Skip to main content
Smiling happy young man

Personal data protection

GDPR (General Data Protection Regulation) refers to the protection of individuals in relation to personal data processing and the freedom of movement of the data.

The objective of this EU Regulation, which entered into force on 25 May 2018, is improved protection of your personal data and fundamental freedoms related to personal data processing.

What is GDPR?

The GDPR (General Data Protection Regulation) refers to the protection of natural persons with regard to the processing of personal data and on the free movement of such data to the effect of better level of protection of the rights and freedoms of natural persons with regard to the processing and movement of such data. The Regulation is applicable in all countries of the European Union.

What does the GDPR mean to you?

The GDPR allows you, as an individual, a higher level of the rights and freedoms with regard to the processing and movement of your personal data. Every company that in any way collects your personal data is obligated to provide you with an intelligible and transparent explanation of the purpose for such data collection, the intended use and the storage period of such data. 

Personal data

What kind of personal data do we collect?

  • basic personal data
  • socio-demographic data
  • employment information
  • contact information
  • your business relationship as our client
  • information on your credit indebtedness and payment regularity at other credit institutions

Further information on the personal data collected can be found in the document - List and Categories of Processed Personal Data; the reasons for collection and processing of personal data can be found in Purposes and Legal Bases for Personal Data Collection and Processing

Our handling of personal data policy

Our handling of personal data policy can be found in the document Raiffeisen Leasing Handling of Personal Data Policy (available on Croatian only),  as well as in Handling of Personal Data Policy for Processors – Suppliers (available on Croatian only), Processing of Orders Policy in accordance with Article 28 of the General Data Protection Regulation GDPR.

Also available are the rights and obligations of our company as the data processor that handles personal data based on an agreement or order by the data controller, as well as of natural and legal persons who handle personal data as data processors based on orders by Raiffeisen Leasing d.o.o., during goods and/or services delivery.

More information

Data protection officer

In case of further inquiries regarding personal data protection, you can contact our Data Protection Officer at the e-mail address: zastita-osobnih-podataka@rba.hr or by post at Raiffeisenbank Austria d.d., Magazinska cesta 69, 10000 Zagreb marked “for the Data Protection Officer”.  

By signing the Consent for the use of personal data you can personally decide if you want to grant your consent to the use of your personal data for the purpose of tailored individual offers, as well as receiving information on the latest promotions and special offers. The Consent can be signed at any RBA branch. If you change your mind afterwards, you can equally withdraw the Consent. 

Osoba postavlja drvenu kocku s oznakom "Podaci" na druge kocke koje prikazuju simbol brava, što predstavlja sigurnost i zaštitu podataka.

Information on the processing of personal data in the registry base system between credit and financial institutions

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: Regulation), we are providing you with information about the beginning of the processing and exchange of client data by the Leasing company in the Basic Register System (OSR system) through the Croatian Register of Credit Obligations (Hrvatski registar obveza po kreditima d.o.o.), such data being the data on the financial obligations of all its clients for the purpose and to the effect of assessing creditworthiness and credit risk management.

Please note that the information also relates to the client's existing financial liabilities (regardless of whether they are due unpaid or not yet due) and to any settled financial obligations or otherwise closed financial obligations.

More information about the above is available in this document.