUP confirms their accuracy, if you consider that the processing is illegal, but you oppose the deletion, or if the data is necessary for the realization of your legal requirements.
Right to data portability – You have the right to request your personal data in a structured, commonly used and machine-readable format and to transfer it to another company, without interference from us. This right is applicable when the processing of personal data is carried out on the basis of consent or agreement and when the processing is carried out by automated means.
Right to object – You have the right to object if the processing of your personal data is carried out for the purposes of direct marketing and profiling related to direct marketing or for the purposes of scientific or historical research or for statistical purposes.
Right to withdraw consent - We also inform you that you can withdraw your consent to the processing of personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before the withdrawal.
In order to exercise your rights, please:
send a request to the e-mail address of the personal data protection officer
marijana@marusic-kos.mk or at our postal address: LEOMAR GROUP DOO Skopje, ul. Pariska b.13-1/1, for the personal data protection officer.
You can contact the same addresses regarding any question related to the processing of your personal data.
Right of access in accordance with Article 19 of the Law on Personal Data Protection
In accordance with Article 19 of the Law on Personal Data Protection, you have the right to request free of charge information from us about whether we process your personal data, access to that data, as well as information:
About the type of processing;
About the type of personal data that is processed;
For users or categories of users to whom personal data has been disclosed or will be disclosed, especially users in third countries or international organizations;
For the anticipated period for which the personal data will be kept, and if this is not possible, the criteria used to determine that period;
For the existence of the right to request from the controller (LEOMAR GROUP) correction or deletion of personal data; the right to limit the processing of personal data related to the subject of the personal data and the right to object to such processing; the right to submit a request to the state authority (the Personal Data Protection Agency); about the source of personal data (available information), if the personal data are not provided by the persons to whom they refer (by you); for the existence of a procedure for automated decision-making, including profiling from Article 26 paragraph 1 and 4 of the Law on the Protection of Personal Data, and in those cases, necessary information about the logic that is used, as well as about the importance and expected consequences of that processing for the person to whom the data refer (you).
If personal data is transferred to another country or international organization, you have the right to be informed about the appropriate protection measures related to the transfer, in accordance with Article 50 of the Law on Personal Data Protection.
Right to rectification in accordance with Article 20 of the Law on Personal Data Protection
Right to rectification in accordance with Article 20 of the Personal Data Protection Law, you have the right to request that your incorrect personal data be corrected without undue delay. Depending on the type of processing, you have the right to supplement your incomplete personal data, which includes providing additional statements.

Right to erasure in accordance with Article 21 of the Law on Personal Data Protection
You have the right to request that your personal data be deleted by us in the following cases:
Personal data are no longer necessary to achieve the purpose for which they were collected or otherwise processed;
If you have withdrawn the consent on the basis of which the processing was carried out, in accordance with Article 10, paragraph (1), point 1 or Article 13 paragraph (2), point 2 of the Law on the Protection of Personal Data, and there is no other legal basis for processing;
When you submit an objection to the processing in accordance with Article 25, paragraph 1 or 2 of the Law on the Protection of Personal Data, and there is no other legal basis for processing that prevails over the legitimate interest, right or freedom of the person to whom the data refers;
Personal data has been illegally processed;
Personal data must be deleted in order to comply with our legal obligations;
Personal data are collected in connection with the use of information society services from Article 12, paragraph 1 of the Law on the Protection of Personal Data;
If we have publicly published personal data and if we are obliged to delete the data, we will take all reasonable measures, including technical measures, in accordance with the available technologies and opportunities to cover the costs of their use, in order to notify other controllers who process that data, that we have submitted a request for the deletion of all copies of data and requests, that is, electronic links with that data.

Right to restriction of processing in accordance with Article 22 of the Law on Protection of Personal Data

You have the right to request that we limit the processing of your personal data if one of the following conditions is met:

You dispute the accuracy of the personal data, within a period that allows us to verify the accuracy of the personal data;
The processing is unlawful, but you do not allow the deletion of the personal data and request a limited use of the data instead of deletion;
The controller no longer needs the personal data to achieve the purpose of the processing, but you need them for the purpose of submitting, exercising or defending a legal claim; or
You have submitted an objection to the processing in accordance with Article 25, paragraph 1 or 2 of the Law on the Protection of Personal Data, and an assessment is underway as to whether the legal basis for processing by the controller exceeds your interests.

Right to data portability in accordance with Article 24 of the Law on Personal Data Protection

You have the right to receive your personal data, which you have previously submitted to us, in a structured, commonly used and electronically readable form, and you have the right to transfer that data to another controller without any problem on our part, if the following conditions are cumulatively met:

The processing is based on consent within the framework of Article 10, paragraph (1), point 1 or Article 13 paragraph (2), point 2 of the Law on the Protection of Personal Data or on the basis of an agreement, in accordance with Article 10, paragraph (1), point 2 of the same law; processing is done automatically.

This right includes the right for your personal data to be immediately transferred to another controller directly by us, provided that this is technically feasible.

Right to object in accordance with Article 25 of the Law on Personal Data Protection

Under the terms of Article 25 paragraph 1 of the Law on Personal Data Protection, data processing may be subject to objection for reasons that depend on your specific situation.
If you believe that this is justified in relation to the special situation in which you are, you have the right at any time to the controller (LEOMAR GROUP) to submit an objection to the processing of your personal data, which is carried out in accordance with Article 10, paragraph (1), point 6 of the Law on the Protection of Personal Data, in which case we are obliged to stop processing your data, unless there are legal reasons for processing that exceed the interests, rights or freedom of the persons who the data refer to or are related to the submission, realization or defense of the legal claim.

The right to submit a request to the Agency for the Protection of Personal Data
If you believe that the processing of your personal data by LEOMAR GROUP is not in accordance with the provisions of the Law on the Protection of Personal Data, or if you believe that any of your rights to the protection of personal data have been violated, you have the right to submit a request for the determination of a violation of the regulations on the protection of personal data before the Agency for the Protection of Personal Data. You can download the request at the following link: https://www.dzlp.mk/sites/default/files/u4/baranje_za_utvrduvanje_na_prekrsuvanje_na_zzlp.do
This Information on the processing of personal data may change from time to time.
LEOMAR GROUP will post an updated version of the Information on the Processing of Personal Data on this page.
Date of posting of the Information or last modification: 01.02.2021, Skopje

C KOŠARICA

C KOŠARICA