Home

Privacy Policy

Personal Data Protection Rules on the Website www.belupo.hr

1. General Information

These Privacy Protection Rules (hereinafter: the Rules) describe which personal data we collect, how we process them, and for what purposes we use them, as well as the rights related to your data.

2. Data Controller

Belupo d.d., Koprivnica, Danica 5, PIN (OIB): 74181493335 (hereinafter: Belupo) processes personal data of users of its services and visitors of the website www.belupo.hr in accordance with applicable regulations governing personal data protection – Regulation (EU 2016/679 of the European Parliament and of the Council of 27 April 2016; hereinafter: the General Regulation) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/2018).

We respect your privacy and process personal data fairly and lawfully, exclusively on the basis of valid legal grounds, i.e. in accordance with your consent to processing.

3. Data Protection Officer

Address: Belupo d.d., Ulica Danica 5, HR-48 000 Koprivnica
Tel: 048 652 815, Fax: 048 624 992, Mob: 098 98 24 870, dpo@belupo.hr

4. Purpose and Legal Basis for Personal Data Processing

Use of the website www.belupo.hr

Access to the website www.belupo.hr is free and does not require registration. Only healthcare professionals may register if they wish to access content intended exclusively for them. During registration, we collect your username and email address.

Contacting us

If you contact us with inquiries, the data you provide will be processed solely for the purpose of providing the requested information. Personal data necessary for handling product (medicine) complaints are stored for 6 (six) years from receipt, in accordance with applicable regulations. Personal data provided during registration will be processed for as long as the purpose exists, i.e. for the duration of your registration. After that, your personal data will be deleted unless you allow further storage or we are legally obliged to retain the data.

4.1 Legal obligations (Article 6(1)(c) GDPR)

We process personal data to fulfill legal obligations for the purposes of:

  • employment at Belupo d.d.

  • fulfillment of contractual or legal obligations

  • attendance at events, if necessary

  • compliance with regulatory obligations and requests of state authorities

4.2 Legitimate interest (Article 6(1)(f) GDPR)

We process personal data for the purposes of:

  • participation in trainings and professional lectures

  • managing visitor entry records to Belupo premises

  • video surveillance for protection of persons and property

  • conducting business risk assessments

  • managing business relationships

4.3 Consent (Article 6(1)(a) GDPR)

We process personal data based on consent for:

  • improving website functionality and user experience

  • other cases where we separately request your consent

5. Types of Personal Data We Process

Depending on the purpose, we may process:

  • basic personal data (name, surname, PIN/OIB, address, age, gender, contact details, bank account data for financial transactions)

  • IP address, access time and date, time zone difference, request content, HTTP status code, data transfer volume, referring website, browser type, language, software version

6. Video Surveillance

  • Purpose: protection of persons and property

  • Legal basis: legitimate interest

  • Recipients: police, courts, or other authorities when required

  • Retention: up to 6 months, or longer if used as evidence in proceedings

7. Recipients of Personal Data

a) Recipients

We may share data only when legally required or upon request of competent authorities. We also use carefully selected service providers under data processing agreements, who process data only according to our instructions.

b) Transfer outside the EU/EEA

Some data may be processed outside the EU/EEA. In such cases, we ensure an adequate level of protection through contractual safeguards or your explicit consent.

8. Data Security

We process the collected personal data with strict application of appropriate legal, technical, and organizational security measures in order to prevent any unauthorized data processing. Access to your personal data is limited solely to those employees who require such information to provide our services. We continuously educate our employees on the importance of data confidentiality, as well as on safeguarding privacy and protecting your data.

We collect only the data necessary for the specific processing purpose and do not retain them longer than required, or as prescribed by law, i.e. until you withdraw your consent.

9. Your Rights

At any time, you may request information from us regarding the processing of your personal data and exercise the following rights:

  • Right of access to your data (you may ask Belupo which of your personal data it uses, as well as request access to such data. You have the right to know the purpose of processing, which categories of your personal data we store, the recipients or categories of recipients with whom we share your personal data, the retention period, as well as the source of the data when they are collected indirectly),

  • Rectification or completion of your personal data to ensure they are always accurate (we want your personal information to be accurate and up to date. You may ask us to correct or remove information you believe is inaccurate or outdated),

  • Erasure of personal data (e.g. deletion of your user account)
    (you have the right to obtain from Belupo the erasure of personal data concerning you without undue delay, and Belupo is obliged to erase such data without undue delay if, among other things, the personal data are no longer necessary for the purpose of processing, if you have withdrawn consent, or if the personal data have been unlawfully processed),

  • Restriction of processing of personal data, for example when you contest the accuracy of personal data until we verify their accuracy,

  • Withdrawal of consent for data processing (e.g. for receiving promotional messages).

If you believe that any of your rights have been violated, you may lodge a complaint with the Personal Data Protection Agency at:

Ulica Metela Ožegovića 16, HR – 10 000 Zagreb
azop@azop.hr, web: www.azop.hr

10. Contact for Data Protection

Requests, complaints, or inquiries related to the processing and protection of personal data may be sent to the email address dpo@belupo.hr.

In accordance with applicable data protection laws, each request/inquiry will be resolved as soon as possible, and no later than 30 days from the date of receipt.

When you contact us and submit such requests, we will make reasonable efforts to verify your identity and prevent unauthorized processing of personal data.

You may exercise your rights by submitting a request via the designated form.

11. Third-Party Websites

On this page, you will find links to other websites or portals. The personal data protection policies on those portals may differ from these Rules, but they are aligned with the General Data Protection Regulation (GDPR).

Belupo is not responsible for the practices and conditions of third parties.

Belupo uses business profiles on LinkedIn, Facebook, Instagram, and YouTube. For more detailed information about the form of data processing, the possibilities for objections, privacy policies, and how these platforms use your personal data, please refer to:

 

Instagram: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy

 

Facebook: Social network; service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy

 

YouTube: Social network and video platform; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy: https://www.youtube.com/howyoutubeworks/privacy/

 

LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy

 

Belupo reserves the right to amend and supplement these Rules, and any changes will be published on the website.

Provide your feedback on BizChat

12. Cookies

To maintain the website and ensure its functionality operates at the expected level, Belupo uses a technology known as “cookies”.
Cookies are small files that we send to your computer and can later access. They may be temporary or permanent. Thanks to cookies, you can browse our pages without difficulty. Cookies show us what interests you and other visitors to our website, which helps us improve it.

You can find more information about cookies in the Terms of Use and Cookie Management. Belupo reserves the right to amend and supplement these Rules, and any changes will be published on the website.

These Rules enter into force upon their publication on the website.

These Rules were last amended on 5 November 2025.