Terms of use and notice on data processing via social media profiles

[02 March 2026]

This document contains the terms of use of our social media profiles and a notice on the processing of personal data that we, JT International Zagreb d.o.o., Slavonska avenija 6A, 10 000 Zagreb, Croatia (JTI, „we“, „ours“ or „us“), perform as part of the management of these profiles. The document applies to all users who access, follow or interact in any way with our social media profiles, specifically in connection with the use of our Instagram and LinkedIn social media profiles (hereinafter referred to as "Instagram profile", "LinkedIn profile" or collectively "our profiles").

Terms of use

On our website you can find a link to our official Instagram and LinkedIn profiles. By accessing, following or interacting in any way with our profiles, you agree to these Terms of Use.

All content posted on our profiles, including but not limited to text, photographs, graphics, logos, videos and other materials, is protected by copyright and other intellectual property rights. Unauthorized use, reproduction, distribution or modification of said content without our prior written consent is strictly prohibited.

Users are fully responsible for the content they post on our profiles. We reserve the right, without prior notice, to remove any content and to restrict or disable access to profiles of users who violate these Terms of Use.

We reserve the right to remove content that includes, but is not limited to:

  • Offensive, vulgar or aggressive speech, including comments that incite hatred, violence or discrimination on any grounds
  • Links, comments or other content of an illegal or inappropriate nature
  • Content that infringes the copyright or other intellectual property rights of third parties
  • Spam messages, as well as links or files that contain malware or viruses that may compromise the security of other users' computers or mobile devices
  • Comments that are intended to intimidate, threaten, or otherwise harass others, or content that misrepresents the identity of another person or organization

We are not responsible for the content posted by third parties (users) on our profiles, nor for the availability, functionality or security of the Instagram or LinkedIn platforms, for which the companies providing these platforms are solely responsible.

We reserve the right to amend and supplement these Terms of Use at any time. The amended Terms of Use shall enter into force on the date of their publication, of which we will notify users via our profiles or by other appropriate means. By continuing to use our profiles after the publication of the amended Terms of Use, you are deemed to have been informed of the amendments and to have accepted them.

Processing of personal data

1. Instagram profile

Our Instagram profile is used to provide information about our products, services and promotions and to communicate with users. Use of our Instagram profile is subject to these Terms of Use as well as the Instagram Terms of Use set forth by Meta Platforms Ireland Limited.

As a rule, the provider of the relevant social network is responsible for the protection of personal data, while in certain circumstances (primarily in relation to the operation of an official Instagram profile) we are joint controllers of personal data with Meta Platforms Ireland Limited, a member of the Meta Platforms Inc. group. More information on how data is processed via Instagram is available here, and in relation to joint processing, important information can be found here.

Through our Instagram profile, we provide information about our products and promotions and keep in touch with (potential) customers, adult users of nicotine products, regarding the services we offer.

We process your data to respond to your inquiries that you send us via our Instagram profile. The personal data we process depends on the specific inquiry, which are:

• Profile name

• Name and surname, if provided

• Contact information, if provided

• Content of your message or comment

• Date and time of communication

• Any attachments you may send (e.g. photos).


The processing of personal data for the activities described above is based on legitimate interest as defined in Article 6(1)(f) of the GDPR. Specifically, it is in our interest to maintain an Instagram profile and communicate with our customers and potential customers, including responding to queries, comments and complaints.

We do not store any personal information about interactions on our Instagram page in our own systems. All communication content and related personal information remain within the Instagram platform and is subject to Instagram's retention periods, as described in their privacy policy.

Profile visitors can delete individual messages, entire message histories, or comments they have posted at any time. Once such content is deleted, it will no longer be visible to us.

In cases where personal data is taken from Instagram because it is necessary to respond to your inquiry, or to comply with legal obligations or to establish, exercise or defend legal claims, such data will only be stored for as long as necessary for this purpose and in accordance with the applicable statutory retention periods or statute of limitations.

 

2. LinkedIn profile


We use LinkedIn profile to provide information about our company and its activities, publish job advertisements and communicate with interested parties and candidates. This includes corporate communications (e.g. company news) and other news, as well as measures to strengthen the appeal of our brand and us as an employer.

As a rule, the provider of the respective social network is responsible for the protection of personal data, while in certain circumstances (primarily in relation to the operation of the official LinkedIn profile) we are joint controllers of personal data processing with LinkedIn Ireland Unlimited Company. More information on how data is processed via LinkedIn is available here, and in relation to joint processing, important information can be found here.

When you interact with our LinkedIn page, e.g. by following our page, commenting on posts, sending us a message or applying for a position via LinkedIn, we process the personal data you provide to us.

The data we process are:

• Name and surname

• Contact information such as e-mail address or phone number, if you provide it

• Information you have published on your LinkedIn profile, e.g., where you work

• The content of the message or comment, as well as the date and time of communication and any attachments in the message.

The legal basis for the data processing activities described above is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR, namely, our interest in presenting our company via the LinkedIn platform, promoting our business activities and brand as an employer, advertising job vacancies and ensuring effective communication with interested parties, including responding to inquiries received.

As a rule, we do not store personal data collected through interactions on our LinkedIn page in our own systems. All communication content, together with the associated personal data, remains stored on the LinkedIn platform and is subject to the data retention periods applied by LinkedIn, which are described in more detail in their privacy policy.

Profile visitors can delete individual messages, entire message histories, or comments they've posted at any time. Once such content is deleted, it will no longer be visible to us.

In cases where personal data is collected from LinkedIn because it is necessary to respond to your inquiry, or to comply with legal obligations, or to establish, exercise or defend legal claims, such data will only be stored for as long as necessary for this purpose and in accordance with applicable statutory retention periods or statutes of limitations.

Transfer to third countries and your rights

Regarding the processing of data through both profiles, when we act as joint controllers, certain personal data may be transferred to the United States of America (USA). The European Commission has adopted an adequacy decision for the EU–US Data Privacy Framework, thereby ensuring an adequate level of protection of personal data, provided that the transfer is made to a certified service provider. Meta and LinkedIn are certified under the EU–US Data Privacy Framework.

In accordance with the applicable personal data protection regulations, and in particular the General Data Protection Regulation (GDPR), you have the following rights in relation to the processing of your personal data: the right of access, rectification, erasure (under certain conditions), restriction of processing (in certain cases), the right to object (which you may address to us) and the right to lodge a complaint with the competent supervisory authority for the protection of personal data (Croatian Personal Data Protection Agency, azop.hr).

For other information about our processing of personal data, about how you can contact us, as well as for information about your rights, please read the Privacy Policy.