Notice of Alleged Unauthorized Handling of Personal Data.

Upon examining its own systems, EOS Matrix has determined that there has been no security breach, nor has there been any internal unauthorized handling of personal data. This has also not been identified through previous continuous and intensive inspections of information systems.

Appropriate organizational and technical measures for the protection of personal data are applied in handling personal data, all in accordance with the positive provisions of the General Data Protection Regulation. Consequently, the personal data of citizens within the EOS Matrix system have not been compromised in any way.

Media reports regarding the "leakage" of personal data do not impact the continuity of operations or jeopardize the personal data of citizens recorded in our database. Accordingly, EOS Matrix continues its regular business activities.

We also emphasize that EOS Matrix Ltd. holds the ISO 27001 certification, a global standard for information security. This independent standardization guarantees additional and comprehensive protection, recognition, and risk management.

EOS Matrix had previously, specifically on Tuesday, March 21, informed the Personal Data Protection Agency about speculation regarding the "leakage" of personal data. We are fully cooperating and in communication with the Personal Data Protection Agency, intending to protect the rights and data of our users and EOS Matrix by considering legal options and addressing this case with the competent authorities of the Republic of Croatia.

Rights related to the protection of personal data and the method of exercising these rights concerning EOS Matrix d.o.o. are specified in the Privacy Policy available at: https://hr.eos-solutions.com/privacy-policy.

In accordance with the Privacy Policy, requests for exercising the rights of the data subject are directed to the Data Protection Officer via regular mail to the company's headquarters, marked "for the Data Protection Officer," or via email to: [email protected], and should contain at least the following information:
 

1. Data subject's personal information (Name, surname, and OIB for identification purposes)
2. Data subject's request
3. Address for delivering the response to the request