The Seller undertakes to protect the personal data of the Buyers and to collect only the necessary, basic data about the Buyers that are necessary to fulfill the obligations, to inform the Buyer about the method of using the collected data and to regularly provide the Buyers with the opportunity to choose the use of their data, including the possibility of deciding whether or not to remove their name from the lists used for marketing campaigns.
The Buyers’ personal data is collected and processed in accordance with the applicable regulations on the protection of personal data, in particular in accordance with the General Data Protection Regulation (GDPR) and other applicable regulations.
Types of personal data collected
The Seller may collect the following personal data: – name and surname, – delivery address, contact information (telephone, e-mail), – order and purchase data, – IP address and data on website usage (cookies), – data necessary for making payments
The Seller does not collect or process special categories of personal data.
Purpose of personal data processing
Personal data is processed for the following purposes: – execution of the purchase contract and delivery of the product, – communication with the buyer, – issuing invoices, – resolving complaints and objections, – fulfilling the seller’s legal obligations, – improving the user experience on the website, – sending promotional notifications (if the buyer has given consent).
Legal basis for processing
The processing of personal data is based on: – execution of the contract, – the seller’s legal obligation, – the seller’s legitimate interest, – the data subject’s consent (for marketing and newsletter).
The buyer may withdraw consent to the processing of data for marketing purposes at any time.
Data storage and security
The seller takes appropriate technical and organizational measures to protect personal data in order to prevent unauthorized access, loss, misuse or unauthorized disclosure of data.
Personal data is stored only for as long as necessary to achieve the purpose of the processing or as prescribed by legal obligations (e.g., keeping accounting documents).
Sharing of personal data
Personal data may be forwarded to third parties only when necessary for the performance of a contract or legal obligation, for example: – delivery services, – payment service providers, – accounting services, – IT service providers.
The data will not be sold or transferred to unauthorized persons.
Rights of the data subjects
Customers have the right to: request access to their personal data, correct inaccurate data, request deletion of data, restrict data processing, object to processing, request data transfer, withdraw consent.
To exercise their rights, users can contact the Seller via the contact details published on the website.
If they believe that their rights have been violated, users can file a complaint with the supervisory authority – the Personal Data Protection Agency (AZOP).
Changes to the Privacy Policy
The Seller reserves the right to change or amend this Privacy Policy at any time for the purpose of: 1. Compliance with applicable laws and regulations – e.g. changes to the GDPR, the Personal Data Protection Act or other relevant laws in the Republic of Croatia and the EU. 2. Change in business processes – including new methods of processing personal data, new services, ways of communicating with users or changes in the web shop systems, 3. Security and technology improvements – including technical or organizational data protection measures, 4. Updates regarding third parties – changes in cooperation with delivery services, payment systems, IT service providers or marketing partners.
Notification of changes
When there is a change or amendment to the Privacy Policy: – Publication on the website: the new version of the Privacy Policy will be published on the website, with the date of the last change clearly stated, – Communication to users: in the event of significant changes, Customers will be notified via e-mail or other appropriate communication channel, especially if the changes affect the way their personal data is collected or processed. – User consent: in the event that the changes require new consent (permission), Customers will be required to provide explicit consent before continuing to use the web shop and services.
User responsibility
Customers are required to periodically check the Privacy Policy on the website in order to be informed of any changes. By using the web store after the publication of the changes, the Buyers are deemed to agree to the new terms of processing personal data.
History of changes
The Seller may keep records of previous versions of the Privacy Policy for the purpose of transparency and legal certainty. Buyers may, upon request, request access to previous versions of the Policy.
Legal protection
In the event of a dispute regarding changes to the Privacy Policy or the processing of personal data, the Buyer has the right to contact the competent data protection authority — the Personal Data Protection Agency (AZOP) — or the competent court in the Republic of Croatia.