PRIVACY STATEMENT FOR POTENTIAL FRANCHISEES
If you are interested in the Museum of Illusions franchise opportunity and choose to fill out the Franchisee inquiry form (hereinafter ‘Form’) available on our website https://www.museumofillusions.com/ or previously sent to you by us, please read this Privacy Statement for Potential Franchisees purpose of which is to provide you with information regarding the processing of your personal data which we have acquired through the Form.
If you are an officer, director or manager within the business entity of the potential franchisee or owner of the potential franchisee your personal data may be processed by us, for more information, see below under 2. WHAT IS PERSONAL DATA, WHY AND HOW DO WE PROCESS IT, Processing on basis of our legitimate interest.
The respective Privacy Statement for Potential Franchisees is made pursuant to the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “GDPR”).
1. ABOUT US
We are METAMORFOZA d.o.o. with registered seat in Zagreb, Ribnjak 2, Croatia, PIN [personal identification number]: 24880192958, RN [registration number]: 080714251 (hereinafter ‘We’).
We process your personal data as a controller in accordance with GDPR.
If you wish to withdraw your consent for our processing of your personal data, see below under 3. HOW CAN YOU WITHDRAW YOUR CONSENT?
To exercise all your rights regarding the protection of personal data, see below under 5. WHAT ARE YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA or contact us via our e-mail address info@museumofillusions.com.
2. WHAT IS PERSONAL DATA, WHY AND HOW DO WE PROCESS IT
‘Personal data’ is any information based on the identity of a natural person can be established either through the Form. Personal data is, for example, name, surname, address, employment data, etc.
Processing on basis of your consent
We process the following personal data which you provide us with through the Form on basis of your consent, i.e.
- Name and Surname
- E-mail address
- City, postal code, state/province, country
- Current occupation
- Managerial experience (alongside additional information you provide us through the Form),
- Previous experience with franchises (alongside additional information you provide us through the Form)
- Financial information regarding the potential franchisee operation
We use the above-mentioned personal data in order to get to know you as our potential franchisee and to share with you further information on the Museum of Illusions franchise opportunity. More precisely, we use the personal data to initially assess whether you meet our franchisee standards and to contact you regarding the possibility to conclude a franchising contract with you. If you do not provide us with your personal data, We would be unable to contact and assess you regarding the potential franchising possibility.
Processing on basis of our legitimate interest
The potential franchisee when filling out the Form (if applicable) may share with us some personal data of an officer, director or manager within the business entity of the potential franchisee or owner of the potential franchisee. In case such personal data have been shared with us We process such personal data on the basis of our legitimate interest.
We process only the data that the potential franchisee may have given us through the Form, namely:
- Name and Surname
- Address
- Title in the business entity
- Ownership percentage in the business entity
The above-mentioned personal data have been shared with us for the purpose of assessing the business structure of the potential franchisee and so We could conclude a franchise contract with the potential franchisee.
Since the respective processing is for business purpose, the personal data of third persons shared through the Form are not of such nature as to create risk and it is unlikely that the respective natural persons would not be aware of such processing, We deem that there is no risk to processing of such personal data.
The respective natural persons stated in the Form shall accordingly be treated as the potential franchisee regarding this Privacy Statement for Potential Franchisees.
Processing on basis of our legal obligation
Furthermore, in line with the above-mentioned processing, In case you request to exercise your rights under GDPR, We process your personal data on basis of our legal obligation to provide the exercise of your rights over your personal data, see below under 3. HOW CAN YOU WITHDRAW YOUR CONSENT? and 5. WHAT ARE YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA).
Automated individual decision-making, including profiling
We do not use automated individual decision-making, including profiling.
3. HOW CAN YOU WITHDRAW YOUR CONSENT?
You are authorized to withdraw your consent at any time by filling out and submitting this form via our e-mail address info@museumofillusions.com.
If you withdraw your consent, we shall stop processing your personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
4. PERIOD OF STORAGE OF YOUR PERSONAL DATA
We keep the personal data you provide us with for up to one year, after which we erase it.
If you choose to withdraw your consent to the processing of your personal data, we shall erase your data without undue delay.
5. WHO ASSISTS US IN PROCESSING PERSONAL DATA
Based on our orders and instructions, in accordance with the GDPR, the following categories or individuals provide us with support in the processing of personal data (Processors):
- for processing of personal data through the Form, We use Microsoft, to learn how Microsoft process personal data please follow the link https://privacy.microsoft.com/en-gb/privacystatement
6. WHAT ARE YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA?
| Your rights | What does that mean | Forms for exercising your rights |
| Right to information | You have the right to receive clear, transparent and easily understandable information on how we use your personal data and what are your rights regarding our processing of your personal data. For that reason, we provide you with the information from this Privacy Statement for Potential Franchisees. | |
| Right of access | You have the right to access and receive a written report on your personal data that we have collected. | Access request form |
| Right to rectification | You have the right to obtain the rectification of inaccurate personal data concerning you and the right to complete your incomplete personal data. | Rectification request form |
| Right to erasure (right to be forgotten) | In certain cases, you have the right to erase your personal data. We may erase your personal data if We have no legal or legitimate basis for the retention and/or further processing of your personal data. | Erasure request form |
| Right to restriction of processing | In certain cases, you may request that the processing of your personal data be restricted, which means that during the restriction of the processing we do store your personal data but process it only for a purpose for which no restriction of use is requested. | Restriction request form |
| Right to object to the processing of personal data based on our legitimate interest | You can object to our processing of your personal data based on our legitimate interest. We process the personal data of officers, directors, managers or owners of the potential franchisee on basis of our legitimate interest. | Erasure request form |
| The right to lodge a complaint with the supervisory authority and the right to an effective judicial remedy against the decision of the supervisory authority | Any person may lodge a complaint with the Croatian Personal Data Protection Agency for finding of infringement of rights; Croatian Personal Data Protection Agency Web: www.azop.hr. You have the right, in accordance with GDPR and the Croatian data protection laws and regulations, to file a legal remedy against the decision of the Croatian Personal Data Protection Agency. If you are a resident of an EU member state, please note that you are also entitled to contact and lodge a complaint with the data protection supervisory authority operating in the country of your residence. |
7. OTHER INFORMATION
We do not sell your personal data to third parties.
We do not transfer your personal data to third parties, such personal data may only be transferred to third parties if it is required by applicable laws and regulations.
We maintain appropriate technical and organizational measures to preserve the confidentiality and integrity of your personal data which can be accessed only by authorized persons through access user data.
Published in December 2021